$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.cer File: 40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.cer (raw, json) Hash identifier: su0fWuHyQ5Uxmii2KVhc6q/z7nRmT2Yus0Cpsoy7Ex4= Subject key identifier: 40:48:6D:CD:4F:F9:A7:DB:63:55:71:FB:C2:CC:D6:D2:AD:B8:62:5F Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 045DC230389829FD6A5B8270F35B48FF8E7CF3AF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 12:00:21 +0000 Certificate not after: Wed 27 Jan 2027 12:05:21 +0000 Subordinate resources: AS: 265523 IP: 170.238.252.0/22 IP: 2806:285::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 04 Mar 2026 05:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:5d:c2:30:38:98:29:fd:6a:5b:82:70:f3:5b:48:ff:8e:7c:f3:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 12:00:21 2026 GMT Not After : Jan 27 12:05:21 2027 GMT Subject: CN=40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b5:f5:11:43:d1:76:2f:45:18:4c:3e:4e:4c: 5e:dd:80:4a:ab:14:50:78:81:06:1d:48:1e:91:11: ed:ed:eb:d2:42:b2:0f:30:d6:29:e2:58:8a:56:d2: b5:76:b0:ef:3a:e1:b3:59:53:c8:a4:e9:a5:ac:83: bb:f5:05:b3:fc:ce:96:f1:c2:b2:24:a0:25:85:1f: 6d:c1:b1:f3:42:e9:05:55:d3:a8:17:2a:d5:ae:43: bc:b3:a8:60:76:5f:13:88:25:f1:10:74:a3:d0:16: e5:86:3a:72:67:f1:2f:99:db:23:07:86:26:a3:af: f1:48:0b:58:a4:f4:f5:e4:8b:0f:c5:3d:ce:f5:46: a0:23:d7:9a:1b:64:e9:49:4e:bc:ea:be:2f:c2:96: 03:51:84:a2:71:ac:49:0b:96:75:62:a4:52:59:5a: d6:17:e3:7c:50:e2:e6:b9:0e:14:c5:f2:83:04:b3: 1e:fe:54:8e:52:b9:e6:05:f7:03:0d:57:08:1a:da: fd:81:54:01:5c:cc:25:a8:b7:0b:16:e1:bf:42:d4: 74:93:e0:bf:ed:94:f9:41:35:88:f8:8b:26:0c:00: f1:0f:90:78:88:89:32:54:78:e6:93:bc:72:f4:a2: 50:1f:5d:0d:9a:12:33:1a:e0:64:82:37:f5:dd:77: 4d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:48:6D:CD:4F:F9:A7:DB:63:55:71:FB:C2:CC:D6:D2:AD:B8:62:5F X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.238.252.0/22 IPv6: 2806:285::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265523 Signature Algorithm: sha256WithRSAEncryption 81:1d:13:ac:af:63:15:8d:8e:ac:05:4f:f4:98:ed:b5:5d:d3: cc:c4:65:53:97:bd:60:d8:39:0b:7a:e8:6f:05:1d:53:c0:25: 41:d1:78:06:27:c5:d0:38:50:11:26:71:28:a9:c0:69:20:89: d2:89:29:d9:ec:49:c5:e0:36:79:8a:04:2c:48:c7:45:82:31: 01:44:d4:34:f5:9a:56:be:0e:58:31:f6:3c:86:44:d7:4e:de: 6a:a6:28:43:c5:30:74:c7:00:09:65:40:23:b1:a8:58:cd:22: 46:41:e4:52:fc:5c:7c:78:12:74:a2:0f:75:2c:fc:56:5b:98: 8a:94:f4:9a:07:d9:54:d7:be:57:fe:31:9d:eb:2c:74:3e:95: 07:d5:76:24:67:19:b1:19:9b:0f:1b:11:16:4a:2c:68:c9:61: 72:06:a0:14:0b:71:ef:b1:7a:d6:fc:98:23:48:63:42:67:4d: 2f:de:70:cc:c7:e8:d8:f9:be:0d:f1:ce:ab:0d:08:3c:14:7d: 9c:d6:b6:a8:04:f3:6a:a3:a6:08:7e:31:65:0c:2f:ce:b1:fb: 1b:90:7f:f8:04:05:dd:6b:48:3b:5e:fc:55:be:5a:3b:22:a1: ab:a9:61:4a:a3:5a:4e:19:3d:aa:40:5b:8d:22:cd:99:75:ef: f9:25:90:1f -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUBF3CMDiYKf1qW4Jw81tI/458868wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxMjAwMjFaFw0yNzAxMjcxMjA1MjFaMDMxMTAvBgNV BAMTKDQwNDg2RENENEZGOUE3REI2MzU1NzFGQkMyQ0NENkQyQURCODYyNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDytfURQ9F2L0UYTD5OTF7dgEqr FFB4gQYdSB6REe3t69JCsg8w1iniWIpW0rV2sO864bNZU8ik6aWsg7v1BbP8zpbx wrIkoCWFH23BsfNC6QVV06gXKtWuQ7yzqGB2XxOIJfEQdKPQFuWGOnJn8S+Z2yMH hiajr/FIC1ik9PXkiw/FPc71RqAj15obZOlJTrzqvi/ClgNRhKJxrEkLlnVipFJZ WtYX43xQ4ua5DhTF8oMEsx7+VI5SueYF9wMNVwga2v2BVAFczCWotwsW4b9C1HST 4L/tlPlBNYj4iyYMAPEPkHiIiTJUeOaTvHL0olAfXQ2aEjMa4GSCN/Xdd011AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRASG3NT/mn22NV cfvCzNbSrbhiXzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTkzQUJFQzI3MTE1ODE4QzM0M0FGRkFF QjlDNEVDRDIyQzkwRTg0Qzc5RTMwRkYzMzY0NDg4MURBRUU2QzIwRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xOTNBQkVDMjcxMTU4MThDMzQzQUZGQUVCOUM0RUNEMjJDOTBFODRDNzlF MzBGRjMzNjQ0ODgxREFFRTZDMjBFLzAvNDA0ODZEQ0Q0RkY5QTdEQjYzNTU3MUZC QzJDQ0Q2RDJBREI4NjI1Ri5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqu78MA0EAgAC MAcDBQAoBgKFMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQNMzANBgkqhkiG9w0B AQsFAAOCAQEAgR0TrK9jFY2OrAVP9JjttV3TzMRlU5e9YNg5C3robwUdU8AlQdF4 BifF0DhQESZxKKnAaSCJ0okp2exJxeA2eYoELEjHRYIxAUTUNPWaVr4OWDH2PIZE 107eaqYoQ8UwdMcACWVAI7GoWM0iRkHkUvxcfHgSdKIPdSz8VluYipT0mgfZVNe+ V/4xnessdD6VB9V2JGcZsRmbDxsRFkosaMlhcgagFAtx77F61vyYI0hjQmdNL95w zMfo2Pm+DfHOqw0IPBR9nNa2qATzaqOmCH4xZQwvzrH7G5B/+AQF3WtIO178Vb5a OyKhq6lhSqNaThk9qkBbjSLNmXXv+SWQHw== -----END CERTIFICATE-----Generated at Sun Mar 1 07:35:54 2026 by rpki-client