$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A768F5A0FB38E66A2449933CAAFD8FDF35C00C68.cer File: A768F5A0FB38E66A2449933CAAFD8FDF35C00C68.cer (raw, json) Hash identifier: 8Q7vhFJoNJAxnAs9GSyuoccHxe5pL9SJhNgmtvf+3w4= Subject key identifier: A7:68:F5:A0:FB:38:E6:6A:24:49:93:3C:AA:FD:8F:DF:35:C0:0C:68 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4B4F4B12DE6FCAD61DD58D0C81EC7DA620C7416C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/EAE7102B03D15AF685088BD05F8E7EBAD6E04F941EC2F498A4013AD8C904E1D8/0/A768F5A0FB38E66A2449933CAAFD8FDF35C00C68.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/EAE7102B03D15AF685088BD05F8E7EBAD6E04F941EC2F498A4013AD8C904E1D8/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 30 Jan 2026 06:41:39 +0000 Certificate not after: Fri 29 Jan 2027 06:46:39 +0000 Subordinate resources: AS: 272883 IP: 185.172.176.0/22 IP: 2803:5a90::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:4f:4b:12:de:6f:ca:d6:1d:d5:8d:0c:81:ec:7d:a6:20:c7:41:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 30 06:41:39 2026 GMT Not After : Jan 29 06:46:39 2027 GMT Subject: CN=A768F5A0FB38E66A2449933CAAFD8FDF35C00C68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:55:2a:31:b0:a9:3e:d3:fe:06:05:7d:a2:59: ba:10:85:5d:ad:4e:6d:b8:86:91:81:c1:a8:cb:59: 41:0f:40:fd:b6:38:1f:91:35:65:d2:c0:8a:f9:8d: 01:23:95:be:cf:71:36:b7:40:57:da:59:2f:83:5b: a4:8b:c0:87:a8:58:56:4d:7f:52:d1:e9:bd:17:12: a6:5e:12:7b:1a:e2:dd:27:9e:3a:c4:20:1c:ac:28: 51:4c:98:78:ed:21:eb:c2:89:e1:d7:b2:d9:ff:47: 14:de:52:f2:2d:e7:3c:79:c6:a3:93:43:af:44:a8: ce:06:43:d6:93:6d:c8:fd:59:53:06:dd:7e:9d:bc: 23:28:5c:e2:76:bb:ac:c1:9d:20:db:df:ca:9c:75: 9c:1f:0a:17:d4:df:5d:fb:4f:a8:0d:e8:e5:34:74: 25:8d:8c:75:49:02:3f:f1:d7:18:b0:c1:d7:9a:e2: 51:40:ba:1b:c3:e4:7f:1e:51:90:31:6a:56:2f:54: dc:24:ee:5c:2b:f2:0b:4d:2f:55:21:32:80:fe:2e: e4:b2:ea:93:ad:07:ff:98:f0:cb:e8:7e:71:27:9b: ce:85:70:83:e7:55:e7:a2:a6:c3:3b:37:c6:40:5c: 7c:48:97:bf:e0:40:04:b6:11:40:9f:f3:bd:7c:4a: 14:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A7:68:F5:A0:FB:38:E6:6A:24:49:93:3C:AA:FD:8F:DF:35:C0:0C:68 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EAE7102B03D15AF685088BD05F8E7EBAD6E04F941EC2F498A4013AD8C904E1D8/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EAE7102B03D15AF685088BD05F8E7EBAD6E04F941EC2F498A4013AD8C904E1D8/0/A768F5A0FB38E66A2449933CAAFD8FDF35C00C68.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.176.0/22 IPv6: 2803:5a90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272883 Signature Algorithm: sha256WithRSAEncryption 54:d3:ff:fa:59:2b:8c:32:ae:50:fb:42:e9:4c:b6:c5:1c:a4: ba:22:c7:5b:93:51:47:a2:bd:24:d2:ec:f6:55:9e:b9:1e:92: 70:d5:b6:8e:8d:4b:be:96:e2:07:ff:bd:c4:fe:8c:cd:86:6b: c5:61:bb:50:f4:c9:e1:a7:8a:8a:22:1a:3e:ae:b4:a4:b0:f4: 42:c6:f4:0f:1a:b3:00:12:bb:c8:2d:aa:df:3b:90:c9:44:9b: f5:ed:d2:4b:e0:b1:af:de:59:1f:ea:20:d2:fb:fd:65:20:88: 82:20:05:54:b5:6a:7d:17:bc:01:ce:89:eb:72:f4:89:37:c8: 08:47:1b:94:5a:0a:c9:a3:eb:26:d3:92:79:31:e2:86:d5:ef: 4a:ff:61:bd:99:c7:2e:d1:09:de:5b:22:68:fb:e3:77:8c:a6: 5f:a0:e0:e6:16:4e:24:76:bf:c5:07:69:04:d9:cf:f0:e8:d6: 40:06:d0:91:43:29:bf:8f:d2:90:dd:10:46:71:de:19:ca:c4: 8e:c4:bf:5a:c0:e2:ce:d6:af:4b:2c:d2:df:a4:71:82:d7:62: e0:a6:73:a7:72:99:bd:9d:71:54:1b:ba:8c:58:f9:2e:53:27: 2f:0b:bb:3c:5b:c9:b7:4d:bc:39:3b:8c:6d:dc:4b:72:69:75: 26:dd:39:c1 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUS09LEt5vytYd1Y0Mgex9piDHQWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMzAwNjQxMzlaFw0yNzAxMjkwNjQ2MzlaMDMxMTAvBgNV BAMTKEE3NjhGNUEwRkIzOEU2NkEyNDQ5OTMzQ0FBRkQ4RkRGMzVDMDBDNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAVSoxsKk+0/4GBX2iWboQhV2t Tm24hpGBwajLWUEPQP22OB+RNWXSwIr5jQEjlb7PcTa3QFfaWS+DW6SLwIeoWFZN f1LR6b0XEqZeEnsa4t0nnjrEIBysKFFMmHjtIevCieHXstn/RxTeUvIt5zx5xqOT Q69EqM4GQ9aTbcj9WVMG3X6dvCMoXOJ2u6zBnSDb38qcdZwfChfU3137T6gN6OU0 dCWNjHVJAj/x1xiwwdea4lFAuhvD5H8eUZAxalYvVNwk7lwr8gtNL1UhMoD+LuSy 6pOtB/+Y8MvofnEnm86FcIPnVeeipsM7N8ZAXHxIl7/gQAS2EUCf8718ShSDAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSnaPWg+zjmaiRJ kzyq/Y/fNcAMaDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRUFFNzEwMkIwM0QxNUFGNjg1MDg4QkQw NUY4RTdFQkFENkUwNEY5NDFFQzJGNDk4QTQwMTNBRDhDOTA0RTFEOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FQUU3MTAyQjAzRDE1QUY2ODUwODhCRDA1RjhFN0VCQUQ2RTA0Rjk0MUVD MkY0OThBNDAxM0FEOEM5MDRFMUQ4LzAvQTc2OEY1QTBGQjM4RTY2QTI0NDk5MzND QUFGRDhGREYzNUMwMEM2OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaywMA0EAgAC MAcDBQAoA1qQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQp8zANBgkqhkiG9w0B AQsFAAOCAQEAVNP/+lkrjDKuUPtC6Uy2xRykuiLHW5NRR6K9JNLs9lWeuR6ScNW2 jo1LvpbiB/+9xP6MzYZrxWG7UPTJ4aeKiiIaPq60pLD0Qsb0DxqzABK7yC2q3zuQ yUSb9e3SS+Cxr95ZH+og0vv9ZSCIgiAFVLVqfRe8Ac6J63L0iTfICEcblFoKyaPr JtOSeTHihtXvSv9hvZnHLtEJ3lsiaPvjd4ymX6Dg5hZOJHa/xQdpBNnP8OjWQAbQ kUMpv4/SkN0QRnHeGcrEjsS/WsDiztavSyzS36Rxgtdi4KZzp3KZvZ1xVBu6jFj5 LlMnLwu7PFvJt028OTuMbdxLcml1Jt05wQ== -----END CERTIFICATE-----Generated at Mon Mar 2 13:33:11 2026 by rpki-client