$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer File: 310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer (raw, json) Hash identifier: yTDxFivrddM5XCAaC0Yy2ILObjyBYuzr4tQjgTTkysM= Subject key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 6D4AC332D0D780A69FD79B2E2A306171F370E09B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 06 May 2026 20:10:00 +0000 Certificate not after: Wed 05 May 2027 20:15:00 +0000 Subordinate resources: AS: 28103 IP: 131.161.252.0/22 IP: 138.186.60.0/22 IP: 179.189.218.0/23 IP: 190.110.226.0/23 IP: 190.110.230.0/23 IP: 190.110.246.0/23 IP: 190.211.240.0/22 IP: 200.123.36.0/23 IP: 200.123.59.0/24 IP: 200.123.61.0/24 IP: 201.222.48.0/21 IP: 2803:c100::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 17 May 2026 14:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:4a:c3:32:d0:d7:80:a6:9f:d7:9b:2e:2a:30:61:71:f3:70:e0:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: May 6 20:10:00 2026 GMT Not After : May 5 20:15:00 2027 GMT Subject: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8b:43:3b:10:15:70:44:cf:65:4b:ef:b8:12: 04:d8:46:86:19:cb:03:28:b7:f7:df:dc:cb:6b:c3: 18:39:c6:8b:d2:c6:e4:6f:24:67:f7:fe:89:a9:43: 58:bb:8a:1b:37:77:7c:33:4e:dc:55:2c:dc:b1:d5: bb:34:aa:63:db:1c:4b:ec:07:fd:3f:75:26:13:85: 63:c7:da:ce:be:f6:32:bc:5b:3a:75:b3:a8:47:c1: e9:59:0d:9d:b9:74:d4:d7:fb:da:a2:f3:2b:f2:44: 1b:ef:b9:b5:5d:e3:6e:96:c0:42:f5:56:a4:15:88: ef:93:cd:a8:33:6c:3e:37:7d:aa:08:59:3f:79:0c: 41:ad:67:64:3b:c8:13:4d:ae:be:c0:bc:e0:9a:2f: 67:51:cc:75:6e:fc:8a:ab:77:09:9a:87:db:2a:73: ca:b6:3a:b9:bf:eb:0b:0a:2a:3d:a0:18:39:17:f6: 39:86:58:39:f2:2e:ff:d1:95:a2:3f:81:9b:48:ea: 93:9a:ec:75:bb:2e:b8:ae:09:92:f4:3a:82:a8:13: 65:d2:21:ae:0d:de:1e:9f:3f:4a:8f:69:24:ad:67: ae:1e:4e:90:fd:b8:d7:a4:4e:77:92:08:bb:61:f7: ad:7f:9a:f2:10:15:60:ab:52:39:66:3b:90:be:94: 67:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.161.252.0/22 138.186.60.0/22 179.189.218.0/23 190.110.226.0/23 190.110.230.0/23 190.110.246.0/23 190.211.240.0/22 200.123.36.0/23 200.123.59.0/24 200.123.61.0/24 201.222.48.0/21 IPv6: 2803:c100::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28103 Signature Algorithm: sha256WithRSAEncryption 88:1d:a0:9d:20:94:d2:b1:1b:c2:88:1a:13:f9:d8:ab:0b:8c: 68:6e:99:cc:72:32:13:48:5a:e4:73:53:ca:da:45:fd:cb:70: f1:c1:7e:60:5f:c6:86:32:97:15:f1:db:0d:0e:f8:1a:c3:7d: ec:bc:2d:ac:8a:8e:c8:a3:c7:68:35:7c:c0:74:f7:87:88:aa: b1:68:00:0c:26:90:bd:a3:00:10:54:61:ed:5d:d4:dd:ca:ca: 6e:da:54:07:68:d9:59:e9:d2:d5:3a:cc:e0:a1:23:81:cf:07: 48:69:c6:3b:9f:6b:f2:94:f6:90:d4:a3:96:0e:36:18:c6:a4: ed:0f:86:63:be:ae:81:32:62:f2:1c:6e:96:9f:78:cc:ff:8f: b0:44:1b:d2:09:de:0e:e8:31:1b:01:2a:2c:d8:86:16:08:e9: cb:33:8e:03:ce:51:c8:a4:a2:dc:11:d1:16:a7:e0:ee:de:81: 73:29:d6:7d:10:3a:05:d7:72:3f:c2:2c:27:23:ff:cf:ca:19: 15:f6:d9:ac:89:14:97:bc:ae:ad:ed:88:57:f7:4a:cd:1f:9d: b0:ee:3d:7f:19:9b:4e:da:0d:ae:fc:95:be:46:0c:1a:bf:91: c0:1c:d3:7b:0b:a3:9b:1e:a5:b6:c6:14:8b:bd:a4:ef:70:44: 2f:45:34:12 -----BEGIN CERTIFICATE----- MIIG4DCCBcigAwIBAgIUbUrDMtDXgKaf15suKjBhcfNw4JswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA1MDYyMDEwMDBaFw0yNzA1MDUyMDE1MDBaMDMxMTAvBgNV BAMTKDMxMEI2RTdFNDgxRkE4N0I3QjI5NTgyQkFEMTM0OEZFN0Y2NTdDNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6i0M7EBVwRM9lS++4EgTYRoYZ ywMot/ff3Mtrwxg5xovSxuRvJGf3/ompQ1i7ihs3d3wzTtxVLNyx1bs0qmPbHEvs B/0/dSYThWPH2s6+9jK8Wzp1s6hHwelZDZ25dNTX+9qi8yvyRBvvubVd426WwEL1 VqQViO+TzagzbD43faoIWT95DEGtZ2Q7yBNNrr7AvOCaL2dRzHVu/Iqrdwmah9sq c8q2Orm/6wsKKj2gGDkX9jmGWDnyLv/RlaI/gZtI6pOa7HW7LriuCZL0OoKoE2XS Ia4N3h6fP0qPaSStZ64eTpD9uNekTneSCLth961/mvIQFWCrUjlmO5C+lGdbAgMB AAGjggPqMIID5jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQxC25+SB+oe3sp WCutE0j+f2V8VzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTJFRjZCRjAzNjIxQjNBQkZBNDkyRTEz OERGRDA4NzFBMkQ0MTBBQTdEM0M0RjZCQUQ5MTdBMjcxRjg4Rjk4OS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BMkVGNkJGMDM2MjFCM0FCRkE0OTJFMTM4REZEMDg3MUEyRDQxMEFBN0Qz QzRGNkJBRDkxN0EyNzFGODhGOTg5LzAvMzEwQjZFN0U0ODFGQTg3QjdCMjk1ODJC QUQxMzQ4RkU3RjY1N0M1Ny5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQCg6H8AwQCiro8 AwQBs73aAwQBvm7iAwQBvm7mAwQBvm72AwQCvtPwAwQByHskAwQAyHs7AwQAyHs9 AwQDyd4wMA0EAgACMAcDBQAoA8EAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm3H MA0GCSqGSIb3DQEBCwUAA4IBAQCIHaCdIJTSsRvCiBoT+dirC4xobpnMcjITSFrk c1PK2kX9y3DxwX5gX8aGMpcV8dsNDvgaw33svC2sio7Io8doNXzAdPeHiKqxaAAM JpC9owAQVGHtXdTdyspu2lQHaNlZ6dLVOszgoSOBzwdIacY7n2vylPaQ1KOWDjYY xqTtD4Zjvq6BMmLyHG6Wn3jM/4+wRBvSCd4O6DEbASos2IYWCOnLM44DzlHIpKLc EdEWp+Du3oFzKdZ9EDoF13I/wiwnI//PyhkV9tmsiRSXvK6t7YhX90rNH52w7j1/ GZtO2g2u/JW+Rgwav5HAHNN7C6ObHqW2xhSLvaTvcEQvRTQS -----END CERTIFICATE-----Generated at Wed May 13 15:34:20 2026 by rpki-client