$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EDA4DBFFF93706F43ACBCCA397D516467FA2B7C0.cer File: EDA4DBFFF93706F43ACBCCA397D516467FA2B7C0.cer (raw, json) Hash identifier: aFSGwddP9clgOK+zeykPK4nRkQjx8hQ44zvkcPbTU2w= Subject key identifier: ED:A4:DB:FF:F9:37:06:F4:3A:CB:CC:A3:97:D5:16:46:7F:A2:B7:C0 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 66895678E8521FE555FD332541DD7F7AFF2E8B59 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DAAF7FD78307B7257548536C216AD24C82EB25F5DBFBD292E83568E608B06078/0/EDA4DBFFF93706F43ACBCCA397D516467FA2B7C0.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DAAF7FD78307B7257548536C216AD24C82EB25F5DBFBD292E83568E608B06078/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 16:49:18 +0000 Certificate not after: Wed 27 Jan 2027 16:54:18 +0000 Subordinate resources: AS: 264691 IP: 168.228.224.0/22 IP: 2803:a340::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 11:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:89:56:78:e8:52:1f:e5:55:fd:33:25:41:dd:7f:7a:ff:2e:8b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 16:49:18 2026 GMT Not After : Jan 27 16:54:18 2027 GMT Subject: CN=EDA4DBFFF93706F43ACBCCA397D516467FA2B7C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:80:82:4f:1b:5e:a5:c9:b7:da:71:bc:00:02: b0:0f:60:32:6e:4b:5f:cc:bb:ec:15:25:7a:b5:0e: 23:48:43:85:db:05:11:68:dc:c0:1f:83:48:e0:2f: c2:b3:8e:e8:fe:55:ef:a3:72:2c:48:df:0d:fc:08: db:85:70:f1:8f:54:60:3d:95:5e:2b:8e:f2:45:66: 56:e0:80:2f:58:fc:61:1e:d1:b8:0b:5c:58:f2:8e: 7c:c4:33:b4:17:0f:ac:ba:2d:e6:04:b5:25:0b:6f: cc:d1:9c:03:eb:42:6b:d3:71:ae:9c:9c:ed:29:1e: 8c:4f:84:3d:89:e1:a4:ee:fd:f3:63:4d:73:92:b3: 74:a4:c5:a7:00:9e:db:a6:be:63:82:e4:fc:2a:60: 48:f2:83:84:b2:8b:ba:da:4e:2a:03:f2:62:d1:89: 72:2c:91:01:63:3b:a4:2f:27:87:ae:d5:84:10:52: 0a:0a:2b:c0:ef:90:03:43:a5:3b:2f:2d:74:94:87: 2a:d0:15:31:24:9c:84:10:e3:bd:a0:60:3f:6e:5f: 48:b9:10:0b:ab:30:6d:1a:9f:5b:ad:61:f2:9e:24: a5:7d:3d:4c:35:a7:3a:f0:c9:2c:33:eb:98:80:02: 8f:25:5c:d9:0d:97:ae:76:8c:dc:a1:a2:d9:dd:75: f7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: ED:A4:DB:FF:F9:37:06:F4:3A:CB:CC:A3:97:D5:16:46:7F:A2:B7:C0 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DAAF7FD78307B7257548536C216AD24C82EB25F5DBFBD292E83568E608B06078/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DAAF7FD78307B7257548536C216AD24C82EB25F5DBFBD292E83568E608B06078/0/EDA4DBFFF93706F43ACBCCA397D516467FA2B7C0.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.228.224.0/22 IPv6: 2803:a340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264691 Signature Algorithm: sha256WithRSAEncryption 6f:5b:1e:5f:93:ae:10:24:80:f4:91:96:cf:e4:5a:52:e1:29: 3d:88:6e:83:b4:72:c4:9f:6d:7e:da:0c:df:03:ec:26:b5:bb: 08:5e:ca:70:37:6b:86:5a:db:23:92:df:cf:77:cc:df:25:c4: 03:5a:6e:78:58:e2:f6:2d:58:7d:de:58:3e:3c:67:f1:f4:25: 0e:33:27:de:5b:3b:23:7d:7b:51:b5:14:04:22:15:b1:99:da: 84:97:56:98:df:5e:bd:52:42:8c:91:a6:4e:d4:bb:ff:cc:2f: 2c:a0:7b:e4:ac:3b:cf:3b:59:89:68:99:f9:02:2d:e8:63:6f: 1e:7f:da:d8:0d:09:b6:75:56:d1:23:0b:ef:53:9a:a2:14:cf: bb:5a:90:87:e2:dd:d3:ab:a6:87:73:6c:98:60:d5:7f:f6:6f: 44:68:e3:9d:81:9a:e1:43:ce:f4:e7:90:d2:a0:11:54:f7:a9: 1c:fd:93:1b:40:ea:df:54:1b:5f:8f:74:bd:61:17:b6:47:ea: b0:61:95:d5:43:e3:0a:da:1a:7c:de:8f:65:79:cc:41:ea:ba: a3:db:db:bb:4e:db:4a:08:32:3b:1c:18:a2:97:b2:9f:f3:63: 09:64:7f:a1:6a:02:71:52:da:f5:cd:92:99:66:bf:75:fd:00: 87:d9:0f:9e -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUZolWeOhSH+VV/TMlQd1/ev8ui1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNjQ5MThaFw0yNzAxMjcxNjU0MThaMDMxMTAvBgNV BAMTKEVEQTREQkZGRjkzNzA2RjQzQUNCQ0NBMzk3RDUxNjQ2N0ZBMkI3QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRgIJPG16lybfacbwAArAPYDJu S1/Mu+wVJXq1DiNIQ4XbBRFo3MAfg0jgL8Kzjuj+Ve+jcixI3w38CNuFcPGPVGA9 lV4rjvJFZlbggC9Y/GEe0bgLXFjyjnzEM7QXD6y6LeYEtSULb8zRnAPrQmvTca6c nO0pHoxPhD2J4aTu/fNjTXOSs3SkxacAntumvmOC5PwqYEjyg4Syi7raTioD8mLR iXIskQFjO6QvJ4eu1YQQUgoKK8DvkANDpTsvLXSUhyrQFTEknIQQ472gYD9uX0i5 EAurMG0an1utYfKeJKV9PUw1pzrwySwz65iAAo8lXNkNl652jNyhotnddfd9AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTtpNv/+TcG9DrL zKOX1RZGf6K3wDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREFBRjdGRDc4MzA3QjcyNTc1NDg1MzZD MjE2QUQyNEM4MkVCMjVGNURCRkJEMjkyRTgzNTY4RTYwOEIwNjA3OC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQUFGN0ZENzgzMDdCNzI1NzU0ODUzNkMyMTZBRDI0QzgyRUIyNUY1REJG QkQyOTJFODM1NjhFNjA4QjA2MDc4LzAvRURBNERCRkZGOTM3MDZGNDNBQ0JDQ0Ez OTdENTE2NDY3RkEyQjdDMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqOTgMA0EAgAC MAcDBQAoA6NAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQJ8zANBgkqhkiG9w0B AQsFAAOCAQEAb1seX5OuECSA9JGWz+RaUuEpPYhug7RyxJ9tftoM3wPsJrW7CF7K cDdrhlrbI5Lfz3fM3yXEA1pueFji9i1Yfd5YPjxn8fQlDjMn3ls7I317UbUUBCIV sZnahJdWmN9evVJCjJGmTtS7/8wvLKB75Kw7zztZiWiZ+QIt6GNvHn/a2A0JtnVW 0SML71OaohTPu1qQh+Ld06umh3NsmGDVf/ZvRGjjnYGa4UPO9OeQ0qARVPepHP2T G0Dq31QbX490vWEXtkfqsGGV1UPjCtoafN6PZXnMQeq6o9vbu07bSggyOxwYopey n/NjCWR/oWoCcVLa9c2SmWa/df0Ah9kPng== -----END CERTIFICATE-----Generated at Mon Mar 2 10:42:52 2026 by rpki-client