$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AADC68CACCD7A12B6A019949E964F33953EF7228.cer File: AADC68CACCD7A12B6A019949E964F33953EF7228.cer (raw, json) Hash identifier: wgGrETdN3G52vl7CyA2rvtzUTie7QWzPWzthCB+nd/g= Subject key identifier: AA:DC:68:CA:CC:D7:A1:2B:6A:01:99:49:E9:64:F3:39:53:EF:72:28 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1727775AC47F0FCFBA538A509DF981CA91B68250 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 17:00:47 +0000 Certificate not after: Wed 27 Jan 2027 17:05:47 +0000 Subordinate resources: AS: 271885 IP: 45.68.4.0/22 IP: 2801:12:e800::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:27:77:5a:c4:7f:0f:cf:ba:53:8a:50:9d:f9:81:ca:91:b6:82:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 17:00:47 2026 GMT Not After : Jan 27 17:05:47 2027 GMT Subject: CN=AADC68CACCD7A12B6A019949E964F33953EF7228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bb:c8:c9:53:fe:30:d3:a6:49:35:44:35:ab: d6:cf:3b:b9:ae:42:ea:f2:62:a9:ca:80:a5:3b:20: 2b:bd:b7:1f:32:a0:3a:a4:94:e3:56:26:3d:ce:b2: ea:2d:ed:58:06:3c:9e:1c:cc:94:cc:d9:7f:41:e3: be:62:09:dc:34:01:fd:07:56:a5:ff:e4:60:b5:d6: 3c:31:38:c8:54:09:5c:f9:07:87:7f:fa:f7:32:e7: 63:d6:b6:6c:0d:80:10:0c:a8:31:00:9e:cd:b2:cb: 69:b7:52:24:5e:cf:91:49:3b:a4:4d:97:fb:53:07: d8:2c:3a:a8:4f:c1:18:4d:c7:40:86:6a:5b:d9:d1: c1:6f:e9:b7:5c:a8:e0:44:1f:71:b1:3d:0f:9e:b3: af:a5:00:b9:0e:01:0f:9f:31:04:da:8b:da:76:74: 69:9b:19:b7:eb:30:7d:9a:f4:a1:8a:0a:0f:d8:ff: 5d:37:26:1b:2b:65:f6:a3:b3:30:22:30:01:9d:81: 38:ef:e6:55:6b:38:ab:bf:f0:c4:86:6a:2a:8b:d3: a9:69:9f:08:7b:14:fe:2f:05:52:7f:17:c8:95:43: 2b:5d:c4:eb:16:7f:88:0b:41:5d:01:a6:69:93:86: 32:d8:a8:7f:aa:cc:aa:45:8a:86:dd:ab:ca:e0:ac: 31:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AA:DC:68:CA:CC:D7:A1:2B:6A:01:99:49:E9:64:F3:39:53:EF:72:28 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.68.4.0/22 IPv6: 2801:12:e800::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271885 Signature Algorithm: sha256WithRSAEncryption 6f:30:6f:64:6e:df:3f:e7:7c:1e:61:9a:15:e5:ca:8d:89:ae: ba:91:48:f8:09:d9:60:ac:3f:47:c0:b6:39:19:e9:33:29:98: c5:eb:65:c3:e7:c1:9c:11:b4:bd:17:27:5b:7e:48:7c:d4:d8: d2:00:8b:ed:aa:c5:29:c1:c6:2b:be:5b:d2:4a:e9:01:a8:70: ec:56:86:dd:43:74:6e:07:8d:50:d0:79:1e:fd:45:ed:0c:b0: 21:42:37:ea:9d:4a:3a:73:b6:24:0a:56:d0:79:aa:10:5b:d3: 3d:cb:3f:c8:ba:b4:3c:af:d2:aa:43:18:a2:6e:e0:5d:54:8a: af:14:33:6d:2b:1d:2b:bd:f3:77:13:ae:40:18:39:95:ee:24: b8:7d:b2:28:89:dd:70:fa:e9:7d:0d:b3:34:c4:58:04:b5:49: fe:89:ef:22:88:da:1f:2b:0e:0e:88:e8:ab:ae:c6:a0:97:47: 0c:96:3d:d1:90:e8:34:fd:45:db:93:48:5a:c9:4d:86:fc:c8: c8:4f:2a:a8:e4:dd:1c:0e:49:25:84:22:47:e7:89:94:c7:83: 1a:16:f6:c5:1c:30:b8:5c:8b:37:b8:6f:18:ea:3e:6f:3c:1f: ba:0a:83:50:d3:78:48:fe:94:97:ca:43:2a:9c:33:c7:d8:96: 86:4b:42:2e -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUFyd3WsR/D8+6U4pQnfmBypG2glAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNzAwNDdaFw0yNzAxMjcxNzA1NDdaMDMxMTAvBgNV BAMTKEFBREM2OENBQ0NEN0ExMkI2QTAxOTk0OUU5NjRGMzM5NTNFRjcyMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJu8jJU/4w06ZJNUQ1q9bPO7mu QuryYqnKgKU7ICu9tx8yoDqklONWJj3Osuot7VgGPJ4czJTM2X9B475iCdw0Af0H VqX/5GC11jwxOMhUCVz5B4d/+vcy52PWtmwNgBAMqDEAns2yy2m3UiRez5FJO6RN l/tTB9gsOqhPwRhNx0CGalvZ0cFv6bdcqOBEH3GxPQ+es6+lALkOAQ+fMQTai9p2 dGmbGbfrMH2a9KGKCg/Y/103JhsrZfajszAiMAGdgTjv5lVrOKu/8MSGaiqL06lp nwh7FP4vBVJ/F8iVQytdxOsWf4gLQV0BpmmThjLYqH+qzKpFiobdq8rgrDGlAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSq3GjKzNehK2oB mUnpZPM5U+9yKDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjIxRUQxMTREQkQ2MDk4QzI4RUE5REZD MzNFMEZCMUFDREFDQjQxMEM5MUQ3MjVBMUMyMjk1QjQzOUE5RkMzQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CMjFFRDExNERCRDYwOThDMjhFQTlERkMzM0UwRkIxQUNEQUNCNDEwQzkx RDcyNUExQzIyOTVCNDM5QTlGQzNDLzAvQUFEQzY4Q0FDQ0Q3QTEyQjZBMDE5OTQ5 RTk2NEYzMzk1M0VGNzIyOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLUQEMA8EAgAC MAkDBwAoAQAS6AAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCYNMA0GCSqGSIb3 DQEBCwUAA4IBAQBvMG9kbt8/53weYZoV5cqNia66kUj4CdlgrD9HwLY5GekzKZjF 62XD58GcEbS9Fydbfkh81NjSAIvtqsUpwcYrvlvSSukBqHDsVobdQ3RuB41Q0Hke /UXtDLAhQjfqnUo6c7YkClbQeaoQW9M9yz/IurQ8r9KqQxiibuBdVIqvFDNtKx0r vfN3E65AGDmV7iS4fbIoid1w+ul9DbM0xFgEtUn+ie8iiNofKw4OiOirrsagl0cM lj3RkOg0/UXbk0hayU2G/MjITyqo5N0cDkklhCJH54mUx4MaFvbFHDC4XIs3uG8Y 6j5vPB+6CoNQ03hI/pSXykMqnDPH2JaGS0Iu -----END CERTIFICATE-----Generated at Mon Mar 2 15:53:05 2026 by rpki-client