$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC66D8834ACE024208B472A53C6F93DE533E9B83.cer File: EC66D8834ACE024208B472A53C6F93DE533E9B83.cer (raw, json) Hash identifier: YPvAcUvU7fmpqZ4A/2DSsOLT+n3mmqyRrSZsZ+3rTpQ= Subject key identifier: EC:66:D8:83:4A:CE:02:42:08:B4:72:A5:3C:6F:93:DE:53:3E:9B:83 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 5D90D871D1833B34AE7A7819C1BF0D16F85B6A9C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/7D5E67AF03DB6EE3DB059B25A69052708D90A8C0BB41F78DDB3C5438A61CBE4B/0/EC66D8834ACE024208B472A53C6F93DE533E9B83.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/7D5E67AF03DB6EE3DB059B25A69052708D90A8C0BB41F78DDB3C5438A61CBE4B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 14 Mar 2026 13:50:01 +0000 Certificate not after: Sat 13 Mar 2027 13:55:01 +0000 Subordinate resources: AS: 274312 IP: 2803:5430::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Mar 2026 05:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:90:d8:71:d1:83:3b:34:ae:7a:78:19:c1:bf:0d:16:f8:5b:6a:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Mar 14 13:50:01 2026 GMT Not After : Mar 13 13:55:01 2027 GMT Subject: CN=EC66D8834ACE024208B472A53C6F93DE533E9B83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1f:2b:36:f9:b4:0b:83:ee:e6:75:f4:f8:2f: e7:92:b0:40:72:86:4c:2a:8c:d1:50:49:54:6d:bc: 7b:f9:2f:70:ca:7f:51:67:b7:a1:84:2f:95:1b:4d: 42:76:e4:49:6d:1c:98:fc:94:6b:9b:ab:ac:74:de: 1e:03:11:30:4d:15:00:3b:4d:4e:09:01:5c:82:fc: 2d:47:28:d7:cb:c5:10:86:34:f5:d9:ab:49:59:6b: 46:5a:7b:23:4a:e7:c4:2d:1a:7e:2d:4f:c0:1c:84: 64:b5:6f:23:54:9b:92:be:b9:78:ab:0b:cf:6a:49: 32:23:17:42:e8:82:e6:3c:52:c2:d3:5f:16:0e:5e: e2:53:6e:45:75:1c:16:13:84:69:2e:ca:b3:82:ab: 84:30:3a:e6:0a:0f:e8:e5:f4:3e:ff:3a:9e:a0:d9: ab:50:cb:7f:99:b8:b9:ab:fb:67:50:8b:49:45:5a: 14:56:01:93:b2:6d:bd:09:2e:86:d2:9d:96:09:4d: c0:c4:6d:8b:a8:3b:83:92:be:d7:a7:2b:39:81:db: ba:0a:3b:68:f2:ff:e1:02:bd:5b:c3:9f:4c:13:d1: 99:50:b6:1c:11:9c:f8:95:0b:00:52:4b:83:8e:52: db:ed:b4:c0:7b:ea:1f:26:50:be:da:80:c4:49:da: 41:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:66:D8:83:4A:CE:02:42:08:B4:72:A5:3C:6F:93:DE:53:3E:9B:83 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7D5E67AF03DB6EE3DB059B25A69052708D90A8C0BB41F78DDB3C5438A61CBE4B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7D5E67AF03DB6EE3DB059B25A69052708D90A8C0BB41F78DDB3C5438A61CBE4B/0/EC66D8834ACE024208B472A53C6F93DE533E9B83.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5430::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274312 Signature Algorithm: sha256WithRSAEncryption 0d:04:52:99:da:a8:fd:42:cd:01:b1:3e:6a:1b:34:9f:4b:2c: 9a:bf:57:31:ae:fb:b6:7a:f0:7b:9c:2a:44:54:f3:19:93:04: c2:f3:07:11:8f:7e:f9:4b:44:5c:21:80:e3:2c:41:85:92:ae: 79:9e:cc:11:83:93:6e:73:29:5f:54:36:c3:4b:ab:26:15:cb: 11:9a:1a:b9:1c:8b:e9:38:b0:58:f3:1e:50:29:45:5c:ec:8c: 10:25:af:69:59:6a:c5:21:29:e4:e7:da:a3:ce:36:df:16:38: f8:76:6b:1c:08:7a:92:e3:42:92:ab:78:a2:41:be:be:24:67: c6:6f:bd:89:99:22:d5:c0:92:c7:0d:b4:b5:45:e0:0f:6f:92: 9c:14:35:c9:24:6b:c1:19:e8:48:2a:8c:ca:8c:03:05:dd:27: 55:a9:7f:42:6d:c5:54:9b:42:c5:56:a2:38:12:f8:d9:5f:7d: 95:3b:61:ba:c8:c9:e4:c1:67:22:c7:f5:a2:c5:15:e3:84:b3: 24:74:04:b3:c1:42:22:9d:66:30:d8:15:83:57:1c:3e:66:ff: f9:ef:c1:cb:9b:b4:dd:e3:79:5d:86:48:f0:9b:0d:a0:55:4b: 2b:af:72:4b:28:1e:60:65:42:f0:f1:84:c6:37:9e:ab:11:c7: c8:51:44:da -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUXZDYcdGDOzSuengZwb8NFvhbapwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAzMTQxMzUwMDFaFw0yNzAzMTMxMzU1MDFaMDMxMTAvBgNV BAMTKEVDNjZEODgzNEFDRTAyNDIwOEI0NzJBNTNDNkY5M0RFNTMzRTlCODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRHys2+bQLg+7mdfT4L+eSsEBy hkwqjNFQSVRtvHv5L3DKf1Fnt6GEL5UbTUJ25EltHJj8lGubq6x03h4DETBNFQA7 TU4JAVyC/C1HKNfLxRCGNPXZq0lZa0ZaeyNK58QtGn4tT8AchGS1byNUm5K+uXir C89qSTIjF0LoguY8UsLTXxYOXuJTbkV1HBYThGkuyrOCq4QwOuYKD+jl9D7/Op6g 2atQy3+ZuLmr+2dQi0lFWhRWAZOybb0JLobSnZYJTcDEbYuoO4OSvtenKzmB27oK O2jy/+ECvVvDn0wT0ZlQthwRnPiVCwBSS4OOUtvttMB76h8mUL7agMRJ2kHXAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTsZtiDSs4CQgi0 cqU8b5PeUz6bgzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvN0Q1RTY3QUYwM0RCNkVFM0RCMDU5QjI1 QTY5MDUyNzA4RDkwQThDMEJCNDFGNzhEREIzQzU0MzhBNjFDQkU0Qi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83RDVFNjdBRjAzREI2RUUzREIwNTlCMjVBNjkwNTI3MDhEOTBBOEMwQkI0 MUY3OEREQjNDNTQzOEE2MUNCRTRCLzAvRUM2NkQ4ODM0QUNFMDI0MjA4QjQ3MkE1 M0M2RjkzREU1MzNFOUI4My5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANUMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEL4gwDQYJKoZIhvcNAQELBQADggEBAA0EUpna qP1CzQGxPmobNJ9LLJq/VzGu+7Z68HucKkRU8xmTBMLzBxGPfvlLRFwhgOMsQYWS rnmezBGDk25zKV9UNsNLqyYVyxGaGrkci+k4sFjzHlApRVzsjBAlr2lZasUhKeTn 2qPONt8WOPh2axwIepLjQpKreKJBvr4kZ8ZvvYmZItXAkscNtLVF4A9vkpwUNckk a8EZ6EgqjMqMAwXdJ1Wpf0JtxVSbQsVWojgS+NlffZU7YbrIyeTBZyLH9aLFFeOE syR0BLPBQiKdZjDYFYNXHD5m//nvwcubtN3jeV2GSPCbDaBVSyuvcksoHmBlQvDx hMY3nqsRx8hRRNo= -----END CERTIFICATE-----Generated at Mon Mar 16 01:55:33 2026 by rpki-client