$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.cer File: 525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.cer (raw, json) Hash identifier: ZCSyxNPq+5Wnx7nxS48W1Nq8xDXNpmoBb9hL47LiGtY= Subject key identifier: 52:5D:28:6D:D2:85:74:DE:DF:2E:1C:9E:1A:2E:E6:BC:BA:59:04:0C Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7206B03D65D61C15004394BB54DDD39E07A00EF4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/74187F295AA9111F217F9D73CA3C8ABE0E256CFBCFF730A75DED066FE4E5C31E/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/74187F295AA9111F217F9D73CA3C8ABE0E256CFBCFF730A75DED066FE4E5C31E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 23 Apr 2026 17:55:03 +0000 Certificate not after: Thu 22 Apr 2027 18:00:03 +0000 Subordinate resources: AS: 274903 IP: 2803:ce30::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 04 May 2026 10:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:06:b0:3d:65:d6:1c:15:00:43:94:bb:54:dd:d3:9e:07:a0:0e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Apr 23 17:55:03 2026 GMT Not After : Apr 22 18:00:03 2027 GMT Subject: CN=525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a3:c3:1e:71:95:55:32:ae:d4:ad:3e:f9:00: fe:8a:f4:86:00:f8:a1:66:92:c1:e2:f0:cf:55:ec: 98:06:5e:47:a9:d0:55:8c:d0:17:fc:56:5a:d6:12: 0c:10:1f:eb:ff:95:52:3f:04:39:81:74:0e:ad:7b: 67:96:7d:ab:96:85:b3:38:24:0a:6b:1c:fb:87:7a: 1a:98:13:b8:b2:1d:ab:6b:f8:8d:55:5b:7f:b6:fc: 71:db:33:d6:d7:98:6a:c6:36:75:1b:e2:1b:8c:8f: 18:3b:aa:73:8d:61:86:6e:3f:61:76:5c:41:0e:a2: 75:92:7b:b9:6e:59:1e:3d:25:f1:a5:51:fe:de:38: ac:50:08:81:83:62:96:76:90:b2:2c:28:53:24:9b: f4:db:49:a1:85:b7:5d:99:8d:8b:bc:27:e2:28:09: a5:0c:24:8b:2b:f9:4f:97:b7:d7:cd:48:5a:59:3e: 34:bb:b5:f3:5e:de:1c:ed:bf:a9:b7:47:16:d2:48: bb:ad:dc:7a:70:2a:4d:41:1e:8f:5a:84:85:44:a2: 89:fd:06:3b:39:76:51:e6:10:71:c5:e7:14:86:bf: b9:d6:58:eb:4d:66:90:20:79:4e:9e:98:8d:ac:31: e8:3e:d1:cb:50:dc:2d:8b:46:dc:25:03:f6:b6:2c: 75:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 52:5D:28:6D:D2:85:74:DE:DF:2E:1C:9E:1A:2E:E6:BC:BA:59:04:0C X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/74187F295AA9111F217F9D73CA3C8ABE0E256CFBCFF730A75DED066FE4E5C31E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/74187F295AA9111F217F9D73CA3C8ABE0E256CFBCFF730A75DED066FE4E5C31E/0/525D286DD28574DEDF2E1C9E1A2EE6BCBA59040C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:ce30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274903 Signature Algorithm: sha256WithRSAEncryption 4c:bb:da:fa:80:2d:c2:38:90:e7:d2:29:c6:87:29:40:04:fe: 4c:73:25:8e:1b:8d:81:ec:b9:2c:27:7e:ae:56:f4:a2:2d:d0: 28:ce:e3:eb:9e:d1:b5:e3:c0:4b:25:4d:13:16:bc:d0:7b:78: 54:7d:95:2a:7e:f2:6c:fc:79:d8:e1:99:90:a4:d4:ba:b0:0a: 20:91:f9:95:e5:b2:7d:67:f4:77:06:90:bd:a4:fb:24:fc:34: 03:92:6f:77:4d:f3:6a:c0:e6:99:ba:e1:a1:72:1e:1c:c4:55: a4:fe:81:b1:0e:aa:a9:ed:2e:c1:98:e8:c8:67:dc:ac:76:dd: 63:10:aa:be:9c:9b:bc:85:a4:32:05:e2:ed:de:1d:85:ea:eb: 42:49:13:5f:9d:4b:ac:08:8a:f5:28:17:d9:52:c9:ff:bf:e1: 06:d2:c0:ef:c4:86:b6:3d:72:e4:9e:bf:5b:0f:55:d0:90:a7: a8:83:53:f1:52:5d:01:0c:e1:4f:4d:0c:42:1d:ed:75:41:0b: 82:63:c0:87:94:f2:2f:27:e0:fd:d1:a1:84:4c:83:d6:07:c9: c1:8d:10:52:a3:79:2f:85:d2:d8:5d:e4:4a:7e:88:14:96:a7: 14:87:34:a6:18:67:1f:a4:46:dc:a7:dd:58:ad:32:dd:d1:6b: 7d:8e:cf:64 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUcgawPWXWHBUAQ5S7VN3TngegDvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA0MjMxNzU1MDNaFw0yNzA0MjIxODAwMDNaMDMxMTAvBgNV BAMTKDUyNUQyODZERDI4NTc0REVERjJFMUM5RTFBMkVFNkJDQkE1OTA0MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNo8MecZVVMq7UrT75AP6K9IYA +KFmksHi8M9V7JgGXkep0FWM0Bf8VlrWEgwQH+v/lVI/BDmBdA6te2eWfauWhbM4 JAprHPuHehqYE7iyHatr+I1VW3+2/HHbM9bXmGrGNnUb4huMjxg7qnONYYZuP2F2 XEEOonWSe7luWR49JfGlUf7eOKxQCIGDYpZ2kLIsKFMkm/TbSaGFt12ZjYu8J+Io CaUMJIsr+U+Xt9fNSFpZPjS7tfNe3hztv6m3RxbSSLut3HpwKk1BHo9ahIVEoon9 Bjs5dlHmEHHF5xSGv7nWWOtNZpAgeU6emI2sMeg+0ctQ3C2LRtwlA/a2LHW7AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRSXSht0oV03t8u HJ4aLua8ulkEDDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzQxODdGMjk1QUE5MTExRjIxN0Y5RDcz Q0EzQzhBQkUwRTI1NkNGQkNGRjczMEE3NURFRDA2NkZFNEU1QzMxRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83NDE4N0YyOTVBQTkxMTFGMjE3RjlENzNDQTNDOEFCRTBFMjU2Q0ZCQ0ZG NzMwQTc1REVEMDY2RkU0RTVDMzFFLzAvNTI1RDI4NkREMjg1NzRERURGMkUxQzlF MUEyRUU2QkNCQTU5MDQwQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPOMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMdcwDQYJKoZIhvcNAQELBQADggEBAEy72vqA LcI4kOfSKcaHKUAE/kxzJY4bjYHsuSwnfq5W9KIt0CjO4+ue0bXjwEslTRMWvNB7 eFR9lSp+8mz8edjhmZCk1LqwCiCR+ZXlsn1n9HcGkL2k+yT8NAOSb3dN82rA5pm6 4aFyHhzEVaT+gbEOqqntLsGY6Mhn3Kx23WMQqr6cm7yFpDIF4u3eHYXq60JJE1+d S6wIivUoF9lSyf+/4QbSwO/EhrY9cuSev1sPVdCQp6iDU/FSXQEM4U9NDEId7XVB C4JjwIeU8i8n4P3RoYRMg9YHycGNEFKjeS+F0thd5Ep+iBSWpxSHNKYYZx+kRtyn 3VitMt3Ra32Oz2Q= -----END CERTIFICATE-----Generated at Thu Apr 30 04:54:31 2026 by rpki-client