$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0013BE61C4781324203A7DB7D11674E5D707D02.cer File: E0013BE61C4781324203A7DB7D11674E5D707D02.cer (raw, json) Hash identifier: sb9UsgF2VD1wQBH9RhLtwxC3Bjewkuyur8tjx9Nwpmk= Subject key identifier: E0:01:3B:E6:1C:47:81:32:42:03:A7:DB:7D:11:67:4E:5D:70:7D:02 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 37255CAA3D4953249001D6A32DC0238014A81747 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/E0013BE61C4781324203A7DB7D11674E5D707D02.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 22:33:18 +0000 Certificate not after: Tue 26 Jan 2027 22:38:18 +0000 Subordinate resources: AS: 269843 IP: 45.189.108.0/22 IP: 2803:e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:25:5c:aa:3d:49:53:24:90:01:d6:a3:2d:c0:23:80:14:a8:17:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 22:33:18 2026 GMT Not After : Jan 26 22:38:18 2027 GMT Subject: CN=E0013BE61C4781324203A7DB7D11674E5D707D02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e4:ee:1f:fa:27:b7:8b:5d:36:77:b2:24:e0: 35:6f:04:36:a6:09:71:7c:c1:0d:12:a2:38:04:bc: 07:1e:38:92:f2:08:b5:26:cd:4e:cf:ef:74:80:c9: 96:d2:36:cc:04:b5:5b:2f:a4:24:b2:3a:6b:e8:b7: e8:78:a7:d9:3f:5f:60:ec:e5:61:7e:2c:00:41:24: 85:d9:03:a4:7a:94:aa:cc:89:77:f9:5d:cf:a1:b9: 97:c4:70:0a:85:12:e0:9a:69:34:97:31:83:a7:6e: c3:bb:db:b1:11:c6:cb:f9:63:52:26:2e:64:7c:84: 0b:8f:15:0c:f5:d3:34:bb:cf:6b:a1:83:42:9a:7e: 22:50:50:d5:3f:6f:12:7f:19:80:ef:5d:65:b8:bd: a8:79:cf:79:5f:6d:62:2e:4f:5b:1f:68:2a:2a:c3: d9:51:0d:cc:0e:5a:1c:46:8f:6e:13:96:d2:43:72: b0:10:2b:18:9c:27:17:fd:7c:62:ad:e5:f0:19:e7: 2e:fd:2a:c3:5f:e1:18:f5:5e:9b:8a:92:f1:a0:d3: 1c:e5:ba:c0:c6:79:46:bd:93:e4:f5:6b:10:45:79: db:51:76:ea:92:50:f8:e8:c6:84:65:36:17:b6:6b: b9:d9:43:4f:19:12:39:e4:52:9f:20:16:50:53:a6: 7c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E0:01:3B:E6:1C:47:81:32:42:03:A7:DB:7D:11:67:4E:5D:70:7D:02 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/E0013BE61C4781324203A7DB7D11674E5D707D02.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.189.108.0/22 IPv6: 2803:e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269843 Signature Algorithm: sha256WithRSAEncryption 50:17:5d:eb:08:a5:f7:f6:55:d5:0b:5d:c9:f8:23:96:86:0a: 0b:93:d5:d4:81:ae:ab:49:fa:16:4a:ea:86:b8:fa:c4:5f:9d: 19:5e:e9:ce:7e:fb:c9:1b:34:9c:83:63:b1:8a:80:03:35:71: 2a:70:08:69:d7:ab:42:b1:6a:7f:6c:8a:23:8b:86:13:da:77: 0a:9e:07:cc:c2:46:d8:41:a9:9f:d5:09:ba:a1:c4:8f:b3:6e: c4:2f:2d:8e:40:13:95:91:9e:96:9b:0c:83:01:85:2d:36:7b: 60:e8:08:3c:85:86:aa:6c:25:b0:8d:0a:b2:0f:19:21:37:44: 19:3b:f4:12:e0:b9:2d:8a:e3:12:33:e3:e9:22:37:2f:90:cd: 7f:6e:d1:a3:08:0b:08:ba:8d:ca:a0:67:65:21:42:2d:7c:c4: d2:51:ff:c0:5a:b2:27:92:3d:27:d5:65:01:1f:43:8a:98:24: 21:8a:42:51:d5:3b:ab:b8:8a:ce:3a:d7:2d:7e:b8:bc:84:7b: e7:cf:e4:32:ce:4c:ac:49:15:13:ce:85:a8:2b:da:aa:c9:3e: b6:df:45:48:a3:fd:59:e5:a5:bf:0a:a9:11:07:df:66:7d:7d: 1b:fb:a7:84:fe:47:83:0d:d1:d4:8f:72:ca:ba:2c:42:3c:04: d3:0a:2e:60 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUNyVcqj1JUySQAdajLcAjgBSoF0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMjMzMThaFw0yNzAxMjYyMjM4MThaMDMxMTAvBgNV BAMTKEUwMDEzQkU2MUM0NzgxMzI0MjAzQTdEQjdEMTE2NzRFNUQ3MDdEMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE5O4f+ie3i102d7Ik4DVvBDam CXF8wQ0SojgEvAceOJLyCLUmzU7P73SAyZbSNswEtVsvpCSyOmvot+h4p9k/X2Ds 5WF+LABBJIXZA6R6lKrMiXf5Xc+huZfEcAqFEuCaaTSXMYOnbsO727ERxsv5Y1Im LmR8hAuPFQz10zS7z2uhg0KafiJQUNU/bxJ/GYDvXWW4vah5z3lfbWIuT1sfaCoq w9lRDcwOWhxGj24TltJDcrAQKxicJxf9fGKt5fAZ5y79KsNf4Rj1XpuKkvGg0xzl usDGeUa9k+T1axBFedtRduqSUPjoxoRlNhe2a7nZQ08ZEjnkUp8gFlBTpnw/AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTgATvmHEeBMkID p9t9EWdOXXB9AjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjk3RjZFNDUwRDUzNUEwMDQwMkUwRkU4 MTY4N0VEMjAwQjFDOUVFNjg4NEM0Q0NCMkZBMzQyRDE0QjNEMDY5QS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9COTdGNkU0NTBENTM1QTAwNDAyRTBGRTgxNjg3RUQyMDBCMUM5RUU2ODg0 QzRDQ0IyRkEzNDJEMTRCM0QwNjlBLzAvRTAwMTNCRTYxQzQ3ODEzMjQyMDNBN0RC N0QxMTY3NEU1RDcwN0QwMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLb1sMA0EAgAC MAcDBQAoAwDgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQeEzANBgkqhkiG9w0B AQsFAAOCAQEAUBdd6wil9/ZV1QtdyfgjloYKC5PV1IGuq0n6Fkrqhrj6xF+dGV7p zn77yRs0nINjsYqAAzVxKnAIaderQrFqf2yKI4uGE9p3Cp4HzMJG2EGpn9UJuqHE j7NuxC8tjkATlZGelpsMgwGFLTZ7YOgIPIWGqmwlsI0Ksg8ZITdEGTv0EuC5LYrj EjPj6SI3L5DNf27RowgLCLqNyqBnZSFCLXzE0lH/wFqyJ5I9J9VlAR9DipgkIYpC UdU7q7iKzjrXLX64vIR758/kMs5MrEkVE86FqCvaqsk+tt9FSKP9WeWlvwqpEQff Zn19G/unhP5Hgw3R1I9yyrosQjwE0wouYA== -----END CERTIFICATE-----Generated at Mon Mar 2 15:38:47 2026 by rpki-client