$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.cer File: DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.cer (raw, json) Hash identifier: tKZ8AXw3KMiD6b5fsnvJwei3kRoPBJb9SSeNtn45QI0= Subject key identifier: DD:74:39:3A:EC:4E:41:A4:1C:6F:1F:D0:2E:0D:9D:28:06:ED:9D:5A Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7EDE572A3CEA42DC68910DCCCFF5806F802C0BB8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 20 Apr 2026 15:40:00 +0000 Certificate not after: Mon 19 Apr 2027 15:45:00 +0000 Subordinate resources: AS: 274901 IP: 45.71.36.0/22 IP: 2803:cc20::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 16 May 2026 11:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:de:57:2a:3c:ea:42:dc:68:91:0d:cc:cf:f5:80:6f:80:2c:0b:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Apr 20 15:40:00 2026 GMT Not After : Apr 19 15:45:00 2027 GMT Subject: CN=DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a0:6a:c2:de:56:fb:57:27:f5:d2:4f:a8:4d: 86:a5:49:53:f7:03:a2:8c:df:89:10:27:bb:4a:1a: 5b:ee:ef:99:59:d2:c4:f9:c1:4a:45:f1:10:2b:e0: a6:f6:ea:77:0d:ce:2a:bc:ef:6a:c2:52:1d:e4:84: c3:44:43:71:eb:15:a3:9e:44:b9:28:c7:a5:df:ee: 87:46:2c:2d:a3:8e:24:11:34:3e:f9:1d:fd:fb:a7: e2:02:98:0d:3f:f8:b9:eb:51:ac:00:eb:4a:59:a8: ab:b4:a6:d5:68:95:56:f2:01:12:02:ad:f4:8f:9b: f0:b3:59:16:94:bd:f5:51:e8:a2:3e:8c:97:89:58: 92:6b:08:da:28:a9:9c:94:41:89:15:ab:59:82:6f: 32:1d:f8:f0:fb:a1:09:6b:92:9b:15:be:40:43:9d: bc:f8:ff:ab:6d:a9:70:53:f2:1f:4d:7d:8f:5c:fd: bc:ad:8d:2d:1c:ed:f9:78:ad:3e:55:da:10:0d:15: a5:d7:28:06:a7:3f:e0:b3:f0:fe:59:14:02:b3:41: e2:33:fe:96:85:d5:22:85:d5:51:d0:40:8f:13:8c: 49:a4:a5:8c:f9:77:7b:c8:7e:56:d4:0c:fa:cd:db: 4e:5d:84:c0:6f:b8:6a:e0:f7:6e:71:2a:6e:23:0a: ac:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DD:74:39:3A:EC:4E:41:A4:1C:6F:1F:D0:2E:0D:9D:28:06:ED:9D:5A X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.71.36.0/22 IPv6: 2803:cc20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274901 Signature Algorithm: sha256WithRSAEncryption 7a:5c:99:b2:66:a2:cf:5e:87:4a:6d:63:06:71:9e:c7:55:54: 4c:a2:3e:52:b6:23:d4:b2:50:bb:b9:70:5f:62:65:9c:ee:b2: e8:73:63:a7:c8:f9:66:e0:34:e1:28:5a:bb:71:f5:b6:b6:aa: a9:da:56:7b:d4:b2:14:31:e4:aa:25:10:ae:e3:18:7b:79:20: ca:74:4f:43:cf:c0:88:93:c1:d6:1b:49:ae:c0:3b:08:f2:04: ed:ee:44:47:af:a5:5d:df:b3:6b:1d:cb:75:e6:00:c8:40:49: 5d:e9:36:25:a6:c5:97:c7:d3:fd:88:62:95:a9:3e:12:50:fe: df:b8:3a:0d:9f:24:cb:53:82:99:1f:39:8c:3a:c0:9a:9d:1b: 40:d0:18:74:e5:1f:7c:a9:a1:2c:25:85:07:68:88:0b:10:2d: b0:f7:4f:de:f8:22:20:e8:4b:c8:0f:f8:70:16:39:ac:a1:15: 70:3f:f5:7f:1f:62:eb:db:ce:72:2d:7d:1c:c5:e5:96:9f:3b: 18:8b:3d:3c:84:55:28:df:2c:4b:5c:ad:ef:d1:d2:58:15:eb: 74:e2:75:f9:07:d3:f6:73:fd:4c:b6:17:5e:b4:43:4a:52:23: 7f:7f:fb:26:24:3f:95:98:3b:8a:e3:56:53:29:69:88:ea:fe: d0:5f:ca:2f -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUft5XKjzqQtxokQ3Mz/WAb4AsC7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA0MjAxNTQwMDBaFw0yNzA0MTkxNTQ1MDBaMDMxMTAvBgNV BAMTKERENzQzOTNBRUM0RTQxQTQxQzZGMUZEMDJFMEQ5RDI4MDZFRDlENUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFoGrC3lb7Vyf10k+oTYalSVP3 A6KM34kQJ7tKGlvu75lZ0sT5wUpF8RAr4Kb26ncNziq872rCUh3khMNEQ3HrFaOe RLkox6Xf7odGLC2jjiQRND75Hf37p+ICmA0/+LnrUawA60pZqKu0ptVolVbyARIC rfSPm/CzWRaUvfVR6KI+jJeJWJJrCNooqZyUQYkVq1mCbzId+PD7oQlrkpsVvkBD nbz4/6ttqXBT8h9NfY9c/bytjS0c7fl4rT5V2hANFaXXKAanP+Cz8P5ZFAKzQeIz /paF1SKF1VHQQI8TjEmkpYz5d3vIflbUDPrN205dhMBvuGrg925xKm4jCqzbAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTddDk67E5BpBxv H9AuDZ0oBu2dWjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDdDMDA5NkI5MUVFRTE0NTk4QTQ0ODEz MUMxRjIyNTBCRUM5QUU5RDJGNTgwOUNFNEE0MzIwMUMxMDkyQTI5NC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wN0MwMDk2QjkxRUVFMTQ1OThBNDQ4MTMxQzFGMjI1MEJFQzlBRTlEMkY1 ODA5Q0U0QTQzMjAxQzEwOTJBMjk0LzAvREQ3NDM5M0FFQzRFNDFBNDFDNkYxRkQw MkUwRDlEMjgwNkVEOUQ1QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLUckMA0EAgAC MAcDBQAoA8wgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQx1TANBgkqhkiG9w0B AQsFAAOCAQEAelyZsmaiz16HSm1jBnGex1VUTKI+UrYj1LJQu7lwX2JlnO6y6HNj p8j5ZuA04Shau3H1traqqdpWe9SyFDHkqiUQruMYe3kgynRPQ8/AiJPB1htJrsA7 CPIE7e5ER6+lXd+zax3LdeYAyEBJXek2JabFl8fT/Yhilak+ElD+37g6DZ8ky1OC mR85jDrAmp0bQNAYdOUffKmhLCWFB2iICxAtsPdP3vgiIOhLyA/4cBY5rKEVcD/1 fx9i69vOci19HMXllp87GIs9PIRVKN8sS1yt79HSWBXrdOJ1+QfT9nP9TLYXXrRD SlIjf3/7JiQ/lZg7iuNWUylpiOr+0F/KLw== -----END CERTIFICATE-----Generated at Wed May 13 12:34:59 2026 by rpki-client