$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E04E019E98A3A6845A74FD9DA4FB7D010F9E5956.cer File: E04E019E98A3A6845A74FD9DA4FB7D010F9E5956.cer (raw, json) Hash identifier: h5WLlirQxRaauVedDw49H+Uv9GLIdwNw57Hcnz5Owpo= Subject key identifier: E0:4E:01:9E:98:A3:A6:84:5A:74:FD:9D:A4:FB:7D:01:0F:9E:59:56 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4582559815A6A2DEC2E70C1349082DD69AF6EB03 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/AC2BDAEA47C66552B469C146215EAAD08BC27B3CB28D3D6F402429D3D6B7FE79/0/E04E019E98A3A6845A74FD9DA4FB7D010F9E5956.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/AC2BDAEA47C66552B469C146215EAAD08BC27B3CB28D3D6F402429D3D6B7FE79/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 20 Mar 2026 16:00:01 +0000 Certificate not after: Fri 19 Mar 2027 16:05:01 +0000 Subordinate resources: AS: 269767 IP: 45.183.172.0/22 IP: 2803:8d60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Mar 2026 13:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:82:55:98:15:a6:a2:de:c2:e7:0c:13:49:08:2d:d6:9a:f6:eb:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Mar 20 16:00:01 2026 GMT Not After : Mar 19 16:05:01 2027 GMT Subject: CN=E04E019E98A3A6845A74FD9DA4FB7D010F9E5956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e2:41:15:e0:10:62:27:94:7a:94:d5:4c:f0: 24:71:b9:d8:3b:86:f0:9f:d0:f4:f2:58:e4:a0:01: 74:2b:89:ed:8c:38:d6:df:23:45:97:d4:a3:73:78: 1a:c2:3f:f1:49:c8:0b:50:bd:27:b6:51:5e:32:39: b7:89:e9:51:42:64:ff:1b:bc:10:c0:cc:0d:c2:99: 35:ae:d4:f1:c6:c8:19:36:08:7a:0e:a2:c8:63:42: 67:ef:27:0d:73:39:2f:42:0b:ed:cb:53:5d:9d:73: 7f:68:05:3a:7d:6a:17:98:0e:a5:d2:e9:43:c1:bb: 69:c4:20:56:45:65:6c:c9:df:ce:9f:89:bf:78:d5: 6b:58:37:8a:85:04:64:41:dd:e2:58:88:74:26:2d: 5c:7a:e6:31:0e:79:53:db:7c:c3:dc:93:e2:31:97: 2f:e9:58:4f:71:1d:16:6c:b8:90:0b:ba:1b:c6:4a: 64:ba:7c:fc:16:bb:db:1a:1d:e0:e5:4b:53:66:f9: e8:0b:69:ce:96:7e:63:b1:a8:46:c5:80:88:a9:92: 79:f3:5b:6c:26:ce:96:74:52:c1:41:db:28:26:0b: ef:3c:30:c3:ac:97:53:85:78:88:b6:2b:2c:53:92: 50:79:41:1b:2c:33:99:47:69:4f:71:1f:8e:7f:2d: 62:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E0:4E:01:9E:98:A3:A6:84:5A:74:FD:9D:A4:FB:7D:01:0F:9E:59:56 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/AC2BDAEA47C66552B469C146215EAAD08BC27B3CB28D3D6F402429D3D6B7FE79/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/AC2BDAEA47C66552B469C146215EAAD08BC27B3CB28D3D6F402429D3D6B7FE79/0/E04E019E98A3A6845A74FD9DA4FB7D010F9E5956.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.183.172.0/22 IPv6: 2803:8d60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269767 Signature Algorithm: sha256WithRSAEncryption 42:2c:84:3f:4f:09:32:16:f3:18:26:e3:64:0d:03:8b:f6:5f: 39:82:41:0b:4a:c3:8a:79:90:4e:4a:72:e6:8c:c8:63:de:ce: dd:db:f8:d5:c2:48:ed:0a:5e:12:bb:30:dd:be:1f:ad:9d:0d: 08:da:54:f9:b3:a6:5b:50:27:ea:a2:0f:11:13:23:36:09:61: 45:29:f5:21:19:f2:60:9a:83:c4:e9:aa:e8:dd:a1:cb:59:89: ca:07:2d:ba:0e:5f:06:67:41:73:85:43:42:0b:b6:8f:27:bb: b9:fd:71:81:e5:f3:9e:ff:cd:72:79:04:65:5f:6b:f8:da:83: 95:a1:c2:6f:ad:f4:c8:ea:cf:c6:21:f8:0c:14:f9:f0:b5:42: 7e:ea:79:d2:38:49:7f:a2:1e:85:ff:13:b1:f4:d0:4d:d7:d1: 04:1a:15:19:7a:4b:9b:1f:84:4e:57:dd:ef:71:06:17:12:48: 68:5e:bc:ed:4d:29:0d:12:e3:57:70:d7:3d:69:65:f9:a2:a7: e8:4a:a4:c2:09:85:d2:94:a3:10:12:02:0a:0d:86:80:d8:c8: 5c:f0:c9:cc:bc:4c:75:23:1a:51:bd:0e:06:8c:4f:87:90:49: 69:a9:f8:1e:e3:fc:6a:94:99:c1:89:b0:df:11:41:48:4b:8a: 6a:f7:4a:7a -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIURYJVmBWmot7C5wwTSQgt1pr26wMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAzMjAxNjAwMDFaFw0yNzAzMTkxNjA1MDFaMDMxMTAvBgNV BAMTKEUwNEUwMTlFOThBM0E2ODQ1QTc0RkQ5REE0RkI3RDAxMEY5RTU5NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC74kEV4BBiJ5R6lNVM8CRxudg7 hvCf0PTyWOSgAXQrie2MONbfI0WX1KNzeBrCP/FJyAtQvSe2UV4yObeJ6VFCZP8b vBDAzA3CmTWu1PHGyBk2CHoOoshjQmfvJw1zOS9CC+3LU12dc39oBTp9aheYDqXS 6UPBu2nEIFZFZWzJ386fib941WtYN4qFBGRB3eJYiHQmLVx65jEOeVPbfMPck+Ix ly/pWE9xHRZsuJALuhvGSmS6fPwWu9saHeDlS1Nm+egLac6WfmOxqEbFgIipknnz W2wmzpZ0UsFB2ygmC+88MMOsl1OFeIi2KyxTklB5QRssM5lHaU9xH45/LWKrAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTgTgGemKOmhFp0 /Z2k+30BD55ZVjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUMyQkRBRUE0N0M2NjU1MkI0NjlDMTQ2 MjE1RUFBRDA4QkMyN0IzQ0IyOEQzRDZGNDAyNDI5RDNENkI3RkU3OS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BQzJCREFFQTQ3QzY2NTUyQjQ2OUMxNDYyMTVFQUFEMDhCQzI3QjNDQjI4 RDNENkY0MDI0MjlEM0Q2QjdGRTc5LzAvRTA0RTAxOUU5OEEzQTY4NDVBNzRGRDlE QTRGQjdEMDEwRjlFNTk1Ni5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLbesMA0EAgAC MAcDBQAoA41gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQdxzANBgkqhkiG9w0B AQsFAAOCAQEAQiyEP08JMhbzGCbjZA0Di/ZfOYJBC0rDinmQTkpy5ozIY97O3dv4 1cJI7QpeErsw3b4frZ0NCNpU+bOmW1An6qIPERMjNglhRSn1IRnyYJqDxOmq6N2h y1mJygctug5fBmdBc4VDQgu2jye7uf1xgeXznv/NcnkEZV9r+NqDlaHCb630yOrP xiH4DBT58LVCfup50jhJf6Iehf8TsfTQTdfRBBoVGXpLmx+ETlfd73EGFxJIaF68 7U0pDRLjV3DXPWll+aKn6EqkwgmF0pSjEBICCg2GgNjIXPDJzLxMdSMaUb0OBoxP h5BJaan4HuP8apSZwYmw3xFBSEuKavdKeg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:23:03 2026 by rpki-client