$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E74DAABF7E260E0A0AAD795F69C95998705429E3.cer File: E74DAABF7E260E0A0AAD795F69C95998705429E3.cer (raw, json) Hash identifier: foiemwNQdZVxtOM+NeSU+rffN50AQImLQIEpOLVrg7w= Subject key identifier: E7:4D:AA:BF:7E:26:0E:0A:0A:AD:79:5F:69:C9:59:98:70:54:29:E3 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3F737C5CCE4DB0E9059C02E3F400EF1CA0212591 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/E74DAABF7E260E0A0AAD795F69C95998705429E3.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 20 Oct 2026 17:20:00 +0000 Certificate not after: Tue 19 Oct 2027 17:25:00 +0000 Subordinate resources: AS: 275085 IP: 45.70.200.0/23 IP: 2803:c220::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 15:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:73:7c:5c:ce:4d:b0:e9:05:9c:02:e3:f4:00:ef:1c:a0:21:25:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Oct 20 17:20:00 2026 GMT Not After : Oct 19 17:25:00 2027 GMT Subject: CN=E74DAABF7E260E0A0AAD795F69C95998705429E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c9:b8:b3:ec:53:c5:51:6e:f6:c5:1c:36:05: a9:62:74:8c:8b:b3:34:87:e4:1b:54:07:91:74:af: f1:88:7a:78:d0:bc:31:41:94:b2:72:77:2f:42:b3: 57:67:c7:31:e8:ac:25:8a:2b:11:5e:8d:25:4e:04: 44:81:f6:51:32:af:12:a2:b0:c4:a7:e8:0a:6d:d8: 8f:6b:5e:82:fd:b8:c2:f9:4d:4f:0d:a8:2f:28:61: 62:97:35:0e:4c:8f:cc:d4:8e:3d:c4:c1:e0:35:b9: 5f:e3:bb:99:ab:3d:f2:1d:dd:d5:8b:f1:2e:e8:ab: ce:20:d2:33:b7:0e:59:15:aa:fd:73:cb:0c:e0:c8: c9:6b:f3:2e:a8:ff:69:d2:a6:c4:38:0c:1f:d9:90: 00:d3:b8:30:ae:b5:94:8b:d0:ef:ef:ba:d0:98:b9: a0:3e:8b:a4:61:3b:f3:fa:be:f7:18:47:c0:fd:1b: de:c5:3a:3e:1c:35:d3:4a:ca:af:49:a4:77:1e:f0: 5c:8c:37:16:e1:d5:b0:09:f3:9f:22:bf:4a:d9:76: 8c:4f:3f:8c:53:44:38:ca:ec:ac:e1:15:ef:3b:56: 33:ec:a9:51:26:7b:27:bb:cc:05:a1:81:cc:ef:a0: ed:a2:33:0d:73:45:55:d9:00:04:8e:32:d0:4f:26: 77:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E7:4D:AA:BF:7E:26:0E:0A:0A:AD:79:5F:69:C9:59:98:70:54:29:E3 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/E74DAABF7E260E0A0AAD795F69C95998705429E3.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.70.200.0/23 IPv6: 2803:c220::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 275085 Signature Algorithm: sha256WithRSAEncryption 84:bd:0d:26:8c:8f:85:8b:fc:44:50:aa:9a:66:eb:66:b9:87: a5:74:21:75:05:69:e7:af:ee:76:69:73:bb:79:ad:69:0f:e0: a6:2a:7f:47:f3:4e:bc:b6:8e:ba:cc:ec:4e:2d:a3:9e:ba:ca: 84:be:eb:29:18:8b:a5:4c:3c:43:12:5a:ae:75:25:35:d5:f2: bb:04:8d:ac:54:49:ad:24:bc:2a:9c:7b:a5:20:a4:73:93:e3: 9a:2d:85:0f:87:d6:8f:87:6e:5a:a1:a7:49:5d:1f:24:5b:6e: f5:0f:00:5e:40:52:bd:6b:42:86:4c:fa:bf:d7:dc:ac:89:af: 29:9c:98:13:32:8c:99:ea:19:ee:5b:2e:a0:f3:32:5c:60:f8: d0:cf:f0:42:93:ea:89:cf:8f:9b:e9:46:7b:b7:31:b7:e9:2b: 49:c5:0d:82:62:8f:3f:70:fb:3c:e6:4b:49:30:23:27:7b:68: f5:a1:42:ab:9e:89:da:a8:72:fb:c0:8f:47:28:17:77:fa:a9: 6d:4b:58:e1:94:ec:9b:34:c3:1e:4d:6e:9f:97:93:21:25:ca: c3:44:57:b0:d3:58:72:8e:a8:51:16:5f:e6:d4:a0:dd:e1:f4: b2:29:2f:22:79:cd:78:8f:73:76:24:8b:7d:45:17:06:cb:00: 24:54:fb:3a -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUP3N8XM5NsOkFnALj9ADvHKAhJZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjEwMjAxNzIwMDBaFw0yNzEwMTkxNzI1MDBaMDMxMTAvBgNV BAMTKEU3NERBQUJGN0UyNjBFMEEwQUFENzk1RjY5Qzk1OTk4NzA1NDI5RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoybiz7FPFUW72xRw2BalidIyL szSH5BtUB5F0r/GIenjQvDFBlLJydy9Cs1dnxzHorCWKKxFejSVOBESB9lEyrxKi sMSn6Apt2I9rXoL9uML5TU8NqC8oYWKXNQ5Mj8zUjj3EweA1uV/ju5mrPfId3dWL 8S7oq84g0jO3DlkVqv1zywzgyMlr8y6o/2nSpsQ4DB/ZkADTuDCutZSL0O/vutCY uaA+i6RhO/P6vvcYR8D9G97FOj4cNdNKyq9JpHce8FyMNxbh1bAJ858iv0rZdoxP P4xTRDjK7KzhFe87VjPsqVEmeye7zAWhgczvoO2iMw1zRVXZAASOMtBPJncXAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTnTaq/fiYOCgqt eV9pyVmYcFQp4zAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNEJFQ0I5RTJCM0Y1QTIyRTkyNEMzNzBE MkFENTFDODdBOEVCMDI4MTM1QzE3RDBCQkIxQzc5QkUxMEJDRjUyQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80QkVDQjlFMkIzRjVBMjJFOTI0QzM3MEQyQUQ1MUM4N0E4RUIwMjgxMzVD MTdEMEJCQjFDNzlCRTEwQkNGNTJDLzAvRTc0REFBQkY3RTI2MEUwQTBBQUQ3OTVG NjlDOTU5OTg3MDU0MjlFMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLUbIMA0EAgAC MAcDBQAoA8IgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQyjTANBgkqhkiG9w0B AQsFAAOCAQEAhL0NJoyPhYv8RFCqmmbrZrmHpXQhdQVp56/udmlzu3mtaQ/gpip/ R/NOvLaOuszsTi2jnrrKhL7rKRiLpUw8QxJarnUlNdXyuwSNrFRJrSS8Kpx7pSCk c5Pjmi2FD4fWj4duWqGnSV0fJFtu9Q8AXkBSvWtChkz6v9fcrImvKZyYEzKMmeoZ 7lsuoPMyXGD40M/wQpPqic+Pm+lGe7cxt+krScUNgmKPP3D7POZLSTAjJ3to9aFC q56J2qhy+8CPRygXd/qpbUtY4ZTsmzTDHk1un5eTISXKw0RXsNNYco6oURZf5tSg 3eH0sikvInnNeI9zdiSLfUUXBssAJFT7Og== -----END CERTIFICATE-----Generated at Wed Oct 28 18:16:49 2026 by rpki-client