$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C097077D00F9B394156695ADC73EFDCF74721DB1.cer File: C097077D00F9B394156695ADC73EFDCF74721DB1.cer (raw, json) Hash identifier: g5wIN79qTixnNXjA7lalVKYmkITE0ngGhlo7kSjwvz4= Subject key identifier: C0:97:07:7D:00:F9:B3:94:15:66:95:AD:C7:3E:FD:CF:74:72:1D:B1 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1DA133558DC009E55B5E2CDFB550C5DE2598528C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6BC6142BB1ABE279DDB1A84DC4371A301A1329848C31986B1F86C9B1228436B9/0/C097077D00F9B394156695ADC73EFDCF74721DB1.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6BC6142BB1ABE279DDB1A84DC4371A301A1329848C31986B1F86C9B1228436B9/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:50:48 +0000 Certificate not after: Tue 26 Jan 2027 17:55:48 +0000 Subordinate resources: AS: 266765 IP: 45.234.224.0/22 IP: 2803:f20::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a1:33:55:8d:c0:09:e5:5b:5e:2c:df:b5:50:c5:de:25:98:52:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:50:48 2026 GMT Not After : Jan 26 17:55:48 2027 GMT Subject: CN=C097077D00F9B394156695ADC73EFDCF74721DB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:59:61:40:94:ad:fd:2f:f2:dd:15:18:5e:79: 65:53:79:8a:3e:48:d4:87:1e:04:04:18:7e:2f:56: e7:ff:04:39:97:f3:37:0f:de:af:0a:a8:76:88:f9: c3:4f:02:79:7a:8a:0d:71:24:22:29:e2:19:dd:ef: 0b:fc:c5:b7:ac:58:4b:e6:f0:1c:43:b3:83:35:94: 37:0f:7b:77:34:50:83:c2:3f:bd:a7:33:c4:61:82: 7a:c9:95:ae:87:f9:7a:4e:ad:e9:51:e2:04:10:a1: 13:02:75:ae:81:d9:18:b6:b2:ce:76:4c:87:53:34: 53:93:d6:27:33:36:a9:95:b6:c3:11:2e:97:07:aa: f1:a0:55:81:11:ff:3b:f8:93:83:f1:2d:0b:78:7b: 23:83:b1:45:3f:94:14:29:64:24:d5:42:d0:ef:c7: b3:a3:b8:e9:2b:cf:60:9e:88:50:04:e2:64:cf:72: f4:41:9e:81:ce:a4:cb:9b:0a:0a:ab:8c:5e:58:56: 5b:10:ce:f6:98:fb:33:0b:43:f5:b5:a4:f0:a4:06: d8:56:fd:6b:e5:68:dc:9e:bc:87:16:24:a0:f7:d0: 0b:11:0f:f0:0e:e1:7a:ba:33:e6:a3:e4:56:0f:f3: 93:9d:8f:d2:1b:7f:0e:d4:02:6b:c7:ca:20:76:01: 84:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:97:07:7D:00:F9:B3:94:15:66:95:AD:C7:3E:FD:CF:74:72:1D:B1 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6BC6142BB1ABE279DDB1A84DC4371A301A1329848C31986B1F86C9B1228436B9/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6BC6142BB1ABE279DDB1A84DC4371A301A1329848C31986B1F86C9B1228436B9/0/C097077D00F9B394156695ADC73EFDCF74721DB1.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.234.224.0/22 IPv6: 2803:f20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266765 Signature Algorithm: sha256WithRSAEncryption 8b:df:82:e6:b6:b9:44:2b:df:d3:1c:02:49:6c:ae:65:a1:3d: 43:4c:57:b3:99:88:9d:fe:aa:c5:3d:3a:14:76:0f:8d:3e:14: 5e:a9:d4:cc:ab:85:b1:d2:f5:72:6c:84:19:21:7a:2f:68:6c: 81:1f:51:1e:56:19:f8:e1:72:eb:c5:5b:2a:90:2f:29:76:a3: 44:94:05:93:b5:52:fa:a2:95:0b:d1:c4:30:7b:fc:a9:48:b8: fa:16:b0:f3:36:94:22:6b:5c:62:55:95:13:8d:fa:10:db:ff: 78:3a:72:4d:69:5b:bc:4e:3e:36:5c:d9:ab:1f:fe:ef:ba:b9: 4b:8f:2c:1a:c7:d8:8c:82:00:2d:13:30:e5:fa:0a:39:2e:87: fa:9b:d7:a5:f3:83:a9:62:86:5c:f5:bb:53:e3:3b:7c:7c:fe: ed:64:f2:84:b1:7c:63:2e:ad:4a:d0:bf:90:75:ce:82:7b:15: 65:68:bc:01:12:09:1b:2a:83:3a:e5:31:0a:6e:89:ae:ec:d7: 84:20:1d:e2:34:73:c0:3c:55:ef:6c:96:af:ad:48:ec:c6:9d: 56:5b:cc:f2:82:9c:a7:a9:67:88:0b:82:c8:be:c1:7b:34:4d: ae:bf:ca:80:13:5b:78:b8:f3:67:07:d3:88:5a:43:2d:69:66: 1f:aa:36:aa -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUHaEzVY3ACeVbXizftVDF3iWYUowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzUwNDhaFw0yNzAxMjYxNzU1NDhaMDMxMTAvBgNV BAMTKEMwOTcwNzdEMDBGOUIzOTQxNTY2OTVBREM3M0VGRENGNzQ3MjFEQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPWWFAlK39L/LdFRheeWVTeYo+ SNSHHgQEGH4vVuf/BDmX8zcP3q8KqHaI+cNPAnl6ig1xJCIp4hnd7wv8xbesWEvm 8BxDs4M1lDcPe3c0UIPCP72nM8RhgnrJla6H+XpOrelR4gQQoRMCda6B2Ri2ss52 TIdTNFOT1iczNqmVtsMRLpcHqvGgVYER/zv4k4PxLQt4eyODsUU/lBQpZCTVQtDv x7OjuOkrz2CeiFAE4mTPcvRBnoHOpMubCgqrjF5YVlsQzvaY+zMLQ/W1pPCkBthW /WvlaNyevIcWJKD30AsRD/AO4Xq6M+aj5FYP85Odj9Ibfw7UAmvHyiB2AYQ5AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTAlwd9APmzlBVm la3HPv3PdHIdsTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNkJDNjE0MkJCMUFCRTI3OUREQjFBODRE QzQzNzFBMzAxQTEzMjk4NDhDMzE5ODZCMUY4NkM5QjEyMjg0MzZCOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82QkM2MTQyQkIxQUJFMjc5RERCMUE4NERDNDM3MUEzMDFBMTMyOTg0OEMz MTk4NkIxRjg2QzlCMTIyODQzNkI5LzAvQzA5NzA3N0QwMEY5QjM5NDE1NjY5NUFE QzczRUZEQ0Y3NDcyMURCMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLergMA0EAgAC MAcDBQAoAw8gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQSDTANBgkqhkiG9w0B AQsFAAOCAQEAi9+C5ra5RCvf0xwCSWyuZaE9Q0xXs5mInf6qxT06FHYPjT4UXqnU zKuFsdL1cmyEGSF6L2hsgR9RHlYZ+OFy68VbKpAvKXajRJQFk7VS+qKVC9HEMHv8 qUi4+haw8zaUImtcYlWVE436ENv/eDpyTWlbvE4+NlzZqx/+77q5S48sGsfYjIIA LRMw5foKOS6H+pvXpfODqWKGXPW7U+M7fHz+7WTyhLF8Yy6tStC/kHXOgnsVZWi8 ARIJGyqDOuUxCm6JruzXhCAd4jRzwDxV72yWr61I7MadVlvM8oKcp6lniAuCyL7B ezRNrr/KgBNbeLjzZwfTiFpDLWlmH6o2qg== -----END CERTIFICATE-----Generated at Mon Mar 2 13:38:43 2026 by rpki-client