$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED480E36C09B5CC43E77CA655CA0670F8517B135.cer File: ED480E36C09B5CC43E77CA655CA0670F8517B135.cer (raw, json) Hash identifier: Sh5CPMHxVKCAKEmnFDcjZrjfz2kwgvkze/RHbR9Tr9Q= Subject key identifier: ED:48:0E:36:C0:9B:5C:C4:3E:77:CA:65:5C:A0:67:0F:85:17:B1:35 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2BC0E88C5F96DE3EC7DAB72A38A87C46C6FC8C26 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/68714350E08F3F0B5076F2F034C90D8761DD0F0DA9FAE131B8C221F1DB908D9F/0/ED480E36C09B5CC43E77CA655CA0670F8517B135.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/68714350E08F3F0B5076F2F034C90D8761DD0F0DA9FAE131B8C221F1DB908D9F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 08 Jul 2026 20:55:01 +0000 Certificate not after: Wed 07 Jul 2027 21:00:01 +0000 Subordinate resources: AS: 272387 IP: 2806:421::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 01:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c0:e8:8c:5f:96:de:3e:c7:da:b7:2a:38:a8:7c:46:c6:fc:8c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jul 8 20:55:01 2026 GMT Not After : Jul 7 21:00:01 2027 GMT Subject: CN=ED480E36C09B5CC43E77CA655CA0670F8517B135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ec:87:91:71:c4:8f:dc:60:01:22:ce:ce:81: 79:1e:48:ff:0f:99:94:e3:8a:a0:8b:1a:7a:84:7f: f5:26:7e:b9:88:64:8b:44:72:37:e4:92:1d:3d:f5: 61:67:ae:cb:c5:c6:b9:c8:49:54:70:f3:44:ba:82: c7:d3:c3:be:64:50:a4:97:64:5f:42:ea:c9:86:18: f9:81:16:4d:6e:7a:a4:9b:44:e3:2a:3e:b9:60:d8: f5:f0:e1:05:2c:fa:cd:b9:c3:11:dd:ac:fe:c9:02: bf:9a:71:c5:64:01:63:d5:0f:2e:11:fd:be:0a:c1: cc:4c:7c:ba:b3:5a:2e:a3:5f:5b:af:e7:04:e4:0f: f9:c7:ca:ab:1b:26:6a:36:b3:55:c5:4e:2a:52:48: b3:dc:09:bc:d9:c0:d0:eb:ce:36:fb:78:5d:2d:8a: 04:26:39:bf:e2:0f:11:40:94:85:3d:df:a5:32:4b: d6:8e:2b:69:3d:6e:2c:cd:69:ce:5f:1a:18:06:7e: 78:63:5c:da:98:4c:a0:77:f7:9d:c9:4d:46:56:d4: f5:35:d4:27:9f:97:f4:4c:30:6c:7a:23:60:65:fd: ef:76:9e:59:68:65:30:3e:96:91:ea:87:4b:67:38: fb:d2:8c:8e:80:5c:a1:96:6b:41:c6:9a:42:1c:88: f5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: ED:48:0E:36:C0:9B:5C:C4:3E:77:CA:65:5C:A0:67:0F:85:17:B1:35 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/68714350E08F3F0B5076F2F034C90D8761DD0F0DA9FAE131B8C221F1DB908D9F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/68714350E08F3F0B5076F2F034C90D8761DD0F0DA9FAE131B8C221F1DB908D9F/0/ED480E36C09B5CC43E77CA655CA0670F8517B135.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:421::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272387 Signature Algorithm: sha256WithRSAEncryption 71:a3:3d:41:2f:0d:f6:b7:9f:ec:38:44:6d:c5:87:3e:95:9e: e8:d9:8f:c5:f1:d0:61:88:be:a7:2b:d1:1a:a2:02:fe:23:d7: 87:4d:4f:19:20:d5:5e:5f:11:3f:74:29:ac:e4:bd:11:c7:da: 7b:28:e4:d2:37:39:c0:05:5d:3f:83:67:ab:61:93:e7:c8:3d: b1:5e:d4:b8:d3:46:58:5b:24:4e:cc:c1:fe:c9:56:24:dd:ef: 82:6e:6a:00:a4:0f:8b:79:c3:18:b9:b1:56:4c:16:08:9b:4b: 15:87:89:a6:ae:06:a5:b3:a9:01:90:ce:93:35:3d:61:36:2e: 93:65:19:d9:19:98:8a:d8:20:f9:a7:61:bc:3d:1f:99:32:c5: ff:fd:3b:0c:68:50:d6:b0:70:21:03:7f:44:5c:2f:50:dd:50: 26:97:1d:b8:c8:c9:16:6d:5d:76:7b:ee:8f:a7:27:a3:c5:f0: 82:50:74:ad:b6:78:75:94:75:91:29:39:46:c1:1a:13:d7:3b: a6:f2:97:08:e4:40:95:8b:38:7c:32:0f:33:5e:ca:45:9e:7a: 69:c8:02:69:53:c5:82:63:b3:ac:e5:f3:17:38:60:4f:27:8e: dc:41:6e:be:e4:7c:1e:12:e9:c3:af:fe:c3:34:45:26:23:4d: 5a:38:27:60 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUK8DojF+W3j7H2rcqOKh8Rsb8jCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA3MDgyMDU1MDFaFw0yNzA3MDcyMTAwMDFaMDMxMTAvBgNV BAMTKEVENDgwRTM2QzA5QjVDQzQzRTc3Q0E2NTVDQTA2NzBGODUxN0IxMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCF7IeRccSP3GABIs7OgXkeSP8P mZTjiqCLGnqEf/UmfrmIZItEcjfkkh099WFnrsvFxrnISVRw80S6gsfTw75kUKSX ZF9C6smGGPmBFk1ueqSbROMqPrlg2PXw4QUs+s25wxHdrP7JAr+accVkAWPVDy4R /b4KwcxMfLqzWi6jX1uv5wTkD/nHyqsbJmo2s1XFTipSSLPcCbzZwNDrzjb7eF0t igQmOb/iDxFAlIU936UyS9aOK2k9bizNac5fGhgGfnhjXNqYTKB3953JTUZW1PU1 1Cefl/RMMGx6I2Bl/e92nlloZTA+lpHqh0tnOPvSjI6AXKGWa0HGmkIciPUTAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTtSA42wJtcxD53 ymVcoGcPhRexNTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjg3MTQzNTBFMDhGM0YwQjUwNzZGMkYw MzRDOTBEODc2MUREMEYwREE5RkFFMTMxQjhDMjIxRjFEQjkwOEQ5Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82ODcxNDM1MEUwOEYzRjBCNTA3NkYyRjAzNEM5MEQ4NzYxREQwRjBEQTlG QUUxMzFCOEMyMjFGMURCOTA4RDlGLzAvRUQ0ODBFMzZDMDlCNUNDNDNFNzdDQTY1 NUNBMDY3MEY4NTE3QjEzNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYEITAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKAMwDQYJKoZIhvcNAQELBQADggEBAHGjPUEv Dfa3n+w4RG3Fhz6VnujZj8Xx0GGIvqcr0RqiAv4j14dNTxkg1V5fET90KazkvRHH 2nso5NI3OcAFXT+DZ6thk+fIPbFe1LjTRlhbJE7Mwf7JViTd74JuagCkD4t5wxi5 sVZMFgibSxWHiaauBqWzqQGQzpM1PWE2LpNlGdkZmIrYIPmnYbw9H5kyxf/9Owxo UNawcCEDf0RcL1DdUCaXHbjIyRZtXXZ77o+nJ6PF8IJQdK22eHWUdZEpOUbBGhPX O6bylwjkQJWLOHwyDzNeykWeemnIAmlTxYJjs6zl8xc4YE8njtxBbr7kfB4S6cOv /sM0RSYjTVo4J2A= -----END CERTIFICATE-----Generated at Fri Jul 24 17:31:31 2026 by rpki-client