$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.cer File: B0F0C9DD73F6C1475F1456103DA6BB622464669F.cer (raw, json) Hash identifier: LXZ+ZavneiukScUX1BgOMEqsMSzvm+aWEXCo3myIZNA= Subject key identifier: B0:F0:C9:DD:73:F6:C1:47:5F:14:56:10:3D:A6:BB:62:24:64:66:9F Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 5460B17619CACD15A5C978C71D6B66C3936EE722 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 01:46:37 +0000 Certificate not after: Thu 28 Jan 2027 01:51:37 +0000 Subordinate resources: AS: 269815 IP: 45.186.108.0/22 IP: 2803:fb60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:60:b1:76:19:ca:cd:15:a5:c9:78:c7:1d:6b:66:c3:93:6e:e7:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 01:46:37 2026 GMT Not After : Jan 28 01:51:37 2027 GMT Subject: CN=B0F0C9DD73F6C1475F1456103DA6BB622464669F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:46:96:e2:16:8a:89:6c:d3:fa:21:f5:c7:19: 69:38:ee:f1:b1:7b:53:df:16:ba:d6:43:b9:2e:20: 4f:fe:5c:f6:ee:b4:bc:1c:76:bc:40:31:de:e9:7c: 1e:a8:f4:50:ca:3a:c1:9c:d4:07:92:a2:1f:67:3a: 5d:16:60:1b:4b:c9:23:4a:63:37:41:3d:f7:63:a4: 7c:06:dd:73:6b:8f:e4:3c:de:cc:17:31:90:89:41: c8:12:92:a5:64:f0:f8:0a:87:48:5a:f2:2d:e1:13: 16:4f:4d:76:aa:36:b1:42:6a:89:5b:3c:87:ff:93: aa:ce:62:66:71:2b:69:dd:4a:09:5a:e2:07:f9:3f: d9:dc:b7:fe:e3:27:38:4a:cb:b3:b5:1c:ee:48:d6: f2:c7:86:d8:3b:ab:ea:9e:00:64:90:86:28:00:f0: bf:87:71:a6:2a:90:e8:e1:1a:b6:aa:22:26:ff:cb: 1a:04:1d:d1:0a:de:70:b6:ef:9f:fe:e0:2d:eb:f5: 98:ba:9b:a1:9c:2c:f2:f7:ad:f8:f8:0b:03:bc:98: 51:fa:aa:d6:79:b1:c3:2b:f9:e2:22:03:c3:98:58: 59:45:c0:1d:04:0a:6c:fc:c0:bf:8d:8d:b7:38:25: a7:28:bc:f4:f5:0b:ae:69:cd:2c:89:47:d0:57:ee: 24:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B0:F0:C9:DD:73:F6:C1:47:5F:14:56:10:3D:A6:BB:62:24:64:66:9F X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.186.108.0/22 IPv6: 2803:fb60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269815 Signature Algorithm: sha256WithRSAEncryption 7b:41:b0:25:4e:26:e0:58:13:86:2a:3d:24:f9:8f:f3:e8:16: 2b:fa:c0:ec:4b:39:51:1b:5a:82:dc:7f:e9:81:38:24:f7:66: 0c:c9:47:2d:cd:a8:ea:17:8b:cf:b6:de:7c:e3:40:3a:a3:a6: f6:14:6f:0a:59:17:08:e5:de:31:4a:11:ff:ba:8d:a5:70:f1: aa:93:d4:3f:f9:ce:58:a0:46:77:7d:14:fa:32:c8:4f:71:01: 67:e6:14:8a:f8:cb:0b:bd:e4:d2:14:27:75:18:9a:ab:bf:e2: 54:fc:59:55:74:e1:09:75:aa:74:16:6a:93:71:d4:c8:fd:2d: bd:b0:11:af:4f:bb:50:eb:2f:e2:8e:9a:76:2c:b0:70:03:3f: ed:cf:b1:40:87:bb:2b:fb:c1:7d:95:5a:1a:b7:de:d2:22:24: 88:9b:57:08:0f:94:01:9c:69:c6:53:1a:d3:f1:68:d3:4d:fe: 43:96:35:89:f7:83:59:2f:12:90:0c:ca:9c:de:b5:cf:9f:6d: 0b:7a:ec:16:74:63:da:52:55:47:fc:39:54:af:a1:5c:41:4c: 64:83:72:5b:17:fd:05:24:a8:74:14:f7:3a:a6:19:27:33:c6: bf:1a:88:b9:c0:20:15:fa:d6:a1:a5:e8:62:ee:85:79:12:8b: f3:bc:45:54 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUVGCxdhnKzRWlyXjHHWtmw5Nu5yIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMTQ2MzdaFw0yNzAxMjgwMTUxMzdaMDMxMTAvBgNV BAMTKEIwRjBDOURENzNGNkMxNDc1RjE0NTYxMDNEQTZCQjYyMjQ2NDY2OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuRpbiFoqJbNP6IfXHGWk47vGx e1PfFrrWQ7kuIE/+XPbutLwcdrxAMd7pfB6o9FDKOsGc1AeSoh9nOl0WYBtLySNK YzdBPfdjpHwG3XNrj+Q83swXMZCJQcgSkqVk8PgKh0ha8i3hExZPTXaqNrFCaolb PIf/k6rOYmZxK2ndSgla4gf5P9nct/7jJzhKy7O1HO5I1vLHhtg7q+qeAGSQhigA 8L+HcaYqkOjhGraqIib/yxoEHdEK3nC275/+4C3r9Zi6m6GcLPL3rfj4CwO8mFH6 qtZ5scMr+eIiA8OYWFlFwB0ECmz8wL+Njbc4JacovPT1C65pzSyJR9BX7iTTAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSw8Mndc/bBR18U VhA9prtiJGRmnzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjQxREU1QjYzMjAyMzhBMjdDOEFFNDVB OTY3NjIxQzhFMzdCRTcwRjczOTc5MjRCQ0Y1MjREMDRDNEJBNzM5MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GNDFERTVCNjMyMDIzOEEyN0M4QUU0NUE5Njc2MjFDOEUzN0JFNzBGNzM5 NzkyNEJDRjUyNEQwNEM0QkE3MzkwLzAvQjBGMEM5REQ3M0Y2QzE0NzVGMTQ1NjEw M0RBNkJCNjIyNDY0NjY5Ri5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLbpsMA0EAgAC MAcDBQAoA/tgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQd9zANBgkqhkiG9w0B AQsFAAOCAQEAe0GwJU4m4FgThio9JPmP8+gWK/rA7Es5URtagtx/6YE4JPdmDMlH Lc2o6heLz7befONAOqOm9hRvClkXCOXeMUoR/7qNpXDxqpPUP/nOWKBGd30U+jLI T3EBZ+YUivjLC73k0hQndRiaq7/iVPxZVXThCXWqdBZqk3HUyP0tvbARr0+7UOsv 4o6adiywcAM/7c+xQIe7K/vBfZVaGrfe0iIkiJtXCA+UAZxpxlMa0/Fo003+Q5Y1 ifeDWS8SkAzKnN61z59tC3rsFnRj2lJVR/w5VK+hXEFMZINyWxf9BSSodBT3OqYZ JzPGvxqIucAgFfrWoaXoYu6FeRKL87xFVA== -----END CERTIFICATE-----Generated at Mon Mar 2 12:50:09 2026 by rpki-client