$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.cer File: C7109B5FA9AA24BBF70E62A4318E4348C69F700A.cer (raw, json) Hash identifier: 74SUOblaMQR2CU4Fi5kDBtlEYc2JVdZaw2oaFjD7dZA= Subject key identifier: C7:10:9B:5F:A9:AA:24:BB:F7:0E:62:A4:31:8E:43:48:C6:9F:70:0A Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 54D4C65A9D6C0D028C3F9C200C3232440A32DA5C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 12:40:19 +0000 Certificate not after: Wed 27 Jan 2027 12:45:19 +0000 Subordinate resources: AS: 266666 IP: 45.228.152.0/22 IP: 2801:19:b000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d4:c6:5a:9d:6c:0d:02:8c:3f:9c:20:0c:32:32:44:0a:32:da:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 12:40:19 2026 GMT Not After : Jan 27 12:45:19 2027 GMT Subject: CN=C7109B5FA9AA24BBF70E62A4318E4348C69F700A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1c:e0:0e:55:06:3f:a0:f7:88:1e:19:3e:6f: a9:cc:73:b9:16:be:b4:f4:10:fb:de:8f:4c:e8:a9: 82:74:d3:5f:90:52:a4:7f:06:ec:26:79:2b:42:a4: 73:7d:43:17:5a:4a:85:bb:6c:c6:2a:8a:77:49:54: fa:f3:f6:32:7e:16:3e:2e:5e:f0:48:d9:e3:1d:44: 05:bd:a3:ba:5c:5e:3c:56:55:0e:d8:74:5a:82:4f: 6b:e3:f3:7e:be:99:5f:e3:09:b7:f2:4a:9c:dd:68: 1b:da:99:0a:4c:27:e1:77:70:57:fe:41:3e:3a:ad: 9b:81:90:bc:0a:27:af:a7:79:62:91:98:5c:78:33: 0a:7f:94:d4:f6:6b:3d:90:25:40:fa:5d:44:e6:6a: d2:da:c6:d4:24:ce:ab:67:21:96:84:37:3d:b2:02: ca:fd:5b:ea:64:cf:5b:22:95:d7:e1:a5:3a:ea:c8: 47:eb:75:8b:df:1f:d4:7f:ad:a7:42:43:43:a6:7f: e6:e9:5c:5b:96:e7:34:95:57:6b:26:47:25:ee:ea: 88:f6:96:25:b0:5b:b7:af:82:7b:14:54:54:f3:d7: 0b:70:df:f1:f1:44:2c:8e:72:48:6d:45:61:5f:ac: f9:a9:95:77:0a:20:6c:7a:1b:a6:e8:17:5a:cb:5c: 09:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:10:9B:5F:A9:AA:24:BB:F7:0E:62:A4:31:8E:43:48:C6:9F:70:0A X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.228.152.0/22 IPv6: 2801:19:b000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266666 Signature Algorithm: sha256WithRSAEncryption 5b:9d:8c:6b:51:73:e7:97:e6:43:b3:96:35:43:d9:ac:ed:32: 36:6b:f4:e8:2e:7b:b6:97:f7:3c:3d:29:79:fe:fc:98:95:36: f2:aa:b2:fc:50:e2:67:f5:d3:c8:13:50:14:35:b5:f3:b2:5d: 55:62:94:1c:e1:91:27:23:76:b9:42:74:80:b5:1d:c7:25:90: 06:da:ee:e6:81:74:79:44:47:37:a0:a7:a0:ef:1b:b8:fc:cc: cc:c8:a3:18:e1:3d:4b:73:8b:92:e8:da:80:64:94:42:37:f2: e3:04:30:57:61:c9:73:8d:66:76:4f:82:ef:b3:04:fd:20:eb: 03:0a:8f:84:11:4c:eb:ae:8a:0a:eb:bd:4c:ee:f0:f3:7f:f2: 2a:74:56:b2:ee:0f:5c:ca:f6:a0:0d:4a:43:8c:9c:43:14:20: 88:35:92:fc:97:e1:69:2a:3a:76:85:de:d5:eb:e1:ae:14:87: 2d:98:03:01:e3:a5:be:2f:2e:b4:88:49:9f:f7:3c:7a:59:97: 49:17:bd:61:68:8d:93:22:c8:0a:5c:3e:10:c3:aa:e1:69:0e: 02:90:85:f2:e7:d1:ce:27:2d:cd:3d:ed:c0:a9:78:f2:fc:62: 89:61:b0:46:27:7e:5f:fc:24:db:3e:fb:3b:73:d9:69:61:d5: ef:bc:cd:85 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUVNTGWp1sDQKMP5wgDDIyRAoy2lwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxMjQwMTlaFw0yNzAxMjcxMjQ1MTlaMDMxMTAvBgNV BAMTKEM3MTA5QjVGQTlBQTI0QkJGNzBFNjJBNDMxOEU0MzQ4QzY5RjcwMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPHOAOVQY/oPeIHhk+b6nMc7kW vrT0EPvej0zoqYJ001+QUqR/BuwmeStCpHN9QxdaSoW7bMYqindJVPrz9jJ+Fj4u XvBI2eMdRAW9o7pcXjxWVQ7YdFqCT2vj836+mV/jCbfySpzdaBvamQpMJ+F3cFf+ QT46rZuBkLwKJ6+neWKRmFx4Mwp/lNT2az2QJUD6XUTmatLaxtQkzqtnIZaENz2y Asr9W+pkz1sildfhpTrqyEfrdYvfH9R/radCQ0Omf+bpXFuW5zSVV2smRyXu6oj2 liWwW7evgnsUVFTz1wtw3/HxRCyOckhtRWFfrPmplXcKIGx6G6boF1rLXAkRAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTHEJtfqaoku/cO YqQxjkNIxp9wCjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzgyODE0OEFBOUNBRDQxRjYwNzVGNDJE REQ0REQ1MUM4ODQwNkQ0RkEwRjQyMTI5RTk5RjQ1NTM0MjgyOEE3QS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DODI4MTQ4QUE5Q0FENDFGNjA3NUY0MkRERDRERDUxQzg4NDA2RDRGQTBG NDIxMjlFOTlGNDU1MzQyODI4QTdBLzAvQzcxMDlCNUZBOUFBMjRCQkY3MEU2MkE0 MzE4RTQzNDhDNjlGNzAwQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLeSYMA8EAgAC MAkDBwAoAQAZsAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBGqMA0GCSqGSIb3 DQEBCwUAA4IBAQBbnYxrUXPnl+ZDs5Y1Q9ms7TI2a/ToLnu2l/c8PSl5/vyYlTby qrL8UOJn9dPIE1AUNbXzsl1VYpQc4ZEnI3a5QnSAtR3HJZAG2u7mgXR5REc3oKeg 7xu4/MzMyKMY4T1Lc4uS6NqAZJRCN/LjBDBXYclzjWZ2T4LvswT9IOsDCo+EEUzr rooK671M7vDzf/IqdFay7g9cyvagDUpDjJxDFCCINZL8l+FpKjp2hd7V6+GuFIct mAMB46W+Ly60iEmf9zx6WZdJF71haI2TIsgKXD4Qw6rhaQ4CkIXy59HOJy3NPe3A qXjy/GKJYbBGJ35f/CTbPvs7c9lpYdXvvM2F -----END CERTIFICATE-----Generated at Mon Mar 2 17:16:07 2026 by rpki-client