$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.cer File: AF75F7E85911B6D6A42FE6E1822724A7A7950D96.cer (raw, json) Hash identifier: OEC7f3m4smhksKop3TR4AS9oKAx/jNz1OY6N5U8z89U= Subject key identifier: AF:75:F7:E8:59:11:B6:D6:A4:2F:E6:E1:82:27:24:A7:A7:95:0D:96 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 5641B19D73A778492FD7B2D7C42ADA37A8D9D43A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 17:36:25 +0000 Certificate not after: Wed 27 Jan 2027 17:41:25 +0000 Subordinate resources: AS: 269786 IP: 45.188.208.0/22 IP: 2803:5f60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:41:b1:9d:73:a7:78:49:2f:d7:b2:d7:c4:2a:da:37:a8:d9:d4:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 17:36:25 2026 GMT Not After : Jan 27 17:41:25 2027 GMT Subject: CN=AF75F7E85911B6D6A42FE6E1822724A7A7950D96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dc:f1:e0:46:00:50:94:55:fd:e9:47:e4:5c: b1:ae:d3:57:3f:2c:ba:72:81:56:9d:ea:31:9e:a8: a5:cf:30:4d:0e:4f:27:b5:5c:0e:23:f4:6a:1a:25: 4f:2c:d8:ab:5c:76:0d:a2:63:01:60:9a:d3:1a:6d: f3:ca:37:40:f3:fe:f9:eb:33:d7:c7:8d:55:96:ef: 14:a9:19:39:72:f8:4a:99:ac:2e:ce:ba:9b:b5:d7: 15:d4:47:be:1e:08:3f:18:fc:42:30:b8:90:69:c9: ca:8f:6a:90:63:6b:ff:3f:88:aa:19:b1:2f:fa:7b: ef:c4:ff:c0:ec:31:c1:c4:dc:60:45:bd:22:fc:b5: b6:50:01:32:88:ac:03:ae:02:52:e8:2d:81:43:67: 84:ed:52:06:8f:f9:25:3c:cd:53:13:3a:c7:85:4f: ff:eb:8e:7a:01:df:fe:c8:bf:1b:a2:af:98:ea:1c: b2:16:ff:3d:08:57:75:bb:c0:b2:24:a4:50:22:79: a9:83:8c:fb:c8:ce:b7:3a:4c:43:f8:4f:f5:82:d1: 3d:b9:b4:c4:63:b7:f6:50:4a:85:b6:1e:11:2e:2d: 01:cb:7a:d1:d5:55:24:d7:8e:d4:e2:a8:8b:8c:82: 8a:9c:79:1b:8a:29:53:2a:36:7f:de:33:19:1e:74: 19:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:75:F7:E8:59:11:B6:D6:A4:2F:E6:E1:82:27:24:A7:A7:95:0D:96 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.188.208.0/22 IPv6: 2803:5f60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269786 Signature Algorithm: sha256WithRSAEncryption 58:88:a4:d7:0c:93:d5:18:3f:d0:01:2a:cd:7c:c5:24:b2:87: 58:01:4a:67:2e:90:67:83:c8:90:fc:23:c3:e9:a8:0f:f8:57: 6f:cd:64:a4:fd:a8:ad:c6:f9:43:57:99:66:05:ed:d3:fc:d0: fb:a5:39:d3:04:c2:ed:fe:cd:55:c0:82:4f:7b:fd:c7:9e:ab: ee:1c:44:3c:ee:71:30:75:f4:61:61:93:a5:a7:59:33:23:ce: 56:de:fb:04:08:09:55:9b:1a:c4:2b:d0:c4:77:d5:9b:14:2b: c7:da:50:70:55:55:66:f0:2e:23:8b:a0:08:e6:2b:20:19:c5: 34:f7:2d:c7:a4:3c:3d:6a:44:02:c8:ce:4a:4a:6f:00:8d:58: 08:08:31:e9:e3:20:75:a6:1e:6b:90:da:87:6b:87:19:9b:3e: 89:51:ce:a2:b1:ca:c4:4b:d7:88:2f:ca:39:eb:22:a7:3d:cd: 35:4e:fa:88:62:ea:38:c0:ce:9c:36:79:21:b1:89:22:87:0a: 6c:89:ee:14:14:b0:a6:09:d4:51:19:6e:1b:5a:35:27:15:49: ae:cd:8f:55:01:28:75:64:ea:a6:b5:6a:b9:b8:81:bc:fc:e3: 8a:1b:38:7e:c6:94:51:77:29:85:70:9c:74:d9:cf:64:1a:3e: 30:a9:dc:ee -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUVkGxnXOneEkv17LXxCraN6jZ1DowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNzM2MjVaFw0yNzAxMjcxNzQxMjVaMDMxMTAvBgNV BAMTKEFGNzVGN0U4NTkxMUI2RDZBNDJGRTZFMTgyMjcyNEE3QTc5NTBEOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA3PHgRgBQlFX96UfkXLGu01c/ LLpygVad6jGeqKXPME0OTye1XA4j9GoaJU8s2Ktcdg2iYwFgmtMabfPKN0Dz/vnr M9fHjVWW7xSpGTly+EqZrC7Oupu11xXUR74eCD8Y/EIwuJBpycqPapBja/8/iKoZ sS/6e+/E/8DsMcHE3GBFvSL8tbZQATKIrAOuAlLoLYFDZ4TtUgaP+SU8zVMTOseF T//rjnoB3/7Ivxuir5jqHLIW/z0IV3W7wLIkpFAieamDjPvIzrc6TEP4T/WC0T25 tMRjt/ZQSoW2HhEuLQHLetHVVSTXjtTiqIuMgoqceRuKKVMqNn/eMxkedBkVAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSvdffoWRG21qQv 5uGCJySnp5UNljAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjIxQ0Y0REU0NzgyREZGRUFFNDY1RkNB MjY5QTY3NTExN0VBNUEzNkYzRDE2RUMyN0ZENzg5RkZFRDk5NDgzRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GMjFDRjRERTQ3ODJERkZFQUU0NjVGQ0EyNjlBNjc1MTE3RUE1QTM2RjNE MTZFQzI3RkQ3ODlGRkVEOTk0ODNGLzAvQUY3NUY3RTg1OTExQjZENkE0MkZFNkUx ODIyNzI0QTdBNzk1MEQ5Ni5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLbzQMA0EAgAC MAcDBQAoA19gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQd2jANBgkqhkiG9w0B AQsFAAOCAQEAWIik1wyT1Rg/0AEqzXzFJLKHWAFKZy6QZ4PIkPwjw+moD/hXb81k pP2orcb5Q1eZZgXt0/zQ+6U50wTC7f7NVcCCT3v9x56r7hxEPO5xMHX0YWGTpadZ MyPOVt77BAgJVZsaxCvQxHfVmxQrx9pQcFVVZvAuI4ugCOYrIBnFNPctx6Q8PWpE AsjOSkpvAI1YCAgx6eMgdaYea5Dah2uHGZs+iVHOorHKxEvXiC/KOesipz3NNU76 iGLqOMDOnDZ5IbGJIocKbInuFBSwpgnUURluG1o1JxVJrs2PVQEodWTqprVqubiB vPzjihs4fsaUUXcphXCcdNnPZBo+MKnc7g== -----END CERTIFICATE-----Generated at Mon Mar 2 15:20:37 2026 by rpki-client