$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F14B752BDD95C05C00A4F586E5817068B49A668.cer File: 8F14B752BDD95C05C00A4F586E5817068B49A668.cer (raw, json) Hash identifier: OKdDT13SILWspuV/hfC70gJylQ1LxzDaiQkYMReKOn4= Subject key identifier: 8F:14:B7:52:BD:D9:5C:05:C0:0A:4F:58:6E:58:17:06:8B:49:A6:68 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2ABCE9440233DEFBC71BF123C946D7438E1FECE3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/8F14B752BDD95C05C00A4F586E5817068B49A668.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 11 Mar 2026 17:55:38 +0000 Certificate not after: Wed 10 Mar 2027 18:00:38 +0000 Subordinate resources: AS: 274146 IP: 45.160.156.0/22 IP: 2803:89d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Mar 2026 13:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:bc:e9:44:02:33:de:fb:c7:1b:f1:23:c9:46:d7:43:8e:1f:ec:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Mar 11 17:55:38 2026 GMT Not After : Mar 10 18:00:38 2027 GMT Subject: CN=8F14B752BDD95C05C00A4F586E5817068B49A668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:dc:9c:dd:d4:7b:9c:59:56:d1:6f:4c:84: 5b:a0:ae:eb:f9:e7:62:b7:69:da:4a:36:3d:01:ed: 72:31:11:70:61:7b:ac:53:3d:58:61:ab:1a:e7:ad: 46:60:e8:0c:34:74:7d:c9:9e:77:c5:eb:96:e9:ef: 8d:54:a1:bf:04:b6:90:f5:56:76:a9:ec:b0:c3:a7: 79:b2:90:bf:44:e1:c6:92:cd:f7:83:21:28:e2:9e: e3:1b:77:cd:41:24:b0:6b:e5:d4:a5:61:df:0e:cf: 2a:97:7d:59:93:79:3c:a8:3e:fb:49:bd:a1:51:0e: 22:1e:4e:0d:63:9c:e5:48:e4:26:a1:c5:58:0a:0f: f5:a0:15:a3:fa:44:f5:d2:09:5d:25:01:e6:6a:b2: d1:2f:5c:d8:a3:23:84:b6:29:ef:b0:d1:63:6c:be: 4a:4c:6a:fa:b5:c3:5b:3a:74:70:f5:91:23:b6:5b: b1:27:4f:04:8c:c5:37:e6:87:52:93:10:d6:71:81: 1a:c9:c5:cb:6b:26:44:67:7e:84:c0:38:93:67:33: 5e:c4:ca:24:54:be:b1:eb:0d:97:47:ea:44:ea:e7: 60:56:56:3c:50:86:c3:9e:d0:1c:e7:d7:ab:ab:62: ec:a7:9d:5e:e6:92:5a:e0:bf:46:af:ba:49:e8:6a: e6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8F:14:B7:52:BD:D9:5C:05:C0:0A:4F:58:6E:58:17:06:8B:49:A6:68 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ADC4AFE1B2E1CC8833F65DC08EC241EBFC13056B2E0966E3D3EC485E27DF9898/0/8F14B752BDD95C05C00A4F586E5817068B49A668.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.160.156.0/22 IPv6: 2803:89d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274146 Signature Algorithm: sha256WithRSAEncryption 2a:a4:be:05:ee:ee:64:5b:90:b0:d5:d8:4d:72:46:70:3b:d2: 8c:d0:ae:19:42:ff:39:ec:71:13:30:60:0d:b9:f3:ca:f3:fb: 8d:1f:00:3d:be:29:55:80:fb:56:b1:bc:c7:75:2b:7d:32:0a: f7:39:0b:3b:23:5e:68:35:ab:2f:ba:16:46:43:a9:45:a1:03: 51:3e:bb:33:a0:c4:36:3d:a2:77:a2:91:e6:42:00:49:14:48: 01:2a:e9:bc:8f:eb:2d:9c:d0:8e:a2:4d:af:88:31:4a:51:9c: 2a:ae:8d:58:68:c5:f6:9a:60:8c:f5:aa:02:96:8f:d3:2d:86: 5e:09:8b:eb:0f:dc:59:69:c0:1b:c8:ed:5d:48:32:16:b5:1f: a1:c5:dd:c1:21:b7:91:f1:7d:00:9d:3c:4b:83:35:83:c9:a4: cd:30:c3:15:ae:2f:24:2b:b0:e1:52:ce:39:9c:8d:9b:4d:2e: 28:a7:e4:cf:64:0d:87:0e:d2:05:24:fd:7a:38:a0:75:a3:1a: 13:81:c7:7e:d0:9b:71:48:ae:ce:2c:40:8f:31:00:79:6a:2c: f9:9c:2e:32:f6:a6:b1:04:2c:a5:e9:cc:e9:bb:b6:8e:60:53: 80:b9:1b:0c:f3:c0:ce:aa:fe:07:23:b6:8f:09:bd:84:0a:df: 0e:d6:f8:86 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUKrzpRAIz3vvHG/EjyUbXQ44f7OMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAzMTExNzU1MzhaFw0yNzAzMTAxODAwMzhaMDMxMTAvBgNV BAMTKDhGMTRCNzUyQkREOTVDMDVDMDBBNEY1ODZFNTgxNzA2OEI0OUE2NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+4tyc3dR7nFlW0W9MhFugruv5 52K3adpKNj0B7XIxEXBhe6xTPVhhqxrnrUZg6Aw0dH3JnnfF65bp741Uob8EtpD1 Vnap7LDDp3mykL9E4caSzfeDISjinuMbd81BJLBr5dSlYd8OzyqXfVmTeTyoPvtJ vaFRDiIeTg1jnOVI5CahxVgKD/WgFaP6RPXSCV0lAeZqstEvXNijI4S2Ke+w0WNs vkpMavq1w1s6dHD1kSO2W7EnTwSMxTfmh1KTENZxgRrJxctrJkRnfoTAOJNnM17E yiRUvrHrDZdH6kTq52BWVjxQhsOe0Bzn16urYuynnV7mklrgv0avuknoauZRAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSPFLdSvdlcBcAK T1huWBcGi0mmaDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQURDNEFGRTFCMkUxQ0M4ODMzRjY1REMw OEVDMjQxRUJGQzEzMDU2QjJFMDk2NkUzRDNFQzQ4NUUyN0RGOTg5OC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BREM0QUZFMUIyRTFDQzg4MzNGNjVEQzA4RUMyNDFFQkZDMTMwNTZCMkUw OTY2RTNEM0VDNDg1RTI3REY5ODk4LzAvOEYxNEI3NTJCREQ5NUMwNUMwMEE0RjU4 NkU1ODE3MDY4QjQ5QTY2OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLaCcMA0EAgAC MAcDBQAoA4nQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQu4jANBgkqhkiG9w0B AQsFAAOCAQEAKqS+Be7uZFuQsNXYTXJGcDvSjNCuGUL/OexxEzBgDbnzyvP7jR8A Pb4pVYD7VrG8x3UrfTIK9zkLOyNeaDWrL7oWRkOpRaEDUT67M6DENj2id6KR5kIA SRRIASrpvI/rLZzQjqJNr4gxSlGcKq6NWGjF9ppgjPWqApaP0y2GXgmL6w/cWWnA G8jtXUgyFrUfocXdwSG3kfF9AJ08S4M1g8mkzTDDFa4vJCuw4VLOOZyNm00uKKfk z2QNhw7SBST9ejigdaMaE4HHftCbcUiuzixAjzEAeWos+ZwuMvamsQQspenM6bu2 jmBTgLkbDPPAzqr+ByO2jwm9hArfDtb4hg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:51:22 2026 by rpki-client