$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EEE0E002488886BC968C95FD9DB8E6CBF852AD6.cer File: 2EEE0E002488886BC968C95FD9DB8E6CBF852AD6.cer (raw, json) Hash identifier: +NVj9lrdVjHhYhNQSY9cRPOGE8HOOs2cl1rONuXNszc= Subject key identifier: 2E:EE:0E:00:24:88:88:6B:C9:68:C9:5F:D9:DB:8E:6C:BF:85:2A:D6 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4C43DD5A606A8FFC708B22CB71D2AB8A2CF91422 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/AB8A7E1EB830279CAC44F04FAE77A90D14F4C7D5947C84288CB757338A933B77/0/2EEE0E002488886BC968C95FD9DB8E6CBF852AD6.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/AB8A7E1EB830279CAC44F04FAE77A90D14F4C7D5947C84288CB757338A933B77/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 08 Apr 2026 00:45:03 +0000 Certificate not after: Wed 07 Apr 2027 00:50:03 +0000 Subordinate resources: AS: 274311 IP: 2803:9430::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Apr 2026 12:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:43:dd:5a:60:6a:8f:fc:70:8b:22:cb:71:d2:ab:8a:2c:f9:14:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Apr 8 00:45:03 2026 GMT Not After : Apr 7 00:50:03 2027 GMT Subject: CN=2EEE0E002488886BC968C95FD9DB8E6CBF852AD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:27:85:8c:a0:cb:da:dc:39:3c:51:da:1f:04: 25:d2:dd:be:0e:cf:ec:1a:5b:77:94:6d:f1:dd:3a: c7:2a:6e:be:69:05:0f:35:0c:da:6b:a5:f5:61:d0: 14:4f:a0:f8:98:51:dc:92:42:b1:11:60:c5:00:29: 83:2a:8e:e1:de:25:b1:a2:3a:a4:84:93:a8:b1:30: a7:2f:d1:37:d7:59:3e:96:60:e2:a6:7f:21:59:67: 16:06:98:75:79:ba:50:12:26:85:d5:a4:aa:91:86: 76:05:0c:c2:fb:73:ee:a5:6a:d2:4e:1e:b8:fe:af: be:16:a0:0c:60:7a:24:ba:4a:63:29:1f:fc:88:9a: 6d:ea:8d:be:d7:c2:32:dd:1c:95:d0:a8:7a:62:fa: 0b:ba:d1:d6:3d:98:88:52:50:92:e9:52:44:77:dd: 90:47:8d:94:85:b6:91:ff:35:b3:ac:25:28:c3:98: d0:35:89:05:8b:9b:f2:4c:4a:ec:67:34:e8:a8:af: 61:fb:81:db:13:2d:62:4d:f8:b0:95:2c:8c:a5:04: ad:c9:97:f4:3b:04:8d:7e:3b:c8:43:8e:02:86:0b: 99:83:ef:93:1e:39:34:ce:b0:ef:18:90:10:40:e2: be:a0:b9:94:f6:04:28:d2:8a:f6:24:51:ed:d2:88: 3d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:EE:0E:00:24:88:88:6B:C9:68:C9:5F:D9:DB:8E:6C:BF:85:2A:D6 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/AB8A7E1EB830279CAC44F04FAE77A90D14F4C7D5947C84288CB757338A933B77/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/AB8A7E1EB830279CAC44F04FAE77A90D14F4C7D5947C84288CB757338A933B77/0/2EEE0E002488886BC968C95FD9DB8E6CBF852AD6.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:9430::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274311 Signature Algorithm: sha256WithRSAEncryption 88:7e:d8:36:22:de:47:9b:f8:8b:40:58:5f:7b:9d:32:8b:28: 3a:f2:c2:b5:cc:6a:d6:5a:9c:ac:db:00:a3:50:be:2b:db:f8: 49:01:e8:31:36:df:81:54:fa:d7:24:a7:e6:28:0b:fb:6b:c3: 47:43:05:46:8d:ac:3d:d0:f2:ba:7d:7a:02:09:30:36:79:3a: bc:46:f7:17:7b:b7:03:4c:81:60:cc:88:58:a6:76:d1:56:ac: b1:21:48:4f:b6:c0:3b:50:22:e7:ca:1a:2c:f1:05:48:a1:c0: 7f:12:64:43:ad:15:13:2f:63:53:d1:8c:e2:83:40:af:c7:d1: e7:78:5f:55:6a:3d:e1:83:90:ea:db:fa:27:41:1d:ee:cb:f9: 34:83:79:a6:f8:b9:15:99:af:c6:4d:59:1e:23:53:3e:be:cf: f7:f7:2a:bd:56:b1:76:37:e6:22:bb:78:07:da:21:6f:8c:43: e9:de:9b:45:cd:1b:56:85:fc:4a:eb:b1:7f:dc:86:f0:ad:97: 9d:06:7a:b5:36:a5:9f:71:89:0c:2e:cb:ef:56:80:3c:55:fc: 75:c3:08:0d:1a:cd:18:df:9f:4e:a8:c7:b8:91:95:eb:77:58: c3:9c:7a:a2:06:11:3b:b0:72:72:1a:68:6d:a6:7e:48:4b:64: f3:f3:b9:d9 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUTEPdWmBqj/xwiyLLcdKriiz5FCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA0MDgwMDQ1MDNaFw0yNzA0MDcwMDUwMDNaMDMxMTAvBgNV BAMTKDJFRUUwRTAwMjQ4ODg4NkJDOTY4Qzk1RkQ5REI4RTZDQkY4NTJBRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsJ4WMoMva3Dk8UdofBCXS3b4O z+waW3eUbfHdOscqbr5pBQ81DNprpfVh0BRPoPiYUdySQrERYMUAKYMqjuHeJbGi OqSEk6ixMKcv0TfXWT6WYOKmfyFZZxYGmHV5ulASJoXVpKqRhnYFDML7c+6latJO Hrj+r74WoAxgeiS6SmMpH/yImm3qjb7XwjLdHJXQqHpi+gu60dY9mIhSUJLpUkR3 3ZBHjZSFtpH/NbOsJSjDmNA1iQWLm/JMSuxnNOior2H7gdsTLWJN+LCVLIylBK3J l/Q7BI1+O8hDjgKGC5mD75MeOTTOsO8YkBBA4r6guZT2BCjSivYkUe3SiD1DAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQu7g4AJIiIa8lo yV/Z245sv4Uq1jAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUI4QTdFMUVCODMwMjc5Q0FDNDRGMDRG QUU3N0E5MEQxNEY0QzdENTk0N0M4NDI4OENCNzU3MzM4QTkzM0I3Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BQjhBN0UxRUI4MzAyNzlDQUM0NEYwNEZBRTc3QTkwRDE0RjRDN0Q1OTQ3 Qzg0Mjg4Q0I3NTczMzhBOTMzQjc3LzAvMkVFRTBFMDAyNDg4ODg2QkM5NjhDOTVG RDlEQjhFNkNCRjg1MkFENi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOUMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEL4cwDQYJKoZIhvcNAQELBQADggEBAIh+2DYi 3keb+ItAWF97nTKLKDrywrXMatZanKzbAKNQvivb+EkB6DE234FU+tckp+YoC/tr w0dDBUaNrD3Q8rp9egIJMDZ5OrxG9xd7twNMgWDMiFimdtFWrLEhSE+2wDtQIufK GizxBUihwH8SZEOtFRMvY1PRjOKDQK/H0ed4X1VqPeGDkOrb+idBHe7L+TSDeab4 uRWZr8ZNWR4jUz6+z/f3Kr1WsXY35iK7eAfaIW+MQ+nem0XNG1aF/ErrsX/chvCt l50GerU2pZ9xiQwuy+9WgDxV/HXDCA0azRjfn06ox7iRlet3WMOceqIGETuwcnIa aG2mfkhLZPPzudk= -----END CERTIFICATE-----Generated at Fri Apr 17 13:09:45 2026 by rpki-client