$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4028A489B5AC3783BE499256A832ADD8A8A582.cer File: 2B4028A489B5AC3783BE499256A832ADD8A8A582.cer (raw, json) Hash identifier: Wnfhgo7yL6KJRkHsRVNDbysRmWNswYCvfGS9WScFOHc= Subject key identifier: 2B:40:28:A4:89:B5:AC:37:83:BE:49:92:56:A8:32:AD:D8:A8:A5:82 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 73E9906FF842657DD5D32A75A0FC2349204A3494 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A6ABCAE06994B25D303E0DF561A94D8C0CB5A913013F2A9B77B604A1325D69CC/0/2B4028A489B5AC3783BE499256A832ADD8A8A582.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A6ABCAE06994B25D303E0DF561A94D8C0CB5A913013F2A9B77B604A1325D69CC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 06 May 2026 17:55:42 +0000 Certificate not after: Wed 05 May 2027 18:00:42 +0000 Subordinate resources: AS: 274251 IP: 190.15.250.0/24 IP: 2803:8fd0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 17 May 2026 14:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e9:90:6f:f8:42:65:7d:d5:d3:2a:75:a0:fc:23:49:20:4a:34:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: May 6 17:55:42 2026 GMT Not After : May 5 18:00:42 2027 GMT Subject: CN=2B4028A489B5AC3783BE499256A832ADD8A8A582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:77:92:8f:65:ba:3d:c7:f0:e5:c5:df:71:14: 75:bb:d9:24:de:08:e2:71:df:25:7e:e2:b3:ea:39: 0c:81:47:cc:03:13:1f:a0:a2:ae:96:af:37:0d:9a: df:64:9c:e8:56:3a:4d:ca:ee:a5:5b:64:e3:52:a5: 69:f7:72:4b:79:94:b1:1c:ec:f0:5b:ac:1b:1b:dc: 03:99:23:de:33:8f:ce:f9:5d:5a:2c:8d:bb:f5:91: 81:f4:d2:81:b6:07:0b:6a:84:12:66:3a:26:04:80: 99:4f:91:02:7e:ba:51:35:63:2b:1c:e5:d7:4a:eb: 40:72:98:fd:f4:2f:e2:06:ed:98:11:91:3e:4b:1f: 8c:51:50:9d:6a:cf:51:ea:75:59:23:b8:c4:85:c4: 7b:fb:f8:5d:0b:d6:d2:f1:4a:8b:ad:30:47:be:83: e4:ed:51:28:a2:f4:45:05:c9:00:b7:74:96:67:57: e9:50:a7:e1:db:f0:54:9e:38:f9:72:2c:30:32:31: 39:de:95:ca:36:ce:c0:c7:ec:56:2e:8d:c5:62:53: 65:70:ed:80:77:f1:c4:3c:1b:bf:36:b2:6d:89:e9: f6:c3:76:91:1c:33:de:a4:76:84:cd:c9:d2:9c:40: d5:44:6d:7e:ef:6c:f8:1c:b3:8d:44:28:97:e8:65: 17:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2B:40:28:A4:89:B5:AC:37:83:BE:49:92:56:A8:32:AD:D8:A8:A5:82 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A6ABCAE06994B25D303E0DF561A94D8C0CB5A913013F2A9B77B604A1325D69CC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A6ABCAE06994B25D303E0DF561A94D8C0CB5A913013F2A9B77B604A1325D69CC/0/2B4028A489B5AC3783BE499256A832ADD8A8A582.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.15.250.0/24 IPv6: 2803:8fd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274251 Signature Algorithm: sha256WithRSAEncryption 6c:1a:23:24:d9:26:c1:f1:00:72:b4:a5:4e:d1:14:4a:ef:c7: 5e:c5:43:2e:97:2e:27:f2:15:1c:33:b0:9f:85:cf:1a:76:90: 6a:23:f2:19:2f:d8:e6:02:65:17:da:e4:f5:9d:24:0c:97:b4: ae:9e:bd:7a:77:b9:cd:a2:75:e7:79:fc:90:fe:6f:79:95:ed: 11:ed:41:15:bd:e5:93:40:a7:6e:14:df:13:b7:8b:ce:de:d2: a9:77:3d:36:bc:4d:a6:96:65:7d:b1:c4:f9:66:60:d7:6c:32: 23:03:e6:c6:bd:1b:0c:d2:6b:82:90:d9:4c:8b:90:1b:28:b2: 88:90:dc:4d:56:a4:74:c6:db:e0:4c:f6:be:fc:df:44:d3:8f: 83:94:e7:6e:82:80:70:54:53:92:24:e9:3f:6c:09:c4:2c:aa: f9:65:cd:62:c3:6c:43:8d:20:7f:b7:1e:a2:fa:95:8d:2f:f0: f1:5c:81:08:cd:b5:67:d8:2b:1c:a1:c7:9c:16:f2:b1:6e:64: d0:4c:f8:f5:40:73:46:03:e1:bc:4a:22:59:2c:19:e8:b1:22: 43:6a:2d:c9:ff:8f:23:87:8e:8d:ca:ad:0b:43:96:09:f9:19: ef:d3:e9:ef:0a:82:5a:bd:04:f0:9e:ed:d7:22:11:f3:7f:aa: a2:8c:da:fd -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUc+mQb/hCZX3V0yp1oPwjSSBKNJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA1MDYxNzU1NDJaFw0yNzA1MDUxODAwNDJaMDMxMTAvBgNV BAMTKDJCNDAyOEE0ODlCNUFDMzc4M0JFNDk5MjU2QTgzMkFERDhBOEE1ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSd5KPZbo9x/Dlxd9xFHW72STe COJx3yV+4rPqOQyBR8wDEx+goq6WrzcNmt9knOhWOk3K7qVbZONSpWn3ckt5lLEc 7PBbrBsb3AOZI94zj875XVosjbv1kYH00oG2BwtqhBJmOiYEgJlPkQJ+ulE1Yysc 5ddK60BymP30L+IG7ZgRkT5LH4xRUJ1qz1HqdVkjuMSFxHv7+F0L1tLxSoutMEe+ g+TtUSii9EUFyQC3dJZnV+lQp+Hb8FSeOPlyLDAyMTnelco2zsDH7FYujcViU2Vw 7YB38cQ8G782sm2J6fbDdpEcM96kdoTNydKcQNVEbX7vbPgcs41EKJfoZRd7AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQrQCikibWsN4O+ SZJWqDKt2KilgjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTZBQkNBRTA2OTk0QjI1RDMwM0UwREY1 NjFBOTREOEMwQ0I1QTkxMzAxM0YyQTlCNzdCNjA0QTEzMjVENjlDQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BNkFCQ0FFMDY5OTRCMjVEMzAzRTBERjU2MUE5NEQ4QzBDQjVBOTEzMDEz RjJBOUI3N0I2MDRBMTMyNUQ2OUNDLzAvMkI0MDI4QTQ4OUI1QUMzNzgzQkU0OTky NTZBODMyQUREOEE4QTU4Mi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAvg/6MA0EAgAC MAcDBQAoA4/QMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQvSzANBgkqhkiG9w0B AQsFAAOCAQEAbBojJNkmwfEAcrSlTtEUSu/HXsVDLpcuJ/IVHDOwn4XPGnaQaiPy GS/Y5gJlF9rk9Z0kDJe0rp69ene5zaJ153n8kP5veZXtEe1BFb3lk0CnbhTfE7eL zt7SqXc9NrxNppZlfbHE+WZg12wyIwPmxr0bDNJrgpDZTIuQGyiyiJDcTVakdMbb 4Ez2vvzfRNOPg5TnboKAcFRTkiTpP2wJxCyq+WXNYsNsQ40gf7ceovqVjS/w8VyB CM21Z9grHKHHnBbysW5k0Ez49UBzRgPhvEoiWSwZ6LEiQ2otyf+PI4eOjcqtC0OW CfkZ79Pp7wqCWr0E8J7t1yIR83+qooza/Q== -----END CERTIFICATE-----Generated at Wed May 13 17:15:52 2026 by rpki-client