$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.cer File: 298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.cer (raw, json) Hash identifier: jkPmgkkk42aUhJ2WDLm4EYY9eM5jgyU5yY3gCi5/ZjY= Subject key identifier: 29:89:35:C9:A4:3C:5C:9B:DC:9A:E1:F8:18:5B:FD:98:FF:1A:7B:39 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 46FF835E6CB7B637405EC2C0FEA95AC28F0AC9EC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 22:37:00 +0000 Certificate not after: Tue 26 Jan 2027 22:42:00 +0000 Subordinate resources: AS: 267828 IP: 45.173.216.0/22 IP: 2803:b860::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ff:83:5e:6c:b7:b6:37:40:5e:c2:c0:fe:a9:5a:c2:8f:0a:c9:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 22:37:00 2026 GMT Not After : Jan 26 22:42:00 2027 GMT Subject: CN=298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a8:f7:eb:af:e8:95:4a:14:45:7f:60:3c:7e: b3:44:9d:0d:a8:b6:28:7b:62:71:fb:9b:3a:e2:a1: 42:b2:bc:b3:94:e9:fc:d3:32:d1:3b:40:ff:4c:4a: cb:1d:1c:a1:50:7b:ed:22:ec:e5:a8:63:78:89:7c: c6:2a:7d:9a:6e:64:08:46:ed:d5:f1:35:07:20:cc: f6:39:31:d9:36:24:8a:aa:74:b7:bc:a7:79:ad:af: 97:0d:28:80:af:cc:63:c9:23:9e:dc:cd:23:8a:5c: 34:36:7b:31:2d:c1:bd:f1:bb:97:b8:e6:9a:8f:17: 7c:9f:b3:62:b0:f0:d7:ba:ce:bb:f1:58:1c:6f:04: 05:b9:e8:d8:61:9b:bc:ab:b6:2e:00:fe:04:e1:80: 01:9d:4c:8a:f6:81:43:25:da:48:a8:87:7d:73:8d: 44:6c:d0:9b:61:22:66:9c:d4:89:2d:8a:dd:ac:9d: 2a:74:81:59:16:d4:2a:e0:96:70:83:99:6b:17:8d: 16:1b:ad:1c:de:02:e1:37:a4:1e:0c:42:94:19:12: 3b:49:3c:6e:38:06:f0:9e:69:0c:74:52:64:12:c8: 0f:04:06:43:bb:91:72:49:40:34:79:e8:f1:e6:b4: 64:07:e3:c8:4d:91:72:6a:79:f4:77:3f:ea:eb:88: 86:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:89:35:C9:A4:3C:5C:9B:DC:9A:E1:F8:18:5B:FD:98:FF:1A:7B:39 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.173.216.0/22 IPv6: 2803:b860::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267828 Signature Algorithm: sha256WithRSAEncryption 0c:62:df:73:5a:e2:c9:04:95:80:7a:47:39:9c:22:50:47:c0: 92:3e:b9:24:17:48:f1:0c:f4:58:f4:aa:f4:09:3b:5e:99:6b: 92:8d:d2:84:51:b7:08:32:d4:e3:51:da:28:a0:40:ee:4a:a3: 75:34:98:9d:f1:41:47:7b:ce:c8:fe:ba:44:5a:53:be:73:79: c3:5c:3e:07:db:c9:27:03:48:9e:6f:0d:c8:24:b6:54:aa:15: e9:6e:00:52:92:98:2a:39:7b:d9:2f:ce:33:90:0e:7b:d6:05: b7:a9:00:1f:20:d5:7a:84:d0:da:aa:ab:29:4a:fd:5e:b8:32: f5:74:3d:a4:0d:9c:f1:93:06:08:c1:9b:ba:61:a2:b6:37:51: 06:88:db:1e:42:2f:5e:1f:ff:70:e7:49:9a:61:9a:fd:ab:8b: 45:9a:b2:3a:cd:48:17:1a:79:ed:54:39:b8:d2:21:e0:30:74: fb:f0:e8:29:9f:73:cb:8f:99:08:e9:8c:ad:c5:f0:77:72:29: 3f:17:95:8a:2b:20:89:17:84:6e:d3:cd:f8:38:35:dc:7d:9c: 9a:1d:59:fc:30:b0:63:09:d5:8f:d8:67:2d:72:ca:e9:83:be: f9:8d:a3:82:16:2a:ec:f1:c2:00:65:aa:09:06:4e:94:d0:26: 10:a0:2c:0a -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIURv+DXmy3tjdAXsLA/qlawo8KyewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMjM3MDBaFw0yNzAxMjYyMjQyMDBaMDMxMTAvBgNV BAMTKDI5ODkzNUM5QTQzQzVDOUJEQzlBRTFGODE4NUJGRDk4RkYxQTdCMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpqPfrr+iVShRFf2A8frNEnQ2o tih7YnH7mzrioUKyvLOU6fzTMtE7QP9MSssdHKFQe+0i7OWoY3iJfMYqfZpuZAhG 7dXxNQcgzPY5Mdk2JIqqdLe8p3mtr5cNKICvzGPJI57czSOKXDQ2ezEtwb3xu5e4 5pqPF3yfs2Kw8Ne6zrvxWBxvBAW56Nhhm7yrti4A/gThgAGdTIr2gUMl2kioh31z jURs0JthImac1Iktit2snSp0gVkW1CrglnCDmWsXjRYbrRzeAuE3pB4MQpQZEjtJ PG44BvCeaQx0UmQSyA8EBkO7kXJJQDR56PHmtGQH48hNkXJqefR3P+rriIahAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQpiTXJpDxcm9ya 4fgYW/2Y/xp7OTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMEU2OTlBNEFDNUU3RTMzRUE0NjMxODU5 Rjk3MjUyNTQzMDJEMUMxOTVERTg0NTczMjUxODI5NTg3QTNCQjQ2Ni8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wRTY5OUE0QUM1RTdFMzNFQTQ2MzE4NTlGOTcyNTI1NDMwMkQxQzE5NURF ODQ1NzMyNTE4Mjk1ODdBM0JCNDY2LzAvMjk4OTM1QzlBNDNDNUM5QkRDOUFFMUY4 MTg1QkZEOThGRjFBN0IzOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLa3YMA0EAgAC MAcDBQAoA7hgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQWNDANBgkqhkiG9w0B AQsFAAOCAQEADGLfc1riyQSVgHpHOZwiUEfAkj65JBdI8Qz0WPSq9Ak7Xplrko3S hFG3CDLU41HaKKBA7kqjdTSYnfFBR3vOyP66RFpTvnN5w1w+B9vJJwNInm8NyCS2 VKoV6W4AUpKYKjl72S/OM5AOe9YFt6kAHyDVeoTQ2qqrKUr9Xrgy9XQ9pA2c8ZMG CMGbumGitjdRBojbHkIvXh//cOdJmmGa/auLRZqyOs1IFxp57VQ5uNIh4DB0+/Do KZ9zy4+ZCOmMrcXwd3IpPxeViisgiReEbtPN+Dg13H2cmh1Z/DCwYwnVj9hnLXLK 6YO++Y2jghYq7PHCAGWqCQZOlNAmEKAsCg== -----END CERTIFICATE-----Generated at Thu Feb 19 01:31:38 2026 by rpki-client