$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB0DDD6EFD8405DF53A5EDB759C7D688B0C4381B.cer File: EB0DDD6EFD8405DF53A5EDB759C7D688B0C4381B.cer (raw, json) Hash identifier: xmbNodIdCBV9FbatqHwO5UrhcUWsN6C1LqTu2D1ziUQ= Subject key identifier: EB:0D:DD:6E:FD:84:05:DF:53:A5:ED:B7:59:C7:D6:88:B0:C4:38:1B Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1860B53FDE0974C4EAB83A8E3AAC6AFEA6DB1F70 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/3612B24A18448C29E74971997414C99DD5C52E24B83F8062020C3523B809D956/0/EB0DDD6EFD8405DF53A5EDB759C7D688B0C4381B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/3612B24A18448C29E74971997414C99DD5C52E24B83F8062020C3523B809D956/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 07 May 2026 10:45:01 +0000 Certificate not after: Thu 06 May 2027 10:50:01 +0000 Subordinate resources: AS: 266799 IP: 45.233.234.0/23 IP: 45.234.87.0/24 IP: 2803:88a0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 16 May 2026 11:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:60:b5:3f:de:09:74:c4:ea:b8:3a:8e:3a:ac:6a:fe:a6:db:1f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: May 7 10:45:01 2026 GMT Not After : May 6 10:50:01 2027 GMT Subject: CN=EB0DDD6EFD8405DF53A5EDB759C7D688B0C4381B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7a:52:a4:de:a8:f5:88:ed:77:88:d6:80:fb: 3c:64:16:7e:b1:f5:1d:13:07:ce:68:fc:a7:af:9c: 73:4b:68:ae:e6:81:8c:58:d5:d4:a8:83:b1:06:a1: f8:30:2d:18:96:c1:83:ce:e2:12:e6:65:04:2c:57: e7:ea:7e:59:e9:29:8f:0c:48:9d:c2:c8:5f:82:2a: 4b:a4:d5:93:5e:5a:5f:19:bf:79:3e:70:3b:bf:ae: 08:4d:61:65:33:05:f0:02:a8:d4:66:e8:63:b7:33: ab:d8:10:19:7c:bd:e7:fb:d5:84:fe:37:04:92:f0: 71:75:cd:db:88:48:1e:a0:6b:f6:e0:97:3e:e6:bc: 35:a9:85:37:1c:24:1e:53:39:93:86:2a:09:bd:07: 9e:e4:98:87:11:17:06:b5:56:7d:21:91:df:21:eb: 2f:7a:6f:df:a0:e1:f2:89:67:d0:d4:5f:b5:3d:55: 5c:db:0b:d9:c5:4a:31:e6:fa:f4:89:97:0f:64:97: e9:01:08:3a:e7:9a:d2:f6:26:39:9a:86:7a:93:f0: 50:06:bd:67:c1:d6:49:4e:f1:bf:80:44:bc:70:51: cf:23:d6:8c:0f:13:f0:50:cd:8f:10:4e:80:da:dd: ad:71:e0:0d:d6:28:a9:32:83:be:ea:9c:96:bc:59: 08:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:0D:DD:6E:FD:84:05:DF:53:A5:ED:B7:59:C7:D6:88:B0:C4:38:1B X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3612B24A18448C29E74971997414C99DD5C52E24B83F8062020C3523B809D956/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3612B24A18448C29E74971997414C99DD5C52E24B83F8062020C3523B809D956/0/EB0DDD6EFD8405DF53A5EDB759C7D688B0C4381B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.233.234.0/23 45.234.87.0/24 IPv6: 2803:88a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266799 Signature Algorithm: sha256WithRSAEncryption 4f:5c:d0:d6:36:c5:a3:d8:cb:5b:ae:8a:ac:c4:cd:f9:17:ac: 0a:68:69:f8:e6:ba:45:d1:61:75:86:27:32:a0:91:d0:66:8b: 4b:2f:72:12:d7:55:4d:03:29:20:f0:c3:a2:7c:3c:14:8c:23: 7b:cb:b3:0c:db:77:01:91:a8:c7:0b:af:1a:21:cf:6d:24:01: b8:0b:ad:61:59:2a:68:1b:b8:d5:f1:18:8d:9f:4b:9d:f3:50: 9d:58:a4:c3:3b:a6:12:1e:88:ba:f1:98:ca:ce:8b:3c:12:39: d7:97:da:13:16:8f:2d:12:9d:fd:4c:c7:33:de:20:f1:da:c1: dd:41:89:30:38:85:75:f9:67:97:57:a3:71:50:3b:76:e5:29: 61:c5:16:88:a4:f6:11:5c:ec:58:19:42:c0:ec:bd:e8:a7:1d: 0d:ba:a9:e5:51:5c:0c:3d:e3:d2:fd:6f:51:1c:7d:21:e9:b5: e5:46:7b:d4:03:f7:9b:07:62:d1:05:49:04:ce:9d:c1:de:10: fd:e9:5a:4a:02:d5:74:3f:e5:6f:46:9f:9f:d2:6b:26:f7:f1: b2:81:8b:68:85:fb:45:d3:57:68:45:31:67:27:dd:af:ce:15: 67:ce:cf:05:07:99:c6:09:f0:1f:d6:d7:90:60:3f:d8:fb:0c: dd:28:e3:9c -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUGGC1P94JdMTquDqOOqxq/qbbH3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA1MDcxMDQ1MDFaFw0yNzA1MDYxMDUwMDFaMDMxMTAvBgNV BAMTKEVCMERERDZFRkQ4NDA1REY1M0E1RURCNzU5QzdENjg4QjBDNDM4MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRelKk3qj1iO13iNaA+zxkFn6x 9R0TB85o/KevnHNLaK7mgYxY1dSog7EGofgwLRiWwYPO4hLmZQQsV+fqflnpKY8M SJ3CyF+CKkuk1ZNeWl8Zv3k+cDu/rghNYWUzBfACqNRm6GO3M6vYEBl8vef71YT+ NwSS8HF1zduISB6ga/bglz7mvDWphTccJB5TOZOGKgm9B57kmIcRFwa1Vn0hkd8h 6y96b9+g4fKJZ9DUX7U9VVzbC9nFSjHm+vSJlw9kl+kBCDrnmtL2JjmahnqT8FAG vWfB1klO8b+ARLxwUc8j1owPE/BQzY8QToDa3a1x4A3WKKkyg77qnJa8WQg/AgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTrDd1u/YQF31Ol 7bdZx9aIsMQ4GzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzYxMkIyNEExODQ0OEMyOUU3NDk3MTk5 NzQxNEM5OURENUM1MkUyNEI4M0Y4MDYyMDIwQzM1MjNCODA5RDk1Ni8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zNjEyQjI0QTE4NDQ4QzI5RTc0OTcxOTk3NDE0Qzk5REQ1QzUyRTI0Qjgz RjgwNjIwMjBDMzUyM0I4MDlEOTU2LzAvRUIwRERENkVGRDg0MDVERjUzQTVFREI3 NTlDN0Q2ODhCMEM0MzgxQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBLenqAwQALepX MA0EAgACMAcDBQAoA4igMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQSLzANBgkq hkiG9w0BAQsFAAOCAQEAT1zQ1jbFo9jLW66KrMTN+ResCmhp+Oa6RdFhdYYnMqCR 0GaLSy9yEtdVTQMpIPDDonw8FIwje8uzDNt3AZGoxwuvGiHPbSQBuAutYVkqaBu4 1fEYjZ9LnfNQnVikwzumEh6IuvGYys6LPBI515faExaPLRKd/UzHM94g8drB3UGJ MDiFdflnl1ejcVA7duUpYcUWiKT2EVzsWBlCwOy96KcdDbqp5VFcDD3j0v1vURx9 Iem15UZ71AP3mwdi0QVJBM6dwd4Q/elaSgLVdD/lb0afn9JrJvfxsoGLaIX7RdNX aEUxZyfdr84VZ87PBQeZxgnwH9bXkGA/2PsM3SjjnA== -----END CERTIFICATE-----Generated at Wed May 13 11:35:26 2026 by rpki-client