$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED.cer File: EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED.cer (raw, json) Hash identifier: 4eGdkTeYkOXpg0dzCrLojOLc/weZTTkq4x1r8gWUbb8= Subject key identifier: EB:48:A6:C9:79:1D:EF:12:29:0F:CB:FD:C6:3E:9C:8A:C2:C2:EA:ED Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0351840C579E6ABB0B07F76EBAFAD9E973CFEC80 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FBDDDDCC26DBD9D0EF5C28747275CD801C96379A5D0A9B758DF4019CD88F8380/0/EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FBDDDDCC26DBD9D0EF5C28747275CD801C96379A5D0A9B758DF4019CD88F8380/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 07:04:16 +0000 Certificate not after: Wed 27 Jan 2027 07:09:16 +0000 Subordinate resources: IP: 45.173.228.0/22 IP: 2803:5c60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:51:84:0c:57:9e:6a:bb:0b:07:f7:6e:ba:fa:d9:e9:73:cf:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 07:04:16 2026 GMT Not After : Jan 27 07:09:16 2027 GMT Subject: CN=EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:08:7d:e3:a9:2a:b0:9d:20:49:d1:19:07:cb: 63:d0:ea:b1:05:a1:f3:70:11:85:31:7d:5c:f3:5f: d6:08:3f:0f:94:5d:71:df:a3:a8:07:30:6c:5e:00: 8e:25:a7:06:92:19:d0:c0:11:16:23:13:b7:1b:23: dd:f8:0f:f2:23:54:bb:88:08:2f:0c:54:5c:0d:c9: c9:06:54:ed:64:6a:9f:59:d2:de:70:6b:41:05:42: c7:22:af:88:c2:d5:a1:47:4d:e4:e8:2a:e6:d3:2e: df:51:86:a8:8a:7c:7d:54:a5:78:03:0a:51:3e:f1: 10:6c:56:bd:df:ed:0e:2f:94:4a:32:6a:63:1c:9d: 68:7a:70:38:c8:02:38:d4:47:e9:81:fd:99:7a:75: 31:65:a0:85:82:e9:ce:f3:13:1b:2e:a9:71:fd:48: 3f:8f:0a:a6:f1:11:8b:48:35:61:77:a4:4c:cf:e2: da:af:14:67:a1:23:ab:28:fd:47:50:d9:33:33:ce: cf:0b:75:e0:91:f3:c7:95:d7:88:90:8e:f9:67:99: 28:86:b9:d8:d7:66:6d:77:ae:55:37:64:95:59:d1: e9:19:49:f4:4d:50:4a:53:29:f3:01:64:a1:c4:4a: 63:b9:b0:17:0d:cd:98:a3:95:b2:4f:98:2a:78:54: f6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:48:A6:C9:79:1D:EF:12:29:0F:CB:FD:C6:3E:9C:8A:C2:C2:EA:ED X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FBDDDDCC26DBD9D0EF5C28747275CD801C96379A5D0A9B758DF4019CD88F8380/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FBDDDDCC26DBD9D0EF5C28747275CD801C96379A5D0A9B758DF4019CD88F8380/0/EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.173.228.0/22 IPv6: 2803:5c60::/32 Signature Algorithm: sha256WithRSAEncryption 69:3e:53:76:53:eb:b9:91:6a:71:06:0b:41:cd:57:c4:3c:97: 3d:9c:c6:5e:c9:92:45:71:43:50:b0:1e:3f:b4:f8:f2:6b:a0: 42:3b:41:2a:74:3b:c3:8c:62:07:82:63:d1:75:b9:6c:b2:e3: f7:ba:2b:3c:91:9b:e2:65:31:cf:52:c9:95:f1:11:7d:0b:2d: 5c:2c:8d:15:6e:0e:ab:5e:70:85:a3:46:09:dc:de:ec:ae:8b: e7:6d:ce:54:44:86:8c:33:80:c0:e9:97:39:df:bd:f4:42:2f: 10:5c:9b:0b:d7:84:af:55:3b:77:3c:40:99:ea:68:45:fc:b7: 92:c7:52:44:48:57:9a:22:6c:83:c7:29:f6:35:ae:ce:c0:c6: cb:79:cc:1e:5a:4d:18:5f:bd:b9:30:fd:70:fc:8c:ae:78:fd: 9f:f2:d3:ef:a7:be:69:23:2a:80:08:e4:57:23:79:08:d8:f6: 3a:d5:f9:f5:2d:c9:9a:e2:01:9a:07:db:22:56:6a:e0:10:e0: f5:e8:95:fa:84:5e:96:56:30:eb:f8:cd:36:ca:fe:55:18:58: 3c:1f:de:a1:f4:12:7d:b1:c2:d1:08:e2:3a:0c:4d:62:70:27: c3:7a:bc:fb:94:73:3d:28:b6:f1:3a:59:26:b3:3f:b0:c2:c2: 7c:9d:de:95 -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgIUA1GEDFeearsLB/duuvrZ6XPP7IAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNzA0MTZaFw0yNzAxMjcwNzA5MTZaMDMxMTAvBgNV BAMTKEVCNDhBNkM5NzkxREVGMTIyOTBGQ0JGREM2M0U5QzhBQzJDMkVBRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtCH3jqSqwnSBJ0RkHy2PQ6rEF ofNwEYUxfVzzX9YIPw+UXXHfo6gHMGxeAI4lpwaSGdDAERYjE7cbI934D/IjVLuI CC8MVFwNyckGVO1kap9Z0t5wa0EFQscir4jC1aFHTeToKubTLt9RhqiKfH1UpXgD ClE+8RBsVr3f7Q4vlEoyamMcnWh6cDjIAjjUR+mB/Zl6dTFloIWC6c7zExsuqXH9 SD+PCqbxEYtINWF3pEzP4tqvFGehI6so/UdQ2TMzzs8LdeCR88eV14iQjvlnmSiG udjXZm13rlU3ZJVZ0ekZSfRNUEpTKfMBZKHESmO5sBcNzZijlbJPmCp4VPYDAgMB AAGjggOTMIIDjzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTrSKbJeR3vEikP y/3GPpyKwsLq7TAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkJEREREQ0MyNkRCRDlEMEVGNUMyODc0 NzI3NUNEODAxQzk2Mzc5QTVEMEE5Qjc1OERGNDAxOUNEODhGODM4MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GQkRERERDQzI2REJEOUQwRUY1QzI4NzQ3Mjc1Q0Q4MDFDOTYzNzlBNUQw QTlCNzU4REY0MDE5Q0Q4OEY4MzgwLzAvRUI0OEE2Qzk3OTFERUYxMjI5MEZDQkZE QzYzRTlDOEFDMkMyRUFFRC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLa3kMA0EAgAC MAcDBQAoA1xgMA0GCSqGSIb3DQEBCwUAA4IBAQBpPlN2U+u5kWpxBgtBzVfEPJc9 nMZeyZJFcUNQsB4/tPjya6BCO0EqdDvDjGIHgmPRdblssuP3uis8kZviZTHPUsmV 8RF9Cy1cLI0Vbg6rXnCFo0YJ3N7srovnbc5URIaMM4DA6Zc53730Qi8QXJsL14Sv VTt3PECZ6mhF/LeSx1JESFeaImyDxyn2Na7OwMbLecweWk0YX725MP1w/IyueP2f 8tPvp75pIyqACORXI3kI2PY61fn1Lcma4gGaB9siVmrgEOD16JX6hF6WVjDr+M02 yv5VGFg8H96h9BJ9scLRCOI6DE1icCfDerz7lHM9KLbxOlkmsz+wwsJ8nd6V -----END CERTIFICATE-----Generated at Mon Mar 2 09:46:56 2026 by rpki-client