$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.cer File: DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.cer (raw, json) Hash identifier: mKi6vn1PmyiNH35UIDeJwB9vgfn+UsU4anesEzgAx/Y= Subject key identifier: DF:50:3A:52:EC:23:91:A3:76:A3:C3:C3:7D:AA:11:EE:2C:A9:24:A7 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1DA0ACFEA684533FC4F4CE9A055A8ED4829B4CAB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/AA82A6174ED114BC169CF2C797A4E7F31EB89E3EF8FDA0CBC24C2B2A18CED873/0/DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/AA82A6174ED114BC169CF2C797A4E7F31EB89E3EF8FDA0CBC24C2B2A18CED873/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 26 Feb 2026 14:25:01 +0000 Certificate not after: Thu 25 Feb 2027 14:30:01 +0000 Subordinate resources: AS: 269865 IP: 45.187.90.0/23 IP: 2803:8e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a0:ac:fe:a6:84:53:3f:c4:f4:ce:9a:05:5a:8e:d4:82:9b:4c:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Feb 26 14:25:01 2026 GMT Not After : Feb 25 14:30:01 2027 GMT Subject: CN=DF503A52EC2391A376A3C3C37DAA11EE2CA924A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f9:32:2d:6b:4b:c4:a3:3f:33:aa:b0:e9:99: 15:0d:3b:17:72:8b:e9:71:35:6f:14:5a:0f:c0:96: 14:1f:eb:bc:97:77:c7:bb:25:5d:9b:e6:fc:2e:cf: 94:85:3c:1d:a2:0c:95:b7:e6:bb:ea:d2:aa:d8:63: e1:6b:11:00:5a:fc:f3:d8:45:23:a2:0c:10:f5:46: 1a:eb:a2:da:0a:25:04:40:48:5e:c1:33:e0:ff:b7: 7a:fd:3e:99:af:ba:ff:98:db:e0:fc:88:28:d1:e5: 87:d8:20:bf:9a:a6:60:c0:8a:8d:ab:26:e4:2a:e1: 21:fe:f4:de:33:4a:f3:b7:44:fd:69:30:cb:95:a5: b4:e1:e4:fe:e8:0e:a4:2c:cd:96:e7:99:12:0b:e4: 00:8a:79:5f:c4:80:76:6a:e2:be:d3:67:f2:96:c3: f6:40:a3:c3:2d:5b:8e:07:80:49:c1:db:ed:4e:b1: 55:df:cf:de:9e:ae:a9:aa:a9:e1:a3:2c:ca:3f:d2: ae:9b:fd:41:09:56:0a:da:e5:9a:bf:13:e5:c1:12: b2:f6:77:09:59:12:0c:53:3e:8f:22:81:0a:6d:dc: 28:c7:e9:00:fb:c0:15:d7:d8:97:b3:72:4a:14:b8: d0:9b:55:ef:e7:2b:69:7a:64:98:94:38:78:d8:c0: 02:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DF:50:3A:52:EC:23:91:A3:76:A3:C3:C3:7D:AA:11:EE:2C:A9:24:A7 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/AA82A6174ED114BC169CF2C797A4E7F31EB89E3EF8FDA0CBC24C2B2A18CED873/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/AA82A6174ED114BC169CF2C797A4E7F31EB89E3EF8FDA0CBC24C2B2A18CED873/0/DF503A52EC2391A376A3C3C37DAA11EE2CA924A7.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.187.90.0/23 IPv6: 2803:8e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269865 Signature Algorithm: sha256WithRSAEncryption 33:0a:69:e6:af:81:54:68:de:2f:dd:5f:fc:43:5c:a3:e9:3c: 1f:26:fa:bf:4b:1b:3c:1c:d1:78:ea:a9:30:94:ca:e8:84:e2: 93:8b:79:90:28:56:f3:35:52:03:68:4e:78:39:a2:09:0a:e2: 82:69:d8:17:a6:21:90:b4:bd:9f:34:54:95:47:50:a8:24:64: 01:f5:a9:e0:d4:ef:7e:ff:d5:29:36:b2:d2:0e:ec:46:3f:5b: 3c:5f:7a:16:04:df:c1:e6:16:00:0d:65:bc:4d:c5:98:8d:5a: 5a:23:03:c4:96:1a:cd:6e:55:ba:54:c8:64:46:8d:79:ba:81: ea:34:86:0f:63:56:da:00:0f:7f:21:79:0e:bb:ce:5b:1e:0c: 1d:1a:92:c3:70:96:69:b0:ea:7a:92:16:0e:01:ef:11:3c:f8: 70:f5:6d:48:aa:58:88:61:e6:db:d8:a4:08:bc:57:8c:4f:23: ee:09:50:86:ba:42:e1:ba:e2:af:74:e9:4e:38:94:a5:57:6d: 00:61:7a:82:a1:f3:80:d4:6c:2c:de:91:75:8c:66:31:0f:81: b4:a2:b2:e5:bd:18:b4:b6:68:c9:61:a5:f6:50:18:55:99:a1: 9a:07:5c:a9:c3:05:27:9e:07:1a:1c:c8:4f:30:35:4d:64:dd: 60:0a:30:72 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUHaCs/qaEUz/E9M6aBVqO1IKbTKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAyMjYxNDI1MDFaFw0yNzAyMjUxNDMwMDFaMDMxMTAvBgNV BAMTKERGNTAzQTUyRUMyMzkxQTM3NkEzQzNDMzdEQUExMUVFMkNBOTI0QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl+TIta0vEoz8zqrDpmRUNOxdy i+lxNW8UWg/AlhQf67yXd8e7JV2b5vwuz5SFPB2iDJW35rvq0qrYY+FrEQBa/PPY RSOiDBD1RhrrotoKJQRASF7BM+D/t3r9Ppmvuv+Y2+D8iCjR5YfYIL+apmDAio2r JuQq4SH+9N4zSvO3RP1pMMuVpbTh5P7oDqQszZbnmRIL5ACKeV/EgHZq4r7TZ/KW w/ZAo8MtW44HgEnB2+1OsVXfz96erqmqqeGjLMo/0q6b/UEJVgra5Zq/E+XBErL2 dwlZEgxTPo8igQpt3CjH6QD7wBXX2JezckoUuNCbVe/nK2l6ZJiUOHjYwAKHAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTfUDpS7CORo3aj w8N9qhHuLKkkpzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUE4MkE2MTc0RUQxMTRCQzE2OUNGMkM3 OTdBNEU3RjMxRUI4OUUzRUY4RkRBMENCQzI0QzJCMkExOENFRDg3My8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BQTgyQTYxNzRFRDExNEJDMTY5Q0YyQzc5N0E0RTdGMzFFQjg5RTNFRjhG REEwQ0JDMjRDMkIyQTE4Q0VEODczLzAvREY1MDNBNTJFQzIzOTFBMzc2QTNDM0Mz N0RBQTExRUUyQ0E5MjRBNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLbtaMA0EAgAC MAcDBQAoAwjgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQeKTANBgkqhkiG9w0B AQsFAAOCAQEAMwpp5q+BVGjeL91f/ENco+k8Hyb6v0sbPBzReOqpMJTK6ITik4t5 kChW8zVSA2hOeDmiCQrigmnYF6YhkLS9nzRUlUdQqCRkAfWp4NTvfv/VKTay0g7s Rj9bPF96FgTfweYWAA1lvE3FmI1aWiMDxJYazW5VulTIZEaNebqB6jSGD2NW2gAP fyF5DrvOWx4MHRqSw3CWabDqepIWDgHvETz4cPVtSKpYiGHm29ikCLxXjE8j7glQ hrpC4brir3TpTjiUpVdtAGF6gqHzgNRsLN6RdYxmMQ+BtKKy5b0YtLZoyWGl9lAY VZmhmgdcqcMFJ54HGhzITzA1TWTdYAowcg== -----END CERTIFICATE-----Generated at Mon Mar 2 11:03:19 2026 by rpki-client