$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3406C2D7B8E2087F6B962B0C946D7C877E63E63E.cer File: 3406C2D7B8E2087F6B962B0C946D7C877E63E63E.cer (raw, json) Hash identifier: yzuadJkf0oBJ2rXKorKc+vjeCQbur02ea0dMR32pJ3M= Subject key identifier: 34:06:C2:D7:B8:E2:08:7F:6B:96:2B:0C:94:6D:7C:87:7E:63:E6:3E Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 10F22BE49FD017B56C919D327446345F5F89CEBA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/0AA27CACE6842E5BE34152BEB4C68C684BC2B3B2A9A24309FF06977DBAD6623B/0/3406C2D7B8E2087F6B962B0C946D7C877E63E63E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/0AA27CACE6842E5BE34152BEB4C68C684BC2B3B2A9A24309FF06977DBAD6623B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 03 Jul 2026 18:45:01 +0000 Certificate not after: Fri 02 Jul 2027 18:50:01 +0000 Subordinate resources: AS: 264615 IP: 143.137.148.0/22 IP: 2803:ee40::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 01:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:f2:2b:e4:9f:d0:17:b5:6c:91:9d:32:74:46:34:5f:5f:89:ce:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jul 3 18:45:01 2026 GMT Not After : Jul 2 18:50:01 2027 GMT Subject: CN=3406C2D7B8E2087F6B962B0C946D7C877E63E63E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5b:f2:b7:29:78:a3:32:64:af:27:31:ad:ce: 90:04:9b:50:c1:fb:08:83:6a:57:ea:51:24:ee:a3: 8a:25:29:fa:b6:d4:5a:10:35:c6:39:7e:9a:51:01: 78:57:76:d0:62:a6:09:e9:f6:86:b2:f4:0e:e3:80: a8:1a:9f:45:16:18:8b:81:c0:e7:08:a5:23:c1:37: 0b:16:bc:b6:0c:93:1a:94:1d:26:0b:b0:38:4b:6f: 1a:34:48:c5:8b:66:5b:72:21:df:1d:43:16:81:95: 79:f3:5d:7d:89:38:c5:50:d6:0c:cd:f7:22:95:e3: 45:10:10:03:72:9b:c8:50:19:17:b3:6c:72:40:df: e8:ce:e3:81:0c:60:46:05:b1:42:38:03:cf:a8:0b: 24:da:dc:d4:33:dc:43:e4:b4:26:00:61:da:01:64: 69:4b:74:f2:9f:53:07:40:ad:83:29:21:3d:bf:9d: ba:d8:c3:cc:70:9c:33:20:f2:7a:8b:7a:0c:5a:5a: 55:b8:99:ff:13:62:06:50:db:98:65:63:a1:bc:0e: dc:ea:bf:62:d4:df:5a:7c:74:fc:81:68:1e:1d:b9: 10:96:ef:ab:03:6d:56:5c:e2:ec:bb:df:5e:fe:bb: 39:7b:88:b0:59:ee:97:03:ea:f6:b5:5c:09:9c:89: bb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:06:C2:D7:B8:E2:08:7F:6B:96:2B:0C:94:6D:7C:87:7E:63:E6:3E X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0AA27CACE6842E5BE34152BEB4C68C684BC2B3B2A9A24309FF06977DBAD6623B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0AA27CACE6842E5BE34152BEB4C68C684BC2B3B2A9A24309FF06977DBAD6623B/0/3406C2D7B8E2087F6B962B0C946D7C877E63E63E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.137.148.0/22 IPv6: 2803:ee40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264615 Signature Algorithm: sha256WithRSAEncryption 33:9f:5d:78:bd:39:cc:22:7e:77:0d:67:47:e1:35:fb:38:7a: a6:03:8b:86:01:80:bc:22:56:f6:4d:81:00:76:c5:97:80:b9: 41:06:aa:94:11:25:04:1d:c8:e4:9b:b0:4c:f9:d8:18:6e:0a: a8:27:ad:d0:90:0d:76:f7:74:bd:a3:f8:75:82:4d:41:73:21: 89:5b:e9:62:05:60:d6:77:35:2a:fd:45:fb:f4:d5:48:67:e9: 11:be:2e:bb:c6:28:3c:9f:5b:b0:71:d3:e1:a7:fc:2f:56:05: b6:5f:56:6b:36:8c:a6:a1:3b:5f:0d:1c:0d:8c:b9:4f:5c:b9: 2e:0a:13:e0:01:62:81:81:8f:3d:e6:8f:71:36:91:93:99:21: 0a:a9:72:52:e2:68:c1:47:6f:47:4b:e9:1d:2b:57:69:12:e9: 08:2d:15:76:45:52:45:95:94:2a:9a:b0:53:df:df:02:83:de: f0:0a:84:8a:7b:e1:9a:55:96:8d:fe:07:c3:9f:9e:fe:c3:57: 4e:ea:72:88:54:92:4f:54:d8:df:a7:58:f8:65:2b:df:42:40: 0e:e6:d4:65:7c:0b:7b:31:47:78:ea:47:05:c9:d7:f6:d0:c4: 77:d5:00:11:67:5e:51:c6:ce:b3:e1:b4:27:38:c7:c3:07:a1: f4:cb:d1:cf -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUEPIr5J/QF7VskZ0ydEY0X1+JzrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA3MDMxODQ1MDFaFw0yNzA3MDIxODUwMDFaMDMxMTAvBgNV BAMTKDM0MDZDMkQ3QjhFMjA4N0Y2Qjk2MkIwQzk0NkQ3Qzg3N0U2M0U2M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeW/K3KXijMmSvJzGtzpAEm1DB +wiDalfqUSTuo4olKfq21FoQNcY5fppRAXhXdtBipgnp9oay9A7jgKgan0UWGIuB wOcIpSPBNwsWvLYMkxqUHSYLsDhLbxo0SMWLZltyId8dQxaBlXnzXX2JOMVQ1gzN 9yKV40UQEANym8hQGRezbHJA3+jO44EMYEYFsUI4A8+oCyTa3NQz3EPktCYAYdoB ZGlLdPKfUwdArYMpIT2/nbrYw8xwnDMg8nqLegxaWlW4mf8TYgZQ25hlY6G8Dtzq v2LU31p8dPyBaB4duRCW76sDbVZc4uy7317+uzl7iLBZ7pcD6va1XAmcibsDAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ0BsLXuOIIf2uW KwyUbXyHfmPmPjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMEFBMjdDQUNFNjg0MkU1QkUzNDE1MkJF QjRDNjhDNjg0QkMyQjNCMkE5QTI0MzA5RkYwNjk3N0RCQUQ2NjIzQi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wQUEyN0NBQ0U2ODQyRTVCRTM0MTUyQkVCNEM2OEM2ODRCQzJCM0IyQTlB MjQzMDlGRjA2OTc3REJBRDY2MjNCLzAvMzQwNkMyRDdCOEUyMDg3RjZCOTYyQjBD OTQ2RDdDODc3RTYzRTYzRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCj4mUMA0EAgAC MAcDBQAoA+5AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQJpzANBgkqhkiG9w0B AQsFAAOCAQEAM59deL05zCJ+dw1nR+E1+zh6pgOLhgGAvCJW9k2BAHbFl4C5QQaq lBElBB3I5JuwTPnYGG4KqCet0JANdvd0vaP4dYJNQXMhiVvpYgVg1nc1Kv1F+/TV SGfpEb4uu8YoPJ9bsHHT4af8L1YFtl9WazaMpqE7Xw0cDYy5T1y5LgoT4AFigYGP PeaPcTaRk5khCqlyUuJowUdvR0vpHStXaRLpCC0VdkVSRZWUKpqwU9/fAoPe8AqE invhmlWWjf4Hw5+e/sNXTupyiFSST1TY36dY+GUr30JADubUZXwLezFHeOpHBcnX 9tDEd9UAEWdeUcbOs+G0JzjHwweh9MvRzw== -----END CERTIFICATE-----Generated at Fri Jul 24 14:02:57 2026 by rpki-client