$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.cer File: 06C08D44AF888E8F97E6E20DF100F0BE283ADADD.cer (raw, json) Hash identifier: pu0WUTqTFJY9tvZGjDpQuYryP2mbFrnIdkHuYEeDb84= Subject key identifier: 06:C0:8D:44:AF:88:8E:8F:97:E6:E2:0D:F1:00:F0:BE:28:3A:DA:DD Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 683E9990D4A79D6ABAEF149BD24106E5FE455E44 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 16 Mar 2026 17:15:00 +0000 Certificate not after: Mon 15 Mar 2027 17:20:00 +0000 Subordinate resources: AS: 64168 AS: 273242 IP: 45.68.60.0/23 IP: 45.68.106.0/23 IP: 2801:19:7800::/44 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Mar 2026 18:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:3e:99:90:d4:a7:9d:6a:ba:ef:14:9b:d2:41:06:e5:fe:45:5e:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Mar 16 17:15:00 2026 GMT Not After : Mar 15 17:20:00 2027 GMT Subject: CN=06C08D44AF888E8F97E6E20DF100F0BE283ADADD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:03:3e:cc:80:2d:8b:40:b8:dc:c3:94:7d:b0: 4d:63:c2:ef:33:14:04:5e:df:08:d6:c8:5e:8e:44: 52:b8:6c:50:7d:3d:50:05:b3:a4:44:f5:38:f5:49: c4:5e:41:2f:23:e5:fd:30:1f:0b:fc:26:c1:56:3d: 5d:74:ec:64:32:3b:72:1d:1a:ff:b1:d5:ca:03:b7: 4c:1f:35:a2:0b:73:ad:a9:a6:6c:fd:1e:eb:8c:a9: 1f:0b:ad:8d:c8:48:0b:4e:c5:d5:17:97:2e:0e:07: e0:75:e8:dc:8d:20:4b:92:01:20:46:8f:c5:d2:08: fd:37:89:1f:94:61:4d:db:af:74:79:56:eb:1d:24: 51:57:ec:c6:d8:20:ca:e8:ae:0f:79:3b:32:e2:a0: 9b:e6:b4:91:ce:ab:02:16:63:64:5f:d1:62:26:d4: 4a:7f:90:80:ca:e9:a8:84:c0:52:58:e6:e9:39:b1: a7:8e:73:e6:35:52:a4:86:91:7b:0c:fd:f4:11:57: 4a:6b:b6:14:87:96:5a:1d:9d:f4:d1:79:6a:c7:d1: af:7a:ef:d4:2d:04:00:0e:46:33:92:04:8a:58:c3: 73:3c:d0:ab:ef:0f:43:2c:9c:7b:a0:ad:b8:93:c0: 17:88:ac:8e:0a:0c:0c:73:de:98:ba:eb:07:63:4c: 81:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 06:C0:8D:44:AF:88:8E:8F:97:E6:E2:0D:F1:00:F0:BE:28:3A:DA:DD X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.68.60.0/23 45.68.106.0/23 IPv6: 2801:19:7800::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64168 273242 Signature Algorithm: sha256WithRSAEncryption 8e:58:75:51:a7:d5:ba:82:60:d1:81:43:6d:a9:33:0d:61:8e: 0a:c8:15:fb:fe:fa:8f:03:04:83:92:a6:d9:00:99:90:72:87: fd:63:58:be:07:c9:98:40:f7:e5:b7:16:7b:60:72:37:c4:f5: 46:f5:77:39:31:27:19:2b:53:72:58:4b:01:15:92:73:0f:78: d9:60:09:85:42:d1:cb:d4:50:1e:b0:69:b3:74:ee:68:e9:e9: 94:cc:09:fb:6c:3a:69:b8:da:27:e3:8b:9d:13:36:a5:5b:25: 12:1a:88:41:04:c0:1e:9f:58:41:4a:a1:fb:12:c6:16:8b:40: 40:33:64:86:d4:01:05:5f:d7:1b:9f:73:ac:0b:40:47:90:c0: 0d:af:e5:57:47:89:5a:34:82:8a:78:bd:29:10:4e:a5:68:1e: 6f:0d:89:6a:7c:e4:42:eb:f4:f3:ed:29:41:d3:f8:42:a1:b0: de:1a:7d:4e:86:5f:24:b7:12:a8:65:af:e4:90:17:f2:cb:14: 5e:2a:bd:f3:17:8e:79:2b:e9:4c:98:32:66:ee:8c:70:3c:c4: e5:17:14:20:ec:7d:8c:9c:ba:82:c6:dc:6b:ef:d6:4a:4c:06: 84:40:8c:b2:c1:78:4b:a6:ba:47:73:f2:13:ba:5f:e2:51:d7: 0d:a9:ad:83 -----BEGIN CERTIFICATE----- MIIGsjCCBZqgAwIBAgIUaD6ZkNSnnWq67xSb0kEG5f5FXkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAzMTYxNzE1MDBaFw0yNzAzMTUxNzIwMDBaMDMxMTAvBgNV BAMTKDA2QzA4RDQ0QUY4ODhFOEY5N0U2RTIwREYxMDBGMEJFMjgzQURBREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvAz7MgC2LQLjcw5R9sE1jwu8z FARe3wjWyF6ORFK4bFB9PVAFs6RE9Tj1ScReQS8j5f0wHwv8JsFWPV107GQyO3Id Gv+x1coDt0wfNaILc62ppmz9HuuMqR8LrY3ISAtOxdUXly4OB+B16NyNIEuSASBG j8XSCP03iR+UYU3br3R5VusdJFFX7MbYIMrorg95OzLioJvmtJHOqwIWY2Rf0WIm 1Ep/kIDK6aiEwFJY5uk5saeOc+Y1UqSGkXsM/fQRV0prthSHllodnfTReWrH0a96 79QtBAAORjOSBIpYw3M80KvvD0MsnHugrbiTwBeIrI4KDAxz3pi66wdjTIEHAgMB AAGjggO8MIIDuDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQGwI1Er4iOj5fm 4g3xAPC+KDra3TAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTBDN0I4MkQ3NTFDMDEyMUIxREY0ODNG Q0U1MkY4MDcyQTBBNTAwQ0EyRjIyOEI0RkRFMzVEOEU4NDJDNUM2RC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85MEM3QjgyRDc1MUMwMTIxQjFERjQ4M0ZDRTUyRjgwNzJBMEE1MDBDQTJG MjI4QjRGREUzNUQ4RTg0MkM1QzZELzAvMDZDMDhENDRBRjg4OEU4Rjk3RTZFMjBE RjEwMEYwQkUyODNBREFERC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBLUQ8AwQBLURq MA8EAgACMAkDBwQoAQAZeAAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAPqoAgME K1owDQYJKoZIhvcNAQELBQADggEBAI5YdVGn1bqCYNGBQ22pMw1hjgrIFfv++o8D BIOSptkAmZByh/1jWL4HyZhA9+W3FntgcjfE9Ub1dzkxJxkrU3JYSwEVknMPeNlg CYVC0cvUUB6wabN07mjp6ZTMCftsOmm42ifji50TNqVbJRIaiEEEwB6fWEFKofsS xhaLQEAzZIbUAQVf1xufc6wLQEeQwA2v5VdHiVo0gop4vSkQTqVoHm8NiWp85ELr 9PPtKUHT+EKhsN4afU6GXyS3Eqhlr+SQF/LLFF4qvfMXjnkr6UyYMmbujHA8xOUX FCDsfYycuoLG3Gvv1kpMBoRAjLLBeEumukdz8hO6X+JR1w2prYM= -----END CERTIFICATE-----Generated at Wed Mar 18 18:55:25 2026 by rpki-client