$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4FAD5892B5C3B4C5DCE937F49F473A06CD58CD7.cer File: B4FAD5892B5C3B4C5DCE937F49F473A06CD58CD7.cer (raw, json) Hash identifier: 65WYIAi8TnOAL9lauqipXSZ6Wso+nQozYXCbKx9mR6w= Subject key identifier: B4:FA:D5:89:2B:5C:3B:4C:5D:CE:93:7F:49:F4:73:A0:6C:D5:8C:D7 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 494DA0224816397B3695BD7E0873D0B600CC6737 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D75486FBDF7610FAF5969DB68B60F221410E2B92996C63937C34D0FBBED14059/0/B4FAD5892B5C3B4C5DCE937F49F473A06CD58CD7.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D75486FBDF7610FAF5969DB68B60F221410E2B92996C63937C34D0FBBED14059/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 14:26:28 +0000 Certificate not after: Wed 27 Jan 2027 14:31:28 +0000 Subordinate resources: AS: 264739 IP: 170.254.156.0/22 IP: 2803:b740::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:4d:a0:22:48:16:39:7b:36:95:bd:7e:08:73:d0:b6:00:cc:67:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 14:26:28 2026 GMT Not After : Jan 27 14:31:28 2027 GMT Subject: CN=B4FAD5892B5C3B4C5DCE937F49F473A06CD58CD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:31:2a:0f:16:68:85:d5:bd:3d:22:38:fb:5c: bd:a5:08:1c:fc:98:cc:49:35:53:86:17:9a:de:1a: e1:62:32:b7:4c:0b:e3:41:0f:4f:96:b4:a3:6a:5e: 86:15:c7:bf:41:90:e3:b7:e5:4c:b1:17:a6:56:5d: b9:d6:b2:5b:d1:8d:54:48:f4:02:19:12:86:71:24: 4d:08:73:fe:11:f6:67:b1:fa:80:c1:bc:4b:03:e1: 5a:5e:99:ee:24:d8:1d:22:54:15:af:c9:d5:30:6f: b1:79:93:97:e3:12:4e:86:9b:9b:15:f8:bb:22:50: 5d:b0:e3:73:e0:fc:ef:64:f7:a5:d0:4e:c0:c5:f4: 76:73:f9:1c:ee:fa:2c:8d:8e:c2:bc:ac:75:09:80: e1:6c:6e:c6:a1:63:c9:89:e9:a9:07:37:1e:3a:71: 25:2c:e0:98:ed:77:2d:9b:7c:5c:b7:81:14:29:4d: 2c:8e:85:9c:3a:71:cf:fd:3f:82:73:59:5d:8a:0d: 4b:46:27:56:3b:b9:69:de:0a:8f:64:86:14:62:e5: 61:bf:c3:9c:9b:01:ae:70:26:67:31:de:ca:d3:56: db:e7:02:f4:65:56:5b:6e:6c:b5:b6:92:33:73:d0: 65:5e:17:ce:82:85:de:4b:93:8f:77:13:e2:c6:62: 2e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B4:FA:D5:89:2B:5C:3B:4C:5D:CE:93:7F:49:F4:73:A0:6C:D5:8C:D7 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D75486FBDF7610FAF5969DB68B60F221410E2B92996C63937C34D0FBBED14059/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D75486FBDF7610FAF5969DB68B60F221410E2B92996C63937C34D0FBBED14059/0/B4FAD5892B5C3B4C5DCE937F49F473A06CD58CD7.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.254.156.0/22 IPv6: 2803:b740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264739 Signature Algorithm: sha256WithRSAEncryption 8a:42:b0:d2:07:0e:1a:a4:66:1f:89:aa:fc:4a:38:8f:69:5b: b6:22:aa:a2:5a:7e:bb:6c:6c:c0:64:5b:ee:36:f4:81:4c:d6: cd:a4:99:57:d1:4b:74:c4:c7:12:b8:53:37:b1:5f:57:18:d1: 5d:e2:f1:a4:21:e8:67:02:cb:52:17:94:de:8f:23:8e:40:da: 3d:24:f0:45:9f:c2:e0:c3:1d:57:db:1c:65:a1:2c:b2:f9:e4: 75:bb:5c:b4:69:46:e0:ea:3b:83:c8:22:75:e4:b0:52:d0:10: eb:a5:de:62:f7:b0:b3:23:52:c9:e7:25:6e:9d:cf:93:07:4f: cb:1f:a5:b9:db:88:88:98:cd:0d:a1:fe:b0:35:bf:71:0e:52: 26:25:86:3e:99:5a:7a:02:24:01:fc:0d:84:c0:c1:32:7f:d5: 6a:8f:87:9f:d8:64:2d:1c:9b:e6:46:71:21:bb:4f:b5:ac:a7: 05:a1:3e:c9:94:44:59:3d:32:46:6a:03:f6:bb:50:59:4e:2c: 58:aa:b7:c4:0e:5f:96:63:e9:19:55:00:f4:3c:1b:0a:2f:0a: be:dd:71:99:c5:1c:46:9f:e6:21:94:8b:78:ad:2c:dd:38:c3: 55:cf:55:ca:67:96:de:51:2f:11:c0:c1:69:26:34:e2:5b:bc: ab:b3:51:1a -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUSU2gIkgWOXs2lb1+CHPQtgDMZzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNDI2MjhaFw0yNzAxMjcxNDMxMjhaMDMxMTAvBgNV BAMTKEI0RkFENTg5MkI1QzNCNEM1RENFOTM3RjQ5RjQ3M0EwNkNENThDRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCMSoPFmiF1b09Ijj7XL2lCBz8 mMxJNVOGF5reGuFiMrdMC+NBD0+WtKNqXoYVx79BkOO35UyxF6ZWXbnWslvRjVRI 9AIZEoZxJE0Ic/4R9mex+oDBvEsD4Vpeme4k2B0iVBWvydUwb7F5k5fjEk6Gm5sV +LsiUF2w43Pg/O9k96XQTsDF9HZz+Rzu+iyNjsK8rHUJgOFsbsahY8mJ6akHNx46 cSUs4Jjtdy2bfFy3gRQpTSyOhZw6cc/9P4JzWV2KDUtGJ1Y7uWneCo9khhRi5WG/ w5ybAa5wJmcx3srTVtvnAvRlVltubLW2kjNz0GVeF86Chd5Lk493E+LGYi5lAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS0+tWJK1w7TF3O k39J9HOgbNWM1zAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDc1NDg2RkJERjc2MTBGQUY1OTY5REI2 OEI2MEYyMjE0MTBFMkI5Mjk5NkM2MzkzN0MzNEQwRkJCRUQxNDA1OS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENzU0ODZGQkRGNzYxMEZBRjU5NjlEQjY4QjYwRjIyMTQxMEUyQjkyOTk2 QzYzOTM3QzM0RDBGQkJFRDE0MDU5LzAvQjRGQUQ1ODkyQjVDM0I0QzVEQ0U5MzdG NDlGNDczQTA2Q0Q1OENENy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqv6cMA0EAgAC MAcDBQAoA7dAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQKIzANBgkqhkiG9w0B AQsFAAOCAQEAikKw0gcOGqRmH4mq/Eo4j2lbtiKqolp+u2xswGRb7jb0gUzWzaSZ V9FLdMTHErhTN7FfVxjRXeLxpCHoZwLLUheU3o8jjkDaPSTwRZ/C4MMdV9scZaEs svnkdbtctGlG4Oo7g8gideSwUtAQ66XeYvewsyNSyeclbp3PkwdPyx+luduIiJjN DaH+sDW/cQ5SJiWGPplaegIkAfwNhMDBMn/Vao+Hn9hkLRyb5kZxIbtPtaynBaE+ yZREWT0yRmoD9rtQWU4sWKq3xA5flmPpGVUA9DwbCi8Kvt1xmcUcRp/mIZSLeK0s 3TjDVc9VymeW3lEvEcDBaSY04lu8q7NRGg== -----END CERTIFICATE-----Generated at Mon Mar 2 09:49:30 2026 by rpki-client