$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED527324A24F1D71B0AE52BC4750D2055C4FF045.cer File: ED527324A24F1D71B0AE52BC4750D2055C4FF045.cer (raw, json) Hash identifier: MnAw8kobO6ug7EKJ/YfVs6dz1Vz2bnJBQ1TCx+X37NM= Subject key identifier: ED:52:73:24:A2:4F:1D:71:B0:AE:52:BC:47:50:D2:05:5C:4F:F0:45 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1543A85C688C1857C7D8125F713D7677DA19E67F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/916A658C77768741A9C9F70A0D5446DAB55B590AAC1B38F9A7B8380BE327EAB0/0/ED527324A24F1D71B0AE52BC4750D2055C4FF045.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/916A658C77768741A9C9F70A0D5446DAB55B590AAC1B38F9A7B8380BE327EAB0/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 17 Aug 2026 18:50:01 +0000 Certificate not after: Mon 16 Aug 2027 18:55:01 +0000 Subordinate resources: AS: 274410 IP: 2806:45e::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 08:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:43:a8:5c:68:8c:18:57:c7:d8:12:5f:71:3d:76:77:da:19:e6:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Aug 17 18:50:01 2026 GMT Not After : Aug 16 18:55:01 2027 GMT Subject: CN=ED527324A24F1D71B0AE52BC4750D2055C4FF045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:71:7a:79:cb:7e:bd:29:2e:41:66:fa:f5:a3: 1e:e9:c5:ce:6f:37:7a:96:6c:b8:36:b4:96:a0:a3: a3:4a:b4:67:6f:e7:b4:83:36:c4:19:ca:69:4f:6e: 43:09:4e:2f:bf:b8:76:1c:05:8d:bf:d7:ef:8d:ce: b5:e1:d8:18:f1:d9:f1:8c:db:12:12:68:4d:de:54: 70:38:f1:7c:79:1b:2f:36:b4:2d:94:1d:39:4e:37: 58:56:dd:6e:6e:cc:8f:94:87:e7:48:45:54:ea:26: c7:fe:12:2a:84:62:77:a1:3d:3d:48:09:44:a4:b2: f1:dd:f9:63:4d:a9:cf:16:5c:70:85:93:09:92:f2: e8:d9:26:b2:0a:22:f1:bf:b3:1b:81:70:ea:4d:cc: 3b:15:0f:f6:75:25:93:65:c8:24:54:ce:0e:20:0a: 33:0b:4e:da:ab:66:a2:9d:98:b3:aa:90:e6:7c:44: 71:4d:d7:0b:e7:b3:8f:e7:70:87:85:1f:88:98:8e: 84:e2:85:49:10:c1:9e:d7:b9:b2:7c:7b:2e:be:21: 3d:ec:1b:47:13:27:be:e2:a0:89:db:65:dd:7a:91: 56:7d:5b:dd:d5:4e:33:4a:06:06:cd:1e:44:cf:bd: 6f:6a:2c:22:76:9f:da:d1:04:93:2e:d1:71:9f:10: 92:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: ED:52:73:24:A2:4F:1D:71:B0:AE:52:BC:47:50:D2:05:5C:4F:F0:45 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/916A658C77768741A9C9F70A0D5446DAB55B590AAC1B38F9A7B8380BE327EAB0/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/916A658C77768741A9C9F70A0D5446DAB55B590AAC1B38F9A7B8380BE327EAB0/0/ED527324A24F1D71B0AE52BC4750D2055C4FF045.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:45e::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274410 Signature Algorithm: sha256WithRSAEncryption 49:19:ca:39:ca:3f:bc:85:eb:04:36:9f:33:5a:1b:30:71:53: e2:ab:ef:7d:53:f5:07:87:c8:a8:4b:1d:fb:2b:88:a3:03:ee: 10:28:25:fe:99:f4:22:92:fe:81:7f:fb:89:c6:3f:ee:da:53: 09:e2:41:09:c1:f8:6b:92:84:03:e8:44:84:73:f1:24:c0:4d: 7f:ea:6c:8a:41:ca:b5:de:23:bb:66:91:4f:69:e9:32:3f:db: 1a:65:37:81:85:64:a3:1c:96:6b:b8:00:6c:91:44:9d:17:fd: 57:18:f1:2e:83:b0:47:8e:c5:21:50:ff:b6:44:ac:15:96:a9: d1:b1:9f:aa:55:fe:0d:c8:9b:80:7e:97:1f:dc:02:7f:0f:d3: dc:ec:72:65:81:c0:cb:82:bd:54:bf:80:42:b1:ba:6b:5a:ec: 5e:d8:13:8f:c6:67:fd:96:cf:7e:dc:4c:2e:0e:f3:90:a2:a3: 52:1b:be:7b:f7:65:66:a0:a5:24:d8:d7:2f:ca:84:97:62:a3: f9:e9:20:cd:36:ae:67:07:ea:e0:22:20:8c:ad:c7:d6:a1:9b: 6d:43:50:4b:49:4f:82:16:67:44:85:59:4f:ed:84:ea:2b:25: 3d:14:04:3b:e7:7e:66:4a:aa:54:2a:49:11:7b:b5:52:a8:c6: 89:08:d5:a4 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUFUOoXGiMGFfH2BJfcT12d9oZ5n8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA4MTcxODUwMDFaFw0yNzA4MTYxODU1MDFaMDMxMTAvBgNV BAMTKEVENTI3MzI0QTI0RjFENzFCMEFFNTJCQzQ3NTBEMjA1NUM0RkYwNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjcXp5y369KS5BZvr1ox7pxc5v N3qWbLg2tJago6NKtGdv57SDNsQZymlPbkMJTi+/uHYcBY2/1++NzrXh2Bjx2fGM 2xISaE3eVHA48Xx5Gy82tC2UHTlON1hW3W5uzI+Uh+dIRVTqJsf+EiqEYnehPT1I CUSksvHd+WNNqc8WXHCFkwmS8ujZJrIKIvG/sxuBcOpNzDsVD/Z1JZNlyCRUzg4g CjMLTtqrZqKdmLOqkOZ8RHFN1wvns4/ncIeFH4iYjoTihUkQwZ7XubJ8ey6+IT3s G0cTJ77ioInbZd16kVZ9W93VTjNKBgbNHkTPvW9qLCJ2n9rRBJMu0XGfEJKNAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTtUnMkok8dcbCu UrxHUNIFXE/wRTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTE2QTY1OEM3Nzc2ODc0MUE5QzlGNzBB MEQ1NDQ2REFCNTVCNTkwQUFDMUIzOEY5QTdCODM4MEJFMzI3RUFCMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85MTZBNjU4Qzc3NzY4NzQxQTlDOUY3MEEwRDU0NDZEQUI1NUI1OTBBQUMx QjM4RjlBN0I4MzgwQkUzMjdFQUIwLzAvRUQ1MjczMjRBMjRGMUQ3MUIwQUU1MkJD NDc1MEQyMDU1QzRGRjA0NS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYEXjAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEL+owDQYJKoZIhvcNAQELBQADggEBAEkZyjnK P7yF6wQ2nzNaGzBxU+Kr731T9QeHyKhLHfsriKMD7hAoJf6Z9CKS/oF/+4nGP+7a UwniQQnB+GuShAPoRIRz8STATX/qbIpByrXeI7tmkU9p6TI/2xplN4GFZKMclmu4 AGyRRJ0X/VcY8S6DsEeOxSFQ/7ZErBWWqdGxn6pV/g3Im4B+lx/cAn8P09zscmWB wMuCvVS/gEKxumta7F7YE4/GZ/2Wz37cTC4O85Cio1Ibvnv3ZWagpSTY1y/KhJdi o/npIM02rmcH6uAiIIytx9ahm21DUEtJT4IWZ0SFWU/thOorJT0UBDvnfmZKqlQq SRF7tVKoxokI1aQ= -----END CERTIFICATE-----Generated at Fri Sep 18 18:05:00 2026 by rpki-client