$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB2360DDD94D6B7DC81C9C4040F2FFF54BD1B65.cer File: 8DB2360DDD94D6B7DC81C9C4040F2FFF54BD1B65.cer (raw, json) Hash identifier: EFRMvdqRU5n6EauVuSZbCWZU3KHdF9fbzZjkbV4z//w= Subject key identifier: 8D:B2:36:0D:DD:94:D6:B7:DC:81:C9:C4:04:0F:2F:FF:54:BD:1B:65 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 20932EC7E177A7439CC827B5DE0F75CAD0855A87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/4DF316B29967CD5FBE9A263BDD6A1BE09D9B10E733A7472C91A2341782EE6429/0/8DB2360DDD94D6B7DC81C9C4040F2FFF54BD1B65.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/4DF316B29967CD5FBE9A263BDD6A1BE09D9B10E733A7472C91A2341782EE6429/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 29 Jun 2026 17:25:01 +0000 Certificate not after: Mon 28 Jun 2027 17:30:01 +0000 Subordinate resources: AS: 267769 IP: 45.170.240.0/22 IP: 2803:7ba0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 03:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:93:2e:c7:e1:77:a7:43:9c:c8:27:b5:de:0f:75:ca:d0:85:5a:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jun 29 17:25:01 2026 GMT Not After : Jun 28 17:30:01 2027 GMT Subject: CN=8DB2360DDD94D6B7DC81C9C4040F2FFF54BD1B65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:aa:89:cd:4f:9d:08:c7:3b:67:4a:66:33:b5: 2c:01:d8:51:b5:c7:ce:c8:a7:bb:ae:aa:3b:d0:a3: 7d:87:70:d1:7c:aa:ca:76:3f:e4:d6:7f:e0:75:3b: 2b:1b:2e:05:08:c1:12:77:24:3f:0d:b1:e6:45:0e: 90:57:f1:84:18:05:c8:b8:84:ce:ba:96:09:34:e0: 18:ca:2a:61:8b:3a:0b:c1:6d:84:fe:37:42:f8:90: f5:26:4e:aa:8b:f7:a6:d6:7c:0a:dd:91:63:b0:1c: 4b:2c:6d:4b:b9:67:cf:a4:33:82:8f:fc:db:ad:d3: c7:8f:85:1e:91:64:b7:83:98:e2:cc:42:21:22:ed: ba:b8:41:31:f8:6c:8e:c6:8a:39:27:d2:d9:37:06: 70:fa:9b:73:19:1e:7c:88:76:0f:d9:4d:a1:5a:44: 9b:87:39:99:75:08:94:b9:61:d4:d0:71:52:7c:bb: 7c:07:fd:6a:18:70:c2:ca:43:55:c2:02:3a:f7:2d: 1e:cc:8f:04:00:b3:36:d4:62:98:d6:de:cf:4d:b0: 50:30:dc:48:1f:9f:35:a5:96:46:90:23:27:91:7c: 50:0f:13:46:cc:c7:82:e4:b6:a1:08:98:17:8d:27: 85:41:c7:a6:10:59:87:49:fb:29:2b:ea:7c:1e:13: 92:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:B2:36:0D:DD:94:D6:B7:DC:81:C9:C4:04:0F:2F:FF:54:BD:1B:65 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4DF316B29967CD5FBE9A263BDD6A1BE09D9B10E733A7472C91A2341782EE6429/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4DF316B29967CD5FBE9A263BDD6A1BE09D9B10E733A7472C91A2341782EE6429/0/8DB2360DDD94D6B7DC81C9C4040F2FFF54BD1B65.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.170.240.0/22 IPv6: 2803:7ba0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267769 Signature Algorithm: sha256WithRSAEncryption 5b:64:d4:10:0a:bf:79:0d:4c:b5:6f:4a:8e:2c:6d:1d:0e:d3: 5a:e8:30:5e:80:1b:58:0c:ec:f1:dd:96:5b:84:d8:4e:8d:b4: af:47:f7:76:0a:70:df:3b:d9:92:26:3a:d1:05:33:74:79:e1: c9:a6:8f:0f:26:03:92:b3:be:d9:76:90:0a:80:b8:46:69:9c: 3d:f5:0a:62:2d:eb:a5:e9:05:ba:97:32:57:21:24:80:db:b2: 75:b1:bd:fa:54:17:74:fc:62:cb:68:0c:db:68:53:dc:12:97: ab:1a:60:b2:2b:5c:45:f0:53:bd:d0:92:c2:e3:94:9d:ce:89: 52:04:3f:55:19:0d:b2:56:56:b4:48:7f:42:84:f0:f4:4a:68: 6d:86:d0:84:ef:fd:f8:5c:7e:2f:00:fa:32:35:bf:7d:9c:bd: 70:53:b2:92:d2:55:33:6e:d7:c9:93:7a:86:c2:a6:29:45:20: de:47:11:24:d5:0e:33:a3:4d:d8:76:79:42:a0:b2:e3:10:b1: 5c:81:18:29:10:f2:fb:9e:a0:5a:2d:38:3d:3f:67:da:df:94: 51:d2:61:98:e0:21:1f:85:ee:df:4a:40:a0:d4:bf:13:88:f6: b2:ce:dd:f5:02:f7:be:23:d6:e7:ec:d4:fd:d4:e8:a0:8f:44: 97:35:72:33 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUIJMux+F3p0OcyCe13g91ytCFWocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA2MjkxNzI1MDFaFw0yNzA2MjgxNzMwMDFaMDMxMTAvBgNV BAMTKDhEQjIzNjBEREQ5NEQ2QjdEQzgxQzlDNDA0MEYyRkZGNTRCRDFCNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxqonNT50IxztnSmYztSwB2FG1 x87Ip7uuqjvQo32HcNF8qsp2P+TWf+B1OysbLgUIwRJ3JD8NseZFDpBX8YQYBci4 hM66lgk04BjKKmGLOgvBbYT+N0L4kPUmTqqL96bWfArdkWOwHEssbUu5Z8+kM4KP /Nut08ePhR6RZLeDmOLMQiEi7bq4QTH4bI7Gijkn0tk3BnD6m3MZHnyIdg/ZTaFa RJuHOZl1CJS5YdTQcVJ8u3wH/WoYcMLKQ1XCAjr3LR7MjwQAszbUYpjW3s9NsFAw 3EgfnzWllkaQIyeRfFAPE0bMx4LktqEImBeNJ4VBx6YQWYdJ+ykr6nweE5LhAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSNsjYN3ZTWt9yB ycQEDy//VL0bZTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNERGMzE2QjI5OTY3Q0Q1RkJFOUEyNjNC REQ2QTFCRTA5RDlCMTBFNzMzQTc0NzJDOTFBMjM0MTc4MkVFNjQyOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80REYzMTZCMjk5NjdDRDVGQkU5QTI2M0JERDZBMUJFMDlEOUIxMEU3MzNB NzQ3MkM5MUEyMzQxNzgyRUU2NDI5LzAvOERCMjM2MERERDk0RDZCN0RDODFDOUM0 MDQwRjJGRkY1NEJEMUI2NS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLarwMA0EAgAC MAcDBQAoA3ugMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQV+TANBgkqhkiG9w0B AQsFAAOCAQEAW2TUEAq/eQ1MtW9KjixtHQ7TWugwXoAbWAzs8d2WW4TYTo20r0f3 dgpw3zvZkiY60QUzdHnhyaaPDyYDkrO+2XaQCoC4RmmcPfUKYi3rpekFupcyVyEk gNuydbG9+lQXdPxiy2gM22hT3BKXqxpgsitcRfBTvdCSwuOUnc6JUgQ/VRkNslZW tEh/QoTw9EpobYbQhO/9+Fx+LwD6MjW/fZy9cFOyktJVM27XyZN6hsKmKUUg3kcR JNUOM6NN2HZ5QqCy4xCxXIEYKRDy+56gWi04PT9n2t+UUdJhmOAhH4Xu30pAoNS/ E4j2ss7d9QL3viPW5+zU/dTooI9ElzVyMw== -----END CERTIFICATE-----Generated at Thu Jul 23 23:17:23 2026 by rpki-client