$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C55C5C742F7375E63330D3A1FFE96EF6FB840987.cer File: C55C5C742F7375E63330D3A1FFE96EF6FB840987.cer (raw, json) Hash identifier: JrOtDxm55CZzkNdRQf+oev8PPqOfbUGhKjxtIjVyn1k= Subject key identifier: C5:5C:5C:74:2F:73:75:E6:33:30:D3:A1:FF:E9:6E:F6:FB:84:09:87 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 18313B0EC7844270B1E1F50AD93233BEEC44F23B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DB57DEB3C7125DF926C82A10165618582D6F6BBEDA357CC9A1140EBEAE0A1078/0/C55C5C742F7375E63330D3A1FFE96EF6FB840987.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DB57DEB3C7125DF926C82A10165618582D6F6BBEDA357CC9A1140EBEAE0A1078/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 02:17:29 +0000 Certificate not after: Thu 28 Jan 2027 02:22:29 +0000 Subordinate resources: AS: 267892 IP: 45.175.22.0/24 IP: 2801:18:8800::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:31:3b:0e:c7:84:42:70:b1:e1:f5:0a:d9:32:33:be:ec:44:f2:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 02:17:29 2026 GMT Not After : Jan 28 02:22:29 2027 GMT Subject: CN=C55C5C742F7375E63330D3A1FFE96EF6FB840987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e9:3d:22:48:6c:b5:15:65:27:7d:b3:7e:c5: a4:48:4d:0d:51:d0:7a:69:ed:e6:16:3c:37:02:d4: 3f:10:01:4d:a1:7c:89:46:91:c5:a2:00:b8:ed:54: b4:ce:04:0a:a3:73:3d:48:3d:9a:af:10:a6:5e:8d: b0:6b:4a:a2:5a:8b:47:c3:fd:7d:dd:2f:8c:c9:eb: 62:30:f2:e7:0d:93:10:89:b0:f4:16:f7:ca:9e:57: 1e:92:e7:9e:54:41:9c:16:b9:ca:65:69:74:bb:14: 2b:fc:8f:b1:e2:82:95:e9:c5:a0:a0:30:45:cd:9a: e4:e3:e9:df:a7:60:d6:b7:78:c1:f1:3f:2a:23:a4: c3:77:48:5f:94:44:85:65:75:cd:7d:97:71:0f:20: 8d:b8:48:20:3d:02:64:a0:b8:ba:c6:b9:0e:37:37: 3d:f7:b4:9e:4d:56:8c:b1:24:bb:f6:3d:22:3f:f3: cd:04:58:01:09:6a:92:c5:d2:43:40:2f:ed:be:03: d7:69:0e:0f:aa:ee:44:69:54:e2:0a:c8:00:f2:50: 23:19:50:e7:88:37:2e:46:24:c5:c7:be:54:ed:9e: 6d:2a:27:e2:dc:e6:bd:2c:1f:c7:94:00:b7:b0:95: c0:29:9f:da:ee:5a:b9:28:25:7e:88:85:59:7e:02: 52:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C5:5C:5C:74:2F:73:75:E6:33:30:D3:A1:FF:E9:6E:F6:FB:84:09:87 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DB57DEB3C7125DF926C82A10165618582D6F6BBEDA357CC9A1140EBEAE0A1078/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DB57DEB3C7125DF926C82A10165618582D6F6BBEDA357CC9A1140EBEAE0A1078/0/C55C5C742F7375E63330D3A1FFE96EF6FB840987.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.175.22.0/24 IPv6: 2801:18:8800::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267892 Signature Algorithm: sha256WithRSAEncryption 7a:cf:52:ff:ac:25:fc:76:e2:30:72:41:d4:69:e7:23:20:fd: 3e:96:e7:42:85:53:61:26:fa:22:a9:88:1d:58:04:f4:19:48: d6:dc:8b:60:9b:97:1d:e4:a6:a4:d3:7f:dc:70:54:65:34:f6: c9:fd:53:18:6a:da:77:f2:08:3d:4d:ff:b5:4e:57:f1:02:72: b5:0c:02:8c:00:09:1c:da:75:7b:2b:ef:84:84:06:aa:94:58: 66:dd:f3:af:68:56:27:39:6c:17:14:f4:be:97:0f:30:db:05: 70:c1:b0:6a:55:b9:02:c1:d6:0a:e6:b5:44:41:68:72:3b:b7: 3e:c6:17:ae:8d:16:cd:05:fe:a4:7d:c3:13:88:da:2b:ab:7e: 11:3a:7a:0b:8b:6f:b0:83:cb:fb:11:24:fd:f3:e9:ab:00:97: d3:f8:00:de:d4:d4:22:e3:a8:5d:fb:b4:73:a6:b6:2d:0a:5f: 02:27:e4:da:d1:9e:ed:90:f8:3c:d4:fa:da:f8:28:7c:03:b1: da:d9:ee:f8:54:32:4f:ce:6f:89:67:43:b5:de:a3:a7:98:7f: 90:6a:85:61:a9:d6:b6:a0:a5:70:4b:33:68:e9:77:1a:14:7e: a5:36:66:42:4c:59:7c:c6:c6:e6:e6:e2:86:d6:98:57:4c:b7: 14:72:55:b3 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUGDE7DseEQnCx4fUK2TIzvuxE8jswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMjE3MjlaFw0yNzAxMjgwMjIyMjlaMDMxMTAvBgNV BAMTKEM1NUM1Qzc0MkY3Mzc1RTYzMzMwRDNBMUZGRTk2RUY2RkI4NDA5ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn6T0iSGy1FWUnfbN+xaRITQ1R 0Hpp7eYWPDcC1D8QAU2hfIlGkcWiALjtVLTOBAqjcz1IPZqvEKZejbBrSqJai0fD /X3dL4zJ62Iw8ucNkxCJsPQW98qeVx6S555UQZwWucplaXS7FCv8j7HigpXpxaCg MEXNmuTj6d+nYNa3eMHxPyojpMN3SF+URIVldc19l3EPII24SCA9AmSguLrGuQ43 Nz33tJ5NVoyxJLv2PSI/880EWAEJapLF0kNAL+2+A9dpDg+q7kRpVOIKyADyUCMZ UOeINy5GJMXHvlTtnm0qJ+Lc5r0sH8eUALewlcApn9ruWrkoJX6IhVl+AlJXAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTFXFx0L3N15jMw 06H/6W72+4QJhzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREI1N0RFQjNDNzEyNURGOTI2QzgyQTEw MTY1NjE4NTgyRDZGNkJCRURBMzU3Q0M5QTExNDBFQkVBRTBBMTA3OC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQjU3REVCM0M3MTI1REY5MjZDODJBMTAxNjU2MTg1ODJENkY2QkJFREEz NTdDQzlBMTE0MEVCRUFFMEExMDc4LzAvQzU1QzVDNzQyRjczNzVFNjMzMzBEM0Ex RkZFOTZFRjZGQjg0MDk4Ny5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALa8WMA8EAgAC MAkDBwAoAQAYiAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBZ0MA0GCSqGSIb3 DQEBCwUAA4IBAQB6z1L/rCX8duIwckHUaecjIP0+ludChVNhJvoiqYgdWAT0GUjW 3Itgm5cd5Kak03/ccFRlNPbJ/VMYatp38gg9Tf+1TlfxAnK1DAKMAAkc2nV7K++E hAaqlFhm3fOvaFYnOWwXFPS+lw8w2wVwwbBqVbkCwdYK5rVEQWhyO7c+xheujRbN Bf6kfcMTiNorq34ROnoLi2+wg8v7EST98+mrAJfT+ADe1NQi46hd+7RzprYtCl8C J+Ta0Z7tkPg81Pra+Ch8A7Ha2e74VDJPzm+JZ0O13qOnmH+QaoVhqda2oKVwSzNo 6XcaFH6lNmZCTFl8xsbm5uKG1phXTLcUclWz -----END CERTIFICATE-----Generated at Mon Mar 2 15:37:38 2026 by rpki-client