$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A02D297940218773DA5F365045A1F5ABDD98251.cer File: 2A02D297940218773DA5F365045A1F5ABDD98251.cer (raw, json) Hash identifier: 70gEcJ37haDhJipg6PiyopKB3LHaz82deoBz+oiyY2w= Subject key identifier: 2A:02:D2:97:94:02:18:77:3D:A5:F3:65:04:5A:1F:5A:BD:D9:82:51 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4ADA957300AEE41FABA1C65DD3C12424B3D881D4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/2C271440515A15AD244850D8D8367C1FC1AFF11F9F9531122FDF25114A5340AA/0/2A02D297940218773DA5F365045A1F5ABDD98251.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/2C271440515A15AD244850D8D8367C1FC1AFF11F9F9531122FDF25114A5340AA/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 09 Jul 2026 21:10:01 +0000 Certificate not after: Thu 08 Jul 2027 21:15:01 +0000 Subordinate resources: AS: 272048 IP: 181.233.160.0/22 IP: 2803:ed10::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 03:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:da:95:73:00:ae:e4:1f:ab:a1:c6:5d:d3:c1:24:24:b3:d8:81:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jul 9 21:10:01 2026 GMT Not After : Jul 8 21:15:01 2027 GMT Subject: CN=2A02D297940218773DA5F365045A1F5ABDD98251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:68:48:c2:76:ed:c7:71:17:92:c9:b7:1d:a4: 32:ff:58:85:57:e7:74:e6:e0:d1:47:f7:c7:b5:1e: 05:68:07:5f:29:47:31:07:4c:51:de:07:02:89:a4: ae:d8:38:c6:28:1b:f7:21:04:9c:54:e8:73:de:55: 9f:59:04:cc:69:64:eb:58:20:95:17:a7:c6:ea:bc: 50:9c:25:22:1a:54:98:5e:69:f6:4b:fe:19:5d:33: 42:ca:b5:23:81:f9:ae:e2:fa:9a:9b:a4:c3:cc:a0: 6b:15:28:a7:37:b0:21:b8:4b:6f:0f:32:4e:75:96: ab:4a:0d:d6:c4:e5:b5:a4:00:7a:51:b6:67:14:0e: 61:cf:24:9d:41:3a:de:37:a8:d8:34:e9:34:10:f7: c5:26:4f:d9:13:9e:38:fb:fd:1b:da:75:e4:86:8d: 8b:61:2e:5a:f5:30:9d:01:db:c6:0a:3b:48:bf:40: 88:f0:8a:39:54:ad:10:09:56:80:6b:2e:7c:6b:88: d6:d1:5d:ca:9f:cb:83:1f:5e:3f:61:8b:a5:34:33: 43:d3:18:a6:15:16:7c:9b:33:7a:b2:10:31:3d:b4: b9:19:a7:67:25:c2:aa:dd:69:b1:9e:81:95:19:d0: 76:cf:65:cc:d9:5f:96:35:64:67:84:3d:00:6c:24: 5b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:02:D2:97:94:02:18:77:3D:A5:F3:65:04:5A:1F:5A:BD:D9:82:51 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2C271440515A15AD244850D8D8367C1FC1AFF11F9F9531122FDF25114A5340AA/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2C271440515A15AD244850D8D8367C1FC1AFF11F9F9531122FDF25114A5340AA/0/2A02D297940218773DA5F365045A1F5ABDD98251.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.233.160.0/22 IPv6: 2803:ed10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272048 Signature Algorithm: sha256WithRSAEncryption 55:23:03:c8:88:b2:44:b7:16:22:5c:84:46:21:1b:bf:01:b4: a6:ed:b8:9f:f1:45:f2:cd:84:11:9a:5c:f5:77:5d:74:b0:c6: 48:26:3f:94:0a:f2:b5:8d:c2:c7:69:bd:01:22:6d:a8:59:09: e4:48:43:97:08:49:50:23:a1:82:a7:30:47:00:4b:73:1a:5f: 5d:24:64:aa:4c:88:ad:90:aa:29:f6:89:c1:03:b9:98:1a:3f: 49:b8:45:f0:2e:d5:ea:aa:c9:d2:6f:d3:f0:91:51:d3:ea:d7: 17:48:8a:5b:c7:66:1d:3e:43:79:d5:5d:98:98:b3:8b:21:ae: e6:29:d5:a1:c3:5e:0e:ee:78:43:b7:44:0a:4f:65:4a:b1:c8: e7:df:48:2b:a9:ee:55:fb:cc:ff:65:3d:2d:42:b1:28:20:be: 04:83:28:32:56:2a:4b:62:b6:2d:22:c1:04:2e:46:4f:77:3c: f9:b4:48:6a:a4:5f:b4:48:fe:cb:aa:f7:98:59:ac:fd:29:24: 65:1f:de:51:08:86:e4:47:16:a1:8a:18:81:b8:05:8e:5f:ce: d9:4c:dd:be:43:fc:be:16:41:4a:d6:9a:6a:b3:18:cb:8f:f1: 1f:70:07:22:cb:2c:67:c2:24:bd:61:ef:08:aa:43:6d:fb:b9: 1b:3e:97:4c -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUStqVcwCu5B+rocZd08EkJLPYgdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA3MDkyMTEwMDFaFw0yNzA3MDgyMTE1MDFaMDMxMTAvBgNV BAMTKDJBMDJEMjk3OTQwMjE4NzczREE1RjM2NTA0NUExRjVBQkREOTgyNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIaEjCdu3HcReSybcdpDL/WIVX 53Tm4NFH98e1HgVoB18pRzEHTFHeBwKJpK7YOMYoG/chBJxU6HPeVZ9ZBMxpZOtY IJUXp8bqvFCcJSIaVJheafZL/hldM0LKtSOB+a7i+pqbpMPMoGsVKKc3sCG4S28P Mk51lqtKDdbE5bWkAHpRtmcUDmHPJJ1BOt43qNg06TQQ98UmT9kTnjj7/RvadeSG jYthLlr1MJ0B28YKO0i/QIjwijlUrRAJVoBrLnxriNbRXcqfy4MfXj9hi6U0M0PT GKYVFnybM3qyEDE9tLkZp2clwqrdabGegZUZ0HbPZczZX5Y1ZGeEPQBsJFvdAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQqAtKXlAIYdz2l 82UEWh9avdmCUTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMkMyNzE0NDA1MTVBMTVBRDI0NDg1MEQ4 RDgzNjdDMUZDMUFGRjExRjlGOTUzMTEyMkZERjI1MTE0QTUzNDBBQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yQzI3MTQ0MDUxNUExNUFEMjQ0ODUwRDhEODM2N0MxRkMxQUZGMTFGOUY5 NTMxMTIyRkRGMjUxMTRBNTM0MEFBLzAvMkEwMkQyOTc5NDAyMTg3NzNEQTVGMzY1 MDQ1QTFGNUFCREQ5ODI1MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCtemgMA0EAgAC MAcDBQAoA+0QMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQmsDANBgkqhkiG9w0B AQsFAAOCAQEAVSMDyIiyRLcWIlyERiEbvwG0pu24n/FF8s2EEZpc9XdddLDGSCY/ lArytY3Cx2m9ASJtqFkJ5EhDlwhJUCOhgqcwRwBLcxpfXSRkqkyIrZCqKfaJwQO5 mBo/SbhF8C7V6qrJ0m/T8JFR0+rXF0iKW8dmHT5DedVdmJiziyGu5inVocNeDu54 Q7dECk9lSrHI599IK6nuVfvM/2U9LUKxKCC+BIMoMlYqS2K2LSLBBC5GT3c8+bRI aqRftEj+y6r3mFms/SkkZR/eUQiG5EcWoYoYgbgFjl/O2UzdvkP8vhZBStaaarMY y4/xH3AHIsssZ8IkvWHvCKpDbfu5Gz6XTA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:17:20 2026 by rpki-client