$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.cer File: 2D9B47B31B2096B35C9794693DF659896A6B49CE.cer (raw, json) Hash identifier: 63J4+iHM430Ekw5Ahm/5/ipMVlsZP+bZQWy20UugkaI= Subject key identifier: 2D:9B:47:B3:1B:20:96:B3:5C:97:94:69:3D:F6:59:89:6A:6B:49:CE Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 700295A67EE77967B686DE99895F0EC86C224EF1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 00:48:09 +0000 Certificate not after: Wed 27 Jan 2027 00:53:09 +0000 Subordinate resources: IP: 45.65.248.0/22 IP: 2803:ddc0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:02:95:a6:7e:e7:79:67:b6:86:de:99:89:5f:0e:c8:6c:22:4e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 00:48:09 2026 GMT Not After : Jan 27 00:53:09 2027 GMT Subject: CN=2D9B47B31B2096B35C9794693DF659896A6B49CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f5:86:1c:a3:f4:3c:92:d0:2c:e2:3f:cb:cb: 10:e7:35:f2:f0:d6:58:27:23:3e:4a:6e:dd:1d:82: 1e:4b:da:b8:f7:a1:a6:12:aa:69:a8:8b:40:82:02: 94:ea:ca:b9:98:8c:57:ab:08:71:7c:dd:d7:2d:ee: f4:6e:fa:3f:5f:17:4f:74:5b:be:e5:5c:6a:8a:5c: 87:b4:8f:20:56:dc:46:b7:f6:f4:fa:ea:b2:b8:6b: 2e:d4:39:04:b1:19:b8:87:73:ea:d9:45:34:e9:d2: b5:ab:c8:e1:e7:f2:4e:04:85:62:32:51:b3:23:1a: d4:0a:1b:d6:b3:08:f1:3c:86:af:98:70:5d:8e:ec: bf:13:2c:24:c8:eb:a9:56:8d:40:96:1f:02:a7:b4: 6b:05:13:05:74:ad:57:3b:42:0a:18:f5:74:5c:ca: 73:83:f2:bf:7f:6f:4c:26:f4:b1:8c:8f:74:b2:8e: 5b:fd:3c:e8:a2:aa:d7:ce:49:6e:79:36:7a:7b:5c: 36:5d:c4:47:7f:37:03:31:a7:bd:c2:a4:f0:63:24: 1b:6c:e6:20:ec:f2:cc:75:b1:7c:3f:8d:1a:4a:3b: ac:1c:a3:e6:6b:2c:4e:ae:4e:8d:07:ed:d3:00:5e: bd:5b:bf:9b:61:b2:1d:fa:25:ff:ed:55:bf:63:5c: c3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2D:9B:47:B3:1B:20:96:B3:5C:97:94:69:3D:F6:59:89:6A:6B:49:CE X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.65.248.0/22 IPv6: 2803:ddc0::/32 Signature Algorithm: sha256WithRSAEncryption 1d:35:79:df:7a:f9:9d:5b:25:e5:e3:53:82:d5:fc:34:7a:04: b0:b0:2b:da:2e:78:ad:d1:d9:13:9f:b6:a0:ea:7c:42:13:72: 3e:96:5d:b9:4e:7c:4b:a5:1a:0b:99:0d:15:8f:6e:95:35:09: 6c:e8:3f:a5:67:75:e8:01:60:d4:1d:cf:6f:6c:80:be:5e:b9: 4e:37:3e:d2:7c:fc:38:3d:e1:50:c7:fb:4d:26:f6:87:6a:6a: 11:84:1e:1c:d5:29:03:e9:57:40:6e:96:57:a9:ec:d4:b9:b5: 81:25:27:dc:bf:9b:2d:79:e3:29:ad:57:3a:97:66:81:6a:9e: 4b:31:d6:2a:b0:87:97:62:99:0b:0e:7e:2a:c5:34:19:81:b2: a1:ca:e3:4b:38:5a:9e:3e:44:6b:0f:6f:4f:1e:b4:d5:78:2c: 28:50:0e:07:7b:27:cf:68:90:b0:8f:86:5b:45:c9:1c:35:f2: 52:28:86:21:04:ce:1c:01:1f:a6:0d:35:09:14:5a:83:9d:f0: 69:b8:b7:ca:b6:00:e7:10:1a:c1:fb:d4:11:3c:8d:0d:1e:6c: e3:47:99:b1:61:bf:ab:03:a7:53:b7:43:bf:1d:39:0c:fc:4f: b2:fa:87:b9:b0:8c:25:17:7f:bf:29:82:cf:67:89:ea:8f:40: d0:d7:69:5b -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgIUcAKVpn7neWe2ht6ZiV8OyGwiTvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwMDQ4MDlaFw0yNzAxMjcwMDUzMDlaMDMxMTAvBgNV BAMTKDJEOUI0N0IzMUIyMDk2QjM1Qzk3OTQ2OTNERjY1OTg5NkE2QjQ5Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC29YYco/Q8ktAs4j/LyxDnNfLw 1lgnIz5Kbt0dgh5L2rj3oaYSqmmoi0CCApTqyrmYjFerCHF83dct7vRu+j9fF090 W77lXGqKXIe0jyBW3Ea39vT66rK4ay7UOQSxGbiHc+rZRTTp0rWryOHn8k4EhWIy UbMjGtQKG9azCPE8hq+YcF2O7L8TLCTI66lWjUCWHwKntGsFEwV0rVc7QgoY9XRc ynOD8r9/b0wm9LGMj3Syjlv9POiiqtfOSW55Nnp7XDZdxEd/NwMxp73CpPBjJBts 5iDs8sx1sXw/jRpKO6wco+ZrLE6uTo0H7dMAXr1bv5thsh36Jf/tVb9jXMOFAgMB AAGjggOTMIIDjzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQtm0ezGyCWs1yX lGk99lmJamtJzjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjg4MjFBNUYwNkU4MDM2RTlFMUFFMERG RTAyN0VFNjA3NkQ3MkRDQzZCQzI2NTVFQTNCRkRENjI3NEZBRDdFNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CODgyMUE1RjA2RTgwMzZFOUUxQUUwREZFMDI3RUU2MDc2RDcyRENDNkJD MjY1NUVBM0JGREQ2Mjc0RkFEN0U0LzAvMkQ5QjQ3QjMxQjIwOTZCMzVDOTc5NDY5 M0RGNjU5ODk2QTZCNDlDRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLUH4MA0EAgAC MAcDBQAoA93AMA0GCSqGSIb3DQEBCwUAA4IBAQAdNXnfevmdWyXl41OC1fw0egSw sCvaLnit0dkTn7ag6nxCE3I+ll25TnxLpRoLmQ0Vj26VNQls6D+lZ3XoAWDUHc9v bIC+XrlONz7SfPw4PeFQx/tNJvaHamoRhB4c1SkD6VdAbpZXqezUubWBJSfcv5st eeMprVc6l2aBap5LMdYqsIeXYpkLDn4qxTQZgbKhyuNLOFqePkRrD29PHrTVeCwo UA4HeyfPaJCwj4ZbRckcNfJSKIYhBM4cAR+mDTUJFFqDnfBpuLfKtgDnEBrB+9QR PI0NHmzjR5mxYb+rA6dTt0O/HTkM/E+y+oe5sIwlF3+/KYLPZ4nqj0DQ12lb -----END CERTIFICATE-----Generated at Thu Feb 19 14:20:05 2026 by rpki-client