$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C1381453502913CB38DA6219251958EE6E0F09E.cer File: 4C1381453502913CB38DA6219251958EE6E0F09E.cer (raw, json) Hash identifier: AU+jP4N9f9u0MZLb2djBSGIlAu/uad6wiaqRzqYHAE0= Subject key identifier: 4C:13:81:45:35:02:91:3C:B3:8D:A6:21:92:51:95:8E:E6:E0:F0:9E Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4ECD7D427202909D4EDF3DB82410E2570B7CE494 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/4C1381453502913CB38DA6219251958EE6E0F09E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 20 Jul 2026 16:05:01 +0000 Certificate not after: Mon 19 Jul 2027 16:10:01 +0000 Subordinate resources: AS: 52307 IP: 131.100.64.0/22 IP: 138.185.140.0/22 IP: 170.254.204.0/22 IP: 190.105.160.0/22 IP: 190.184.220.0/22 IP: 2803::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 01:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:cd:7d:42:72:02:90:9d:4e:df:3d:b8:24:10:e2:57:0b:7c:e4:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jul 20 16:05:01 2026 GMT Not After : Jul 19 16:10:01 2027 GMT Subject: CN=4C1381453502913CB38DA6219251958EE6E0F09E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3d:3f:68:fd:c4:3d:f3:9e:ca:ee:dd:4c:22: d8:28:6c:f6:d8:62:82:29:7d:d3:11:76:8e:18:54: ef:c4:3d:b0:59:83:b2:56:24:bd:25:5d:2a:fa:1b: 51:94:e8:74:a2:47:28:f7:05:94:a2:85:bf:f9:d9: ba:78:67:ad:32:d5:8d:c8:95:70:b0:1d:bd:a9:cd: d9:d1:6f:2a:15:bb:00:9f:40:93:14:73:2e:48:0b: 58:6f:1d:1d:44:ec:fc:d2:08:34:75:fa:f1:17:6a: ef:28:6b:a0:23:07:10:85:69:d5:b9:73:3b:2f:dd: 6f:b9:4d:c3:bc:a5:76:e4:09:8d:05:bd:00:1b:fa: 4f:05:ee:95:a8:7c:c9:bd:40:9c:40:f0:8d:d6:7d: c2:64:97:6b:54:aa:fe:2f:4c:93:1e:b2:2c:45:77: 09:d5:ac:66:54:9d:7a:fa:a8:c8:22:68:88:c5:de: 67:92:ed:a6:98:57:da:88:11:f7:ba:29:18:f6:4b: c5:3b:72:5b:25:09:76:32:c3:d3:f4:d8:33:76:05: b7:f3:78:16:34:de:9e:1e:91:b1:86:b2:7e:af:af: ce:28:70:f6:fe:2d:3d:6e:fb:20:32:9d:e0:71:09: f1:96:dd:57:f2:bd:46:af:47:6c:2a:4e:ec:25:01: bc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:13:81:45:35:02:91:3C:B3:8D:A6:21:92:51:95:8E:E6:E0:F0:9E X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/4C1381453502913CB38DA6219251958EE6E0F09E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.100.64.0/22 138.185.140.0/22 170.254.204.0/22 190.105.160.0/22 190.184.220.0/22 IPv6: 2803::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52307 Signature Algorithm: sha256WithRSAEncryption 63:b4:8d:5a:eb:e9:aa:d2:07:5f:31:19:03:c5:4b:ff:e1:47: d4:04:1a:9f:39:af:ef:3f:35:1f:2e:1f:75:1e:a2:51:cd:eb: 0c:93:61:ff:d4:ed:c6:88:61:ba:e4:16:f4:65:c8:68:b0:8b: d8:74:84:44:b9:83:1a:3c:10:70:b4:b3:de:a5:66:cf:e8:0d: db:bb:71:8c:b0:c7:01:e2:b0:77:55:df:ce:24:fc:88:b8:bc: 9e:8d:6c:46:33:62:2f:76:56:00:eb:83:06:5c:1e:e6:3f:6c: 32:2a:c5:68:9d:0c:c4:13:91:7b:52:db:53:49:4d:27:98:19: d0:4c:fd:ed:b1:46:01:c7:5f:aa:d2:65:fe:19:a5:b9:88:70: 8f:87:0c:72:d2:6c:1c:b0:07:cc:3e:de:7e:94:75:4e:13:c4: 68:aa:95:70:b9:92:24:fa:5e:c4:7f:32:9e:76:71:e0:2d:3e: ce:c5:29:6a:2b:64:28:5b:1c:d0:9a:71:e1:f4:e6:73:43:da: f6:62:28:05:2e:89:37:0d:0c:e6:18:42:9d:b6:81:3c:c3:3a: 74:8b:77:25:d1:89:2c:29:1a:b2:7a:92:46:ad:8f:35:82:9f: ad:1e:38:25:46:04:08:c0:60:d9:11:43:d1:32:89:a8:cd:5e: f9:32:c3:6c -----BEGIN CERTIFICATE----- MIIGvTCCBaWgAwIBAgIUTs19QnICkJ1O3z24JBDiVwt85JQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA3MjAxNjA1MDFaFw0yNzA3MTkxNjEwMDFaMDMxMTAvBgNV BAMTKDRDMTM4MTQ1MzUwMjkxM0NCMzhEQTYyMTkyNTE5NThFRTZFMEYwOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwPT9o/cQ9857K7t1MItgobPbY YoIpfdMRdo4YVO/EPbBZg7JWJL0lXSr6G1GU6HSiRyj3BZSihb/52bp4Z60y1Y3I lXCwHb2pzdnRbyoVuwCfQJMUcy5IC1hvHR1E7PzSCDR1+vEXau8oa6AjBxCFadW5 czsv3W+5TcO8pXbkCY0FvQAb+k8F7pWofMm9QJxA8I3WfcJkl2tUqv4vTJMesixF dwnVrGZUnXr6qMgiaIjF3meS7aaYV9qIEfe6KRj2S8U7clslCXYyw9P02DN2Bbfz eBY03p4ekbGGsn6vr84ocPb+LT1u+yAyneBxCfGW3VfyvUavR2wqTuwlAby7AgMB AAGjggPHMIIDwzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRME4FFNQKRPLON piGSUZWO5uDwnjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTc0NTg2QzVDRjdEODM4NEVCNDUxNzk2 RjRCREJCODM4RTI2MjA5QTFDODc4NjVGMzk2RUFFRjg2RkExQkU5RC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FNzQ1ODZDNUNGN0Q4Mzg0RUI0NTE3OTZGNEJEQkI4MzhFMjYyMDlBMUM4 Nzg2NUYzOTZFQUVGODZGQTFCRTlELzAvNEMxMzgxNDUzNTAyOTEzQ0IzOERBNjIx OTI1MTk1OEVFNkUwRjA5RS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCg2RAAwQCirmM AwQCqv7MAwQCvmmgAwQCvrjcMA0EAgACMAcDBQAoAwAAMBoGCCsGAQUFBwEIAQH/ BAswCaAHMAUCAwDMUzANBgkqhkiG9w0BAQsFAAOCAQEAY7SNWuvpqtIHXzEZA8VL /+FH1AQanzmv7z81Hy4fdR6iUc3rDJNh/9TtxohhuuQW9GXIaLCL2HSERLmDGjwQ cLSz3qVmz+gN27txjLDHAeKwd1XfziT8iLi8no1sRjNiL3ZWAOuDBlwe5j9sMirF aJ0MxBORe1LbU0lNJ5gZ0Ez97bFGAcdfqtJl/hmluYhwj4cMctJsHLAHzD7efpR1 ThPEaKqVcLmSJPpexH8ynnZx4C0+zsUpaitkKFsc0Jpx4fTmc0Pa9mIoBS6JNw0M 5hhCnbaBPMM6dIt3JdGJLCkasnqSRq2PNYKfrR44JUYECMBg2RFD0TKJqM1e+TLD bA== -----END CERTIFICATE-----Generated at Fri Jul 24 16:43:13 2026 by rpki-client