$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.cer File: D8C9477CA5BF1155ABF51707970EA81CFE44EA88.cer (raw, json) Hash identifier: f+X42yRgFP08iuYEo7ri8aFJ0pFmFjrZ3sSsZ9E+YQQ= Subject key identifier: D8:C9:47:7C:A5:BF:11:55:AB:F5:17:07:97:0E:A8:1C:FE:44:EA:88 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4F16FFC17E185983561B448642A54C2C1E28F0CA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 00:35:56 +0000 Certificate not after: Thu 28 Jan 2027 00:40:56 +0000 Subordinate resources: AS: 267920 IP: 45.179.192.0/22 IP: 2803:2e60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:16:ff:c1:7e:18:59:83:56:1b:44:86:42:a5:4c:2c:1e:28:f0:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 00:35:56 2026 GMT Not After : Jan 28 00:40:56 2027 GMT Subject: CN=D8C9477CA5BF1155ABF51707970EA81CFE44EA88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:18:6b:0c:8a:37:6d:29:64:bf:3d:61:ef:cf: 17:9e:af:8d:b0:80:8a:76:f7:fc:1d:31:d4:fd:fc: 1e:40:3d:2c:75:8b:26:28:af:56:08:bb:ef:48:22: bb:47:e6:12:3e:b3:b0:ce:01:09:38:6e:a3:e2:70: 50:95:7e:7c:13:35:c6:0e:38:b3:1c:f2:c6:54:0e: 67:fe:a3:19:6b:92:52:79:0f:51:7f:b6:3e:83:92: 07:d1:53:3b:51:3f:12:41:86:83:e3:c7:90:37:0e: 38:81:4a:f5:32:e2:6a:13:f8:b5:8d:17:c0:f0:0e: 27:8e:a1:61:ff:b1:ef:a0:3f:44:55:10:b5:fc:82: 9a:8b:13:5c:ff:e0:6c:20:e5:1f:db:e8:b7:fb:cf: 54:67:41:48:65:98:1c:a8:21:a9:88:2a:0e:34:91: b7:7f:5d:bc:08:cc:57:ec:74:5f:1d:77:07:c9:bf: 11:7c:a8:db:0d:1d:49:68:25:5c:fa:f1:62:38:5e: ac:6f:a8:8e:e5:8c:90:d4:5d:81:f5:40:98:ba:ce: 86:a6:da:7a:a3:70:22:b4:23:6f:dd:dc:c7:ba:0b: a6:ec:0e:b9:49:d5:5b:bf:b9:47:a5:92:5d:13:2d: f7:5b:c3:70:06:49:63:97:25:9d:a4:53:6a:a1:c6: 73:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:C9:47:7C:A5:BF:11:55:AB:F5:17:07:97:0E:A8:1C:FE:44:EA:88 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/CBF866977BD95F1F1A5839DAC9B2BAD8BEA81E2F8C40C7464BC3CE3CAB9568EC/0/D8C9477CA5BF1155ABF51707970EA81CFE44EA88.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.179.192.0/22 IPv6: 2803:2e60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267920 Signature Algorithm: sha256WithRSAEncryption 10:8d:4b:db:8a:36:9a:c4:95:7a:2f:4b:57:de:e6:ee:58:7d: 6c:da:e1:6c:02:3a:1c:b8:41:a4:f9:bf:ef:5c:be:91:df:12: d3:22:62:5f:d9:46:87:71:d6:53:39:f9:8b:21:45:13:dd:5c: 6d:16:01:b4:1a:d3:84:d4:7c:bf:dc:62:cc:a6:36:9b:36:2c: 69:0d:60:e5:53:5b:51:20:50:1e:91:8f:38:9d:14:74:89:dd: 3e:a3:f0:72:cd:8f:1b:34:a8:4f:2d:4f:fd:9a:84:06:e3:94: ba:a4:ac:72:29:77:db:20:d1:61:0c:df:8e:aa:c5:14:f2:b1: f4:48:a9:b5:a7:a0:51:47:63:29:54:19:40:6b:37:36:df:a7: 40:33:d9:34:f2:49:a2:2e:5f:0d:73:0e:73:02:97:d2:ce:10: d4:08:e4:a4:2b:70:c8:88:74:54:a1:38:ec:81:ca:18:26:d1: 08:24:f7:b3:35:18:57:0f:6d:2d:8d:9f:39:9c:0e:75:3e:f2: a2:09:1d:02:60:e3:60:c5:69:74:c8:18:93:61:34:51:a8:e4: b0:5e:d2:26:19:7e:ba:56:d8:70:73:75:99:41:cd:df:d9:69: 7c:f0:36:34:da:6a:93:72:fb:bd:c9:49:4e:10:3c:64:95:58: 9c:7f:dd:ff -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUTxb/wX4YWYNWG0SGQqVMLB4o8MowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMDM1NTZaFw0yNzAxMjgwMDQwNTZaMDMxMTAvBgNV BAMTKEQ4Qzk0NzdDQTVCRjExNTVBQkY1MTcwNzk3MEVBODFDRkU0NEVBODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2GGsMijdtKWS/PWHvzxeer42w gIp29/wdMdT9/B5APSx1iyYor1YIu+9IIrtH5hI+s7DOAQk4bqPicFCVfnwTNcYO OLMc8sZUDmf+oxlrklJ5D1F/tj6DkgfRUztRPxJBhoPjx5A3DjiBSvUy4moT+LWN F8DwDieOoWH/se+gP0RVELX8gpqLE1z/4Gwg5R/b6Lf7z1RnQUhlmByoIamIKg40 kbd/XbwIzFfsdF8ddwfJvxF8qNsNHUloJVz68WI4XqxvqI7ljJDUXYH1QJi6zoam 2nqjcCK0I2/d3Me6C6bsDrlJ1Vu/uUelkl0TLfdbw3AGSWOXJZ2kU2qhxnN1AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTYyUd8pb8RVav1 FweXDqgc/kTqiDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQ0JGODY2OTc3QkQ5NUYxRjFBNTgzOURB QzlCMkJBRDhCRUE4MUUyRjhDNDBDNzQ2NEJDM0NFM0NBQjk1NjhFQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DQkY4NjY5NzdCRDk1RjFGMUE1ODM5REFDOUIyQkFEOEJFQTgxRTJGOEM0 MEM3NDY0QkMzQ0UzQ0FCOTU2OEVDLzAvRDhDOTQ3N0NBNUJGMTE1NUFCRjUxNzA3 OTcwRUE4MUNGRTQ0RUE4OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLbPAMA0EAgAC MAcDBQAoAy5gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQWkDANBgkqhkiG9w0B AQsFAAOCAQEAEI1L24o2msSVei9LV97m7lh9bNrhbAI6HLhBpPm/71y+kd8S0yJi X9lGh3HWUzn5iyFFE91cbRYBtBrThNR8v9xizKY2mzYsaQ1g5VNbUSBQHpGPOJ0U dIndPqPwcs2PGzSoTy1P/ZqEBuOUuqSscil32yDRYQzfjqrFFPKx9EiptaegUUdj KVQZQGs3Nt+nQDPZNPJJoi5fDXMOcwKX0s4Q1AjkpCtwyIh0VKE47IHKGCbRCCT3 szUYVw9tLY2fOZwOdT7yogkdAmDjYMVpdMgYk2E0UajksF7SJhl+ulbYcHN1mUHN 39lpfPA2NNpqk3L7vclJThA8ZJVYnH/d/w== -----END CERTIFICATE-----Generated at Mon Mar 2 15:42:05 2026 by rpki-client