$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C03F05F393224EE55367EA37DA3E0EA89C83F44A.cer File: C03F05F393224EE55367EA37DA3E0EA89C83F44A.cer (raw, json) Hash identifier: qwPsdXXYMzfDTdvTfuSp1yEqXCdz86TPy4SmMDI5F9k= Subject key identifier: C0:3F:05:F3:93:22:4E:E5:53:67:EA:37:DA:3E:0E:A8:9C:83:F4:4A Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 650E61BA0A151A78C194B367BEBCF0BE6A74EE4A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DA2BAD424F06E2E1D67EEC4FD69B92835334C82694014F904A61314858B910CC/0/C03F05F393224EE55367EA37DA3E0EA89C83F44A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DA2BAD424F06E2E1D67EEC4FD69B92835334C82694014F904A61314858B910CC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 00:26:17 +0000 Certificate not after: Thu 28 Jan 2027 00:31:17 +0000 Subordinate resources: AS: 274193 IP: 148.224.28.0/24 IP: 2803:fbd0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:0e:61:ba:0a:15:1a:78:c1:94:b3:67:be:bc:f0:be:6a:74:ee:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 00:26:17 2026 GMT Not After : Jan 28 00:31:17 2027 GMT Subject: CN=C03F05F393224EE55367EA37DA3E0EA89C83F44A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d6:29:dc:f3:8a:bf:70:21:aa:c5:46:31:00: 0b:63:44:2f:0d:e9:7f:b3:05:e9:7e:d2:2f:94:aa: 08:3f:27:7c:57:8b:d3:65:5b:1e:73:44:84:bc:32: dd:0d:4f:19:2e:ad:9c:a1:38:31:cc:dc:d7:c9:7c: 05:0e:ac:b9:35:b0:25:dc:69:b5:55:23:ec:d2:5d: 39:e9:87:0e:67:28:ee:77:41:83:ff:80:b3:d7:3c: 44:03:b7:40:46:eb:79:96:5a:fb:46:1d:d7:1b:97: 2c:4e:59:6a:9a:2b:e5:01:8a:e6:af:7d:30:4e:76: 09:f0:c3:05:71:6e:42:dc:da:c3:31:8a:1f:8f:30: 66:6c:2d:4a:4f:d9:31:a1:6a:8a:cc:60:e3:62:57: 94:11:21:cc:e9:ff:b1:8f:69:70:b7:a8:83:4d:f9: 3c:79:8d:7b:36:0e:ba:d1:06:d6:ed:39:ad:11:08: fa:a2:18:03:49:93:8c:c1:0f:58:8b:39:86:98:49: 0c:41:e8:f0:36:13:60:3c:b4:48:fd:41:5a:fb:a9: 19:b4:fc:4c:9e:47:ab:89:b1:4f:d1:2a:1b:bf:d3: a3:ea:c2:03:4b:bb:5b:8a:56:23:73:08:62:cc:b4: b8:dc:b6:db:ac:86:6e:d0:a3:95:39:a6:d7:d5:29: dc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:3F:05:F3:93:22:4E:E5:53:67:EA:37:DA:3E:0E:A8:9C:83:F4:4A X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DA2BAD424F06E2E1D67EEC4FD69B92835334C82694014F904A61314858B910CC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DA2BAD424F06E2E1D67EEC4FD69B92835334C82694014F904A61314858B910CC/0/C03F05F393224EE55367EA37DA3E0EA89C83F44A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.224.28.0/24 IPv6: 2803:fbd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274193 Signature Algorithm: sha256WithRSAEncryption 45:98:3f:7d:8b:fa:37:c0:df:cd:28:e9:79:0b:a8:39:d9:1c: f4:e0:8f:ef:4e:45:d0:20:72:98:60:c0:06:4a:f0:88:ba:ea: ea:19:90:d6:83:50:c4:b7:52:4e:82:fd:40:8c:d2:0a:4d:ca: 55:b9:58:7a:45:5d:fc:93:bf:db:2a:d8:ef:b9:d9:95:1e:fc: da:b4:18:bc:e1:b1:f0:ca:0c:ff:5c:d6:f9:6d:a8:19:1d:e1: 6d:48:05:fc:c7:99:55:de:d9:f6:e2:c8:f6:25:8d:e3:2f:b7: d9:93:5f:b4:fc:74:64:0b:76:0b:fe:8d:f8:0b:bc:5f:b2:dd: 78:cc:1e:80:b8:a5:0a:1e:c8:f8:00:ed:d5:8d:04:17:cd:7c: 82:60:d2:d6:52:3c:7e:41:9a:29:bc:2f:89:f0:a9:bb:75:69: 09:46:4b:e3:14:df:8e:58:f4:9c:58:08:90:ca:e2:32:42:42: 6d:b8:dc:16:52:6c:ca:56:b9:75:6f:bd:a0:36:27:74:5c:67: a6:a1:b1:c0:d7:8a:a3:80:25:34:0c:a4:ab:9a:5e:36:9a:ad: 2b:98:1a:b3:7c:be:7a:b1:f3:fb:6b:c0:cd:05:5f:84:9c:12: 91:90:15:11:29:39:0c:fd:ad:e8:b6:44:48:45:46:b8:70:b8: ea:aa:ec:e5 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUZQ5hugoVGnjBlLNnvrzwvmp07kowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMDI2MTdaFw0yNzAxMjgwMDMxMTdaMDMxMTAvBgNV BAMTKEMwM0YwNUYzOTMyMjRFRTU1MzY3RUEzN0RBM0UwRUE4OUM4M0Y0NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu1inc84q/cCGqxUYxAAtjRC8N 6X+zBel+0i+Uqgg/J3xXi9NlWx5zRIS8Mt0NTxkurZyhODHM3NfJfAUOrLk1sCXc abVVI+zSXTnphw5nKO53QYP/gLPXPEQDt0BG63mWWvtGHdcblyxOWWqaK+UBiuav fTBOdgnwwwVxbkLc2sMxih+PMGZsLUpP2TGhaorMYONiV5QRIczp/7GPaXC3qINN +Tx5jXs2DrrRBtbtOa0RCPqiGANJk4zBD1iLOYaYSQxB6PA2E2A8tEj9QVr7qRm0 /EyeR6uJsU/RKhu/06PqwgNLu1uKViNzCGLMtLjcttushm7Qo5U5ptfVKdwJAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTAPwXzkyJO5VNn 6jfaPg6onIP0SjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREEyQkFENDI0RjA2RTJFMUQ2N0VFQzRG RDY5QjkyODM1MzM0QzgyNjk0MDE0RjkwNEE2MTMxNDg1OEI5MTBDQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQTJCQUQ0MjRGMDZFMkUxRDY3RUVDNEZENjlCOTI4MzUzMzRDODI2OTQw MTRGOTA0QTYxMzE0ODU4QjkxMENDLzAvQzAzRjA1RjM5MzIyNEVFNTUzNjdFQTM3 REEzRTBFQTg5QzgzRjQ0QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAlOAcMA0EAgAC MAcDBQAoA/vQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQvETANBgkqhkiG9w0B AQsFAAOCAQEARZg/fYv6N8DfzSjpeQuoOdkc9OCP705F0CBymGDABkrwiLrq6hmQ 1oNQxLdSToL9QIzSCk3KVblYekVd/JO/2yrY77nZlR782rQYvOGx8MoM/1zW+W2o GR3hbUgF/MeZVd7Z9uLI9iWN4y+32ZNftPx0ZAt2C/6N+Au8X7LdeMwegLilCh7I +ADt1Y0EF818gmDS1lI8fkGaKbwvifCpu3VpCUZL4xTfjlj0nFgIkMriMkJCbbjc FlJsyla5dW+9oDYndFxnpqGxwNeKo4AlNAykq5peNpqtK5gas3y+erHz+2vAzQVf hJwSkZAVESk5DP2t6LZESEVGuHC46qrs5Q== -----END CERTIFICATE-----Generated at Mon Mar 2 14:44:23 2026 by rpki-client