$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A25223310D8611349B6AC3BA702252E2D05BE514.cer File: A25223310D8611349B6AC3BA702252E2D05BE514.cer (raw, json) Hash identifier: qKe9uQf3k3atropyiOf/x813dsOaPAj7s1w6oxctHoA= Subject key identifier: A2:52:23:31:0D:86:11:34:9B:6A:C3:BA:70:22:52:E2:D0:5B:E5:14 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0F40337DC220503B120FA28B7DDAA1390A49616F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/130E2627651439154032AFAE101262E665000C0B9B9CE3850F40C743A1C91074/0/A25223310D8611349B6AC3BA702252E2D05BE514.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/130E2627651439154032AFAE101262E665000C0B9B9CE3850F40C743A1C91074/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 30 Apr 2026 16:15:01 +0000 Certificate not after: Thu 29 Apr 2027 16:20:01 +0000 Subordinate resources: AS: 270176 IP: 2806:3f0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 17 May 2026 14:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:40:33:7d:c2:20:50:3b:12:0f:a2:8b:7d:da:a1:39:0a:49:61:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Apr 30 16:15:01 2026 GMT Not After : Apr 29 16:20:01 2027 GMT Subject: CN=A25223310D8611349B6AC3BA702252E2D05BE514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:1a:f4:6a:fe:6d:44:07:06:e1:fe:2d:fd: c7:3e:60:ed:14:be:d4:ed:46:57:8c:ff:6e:53:66: f7:33:75:de:19:10:f6:9c:f0:01:42:83:d6:bf:5d: c6:2b:3f:c2:2c:95:9d:b3:14:41:c0:1f:53:17:55: 16:35:fe:da:7e:53:5f:cc:bd:4c:76:f0:c3:85:e1: c2:aa:b8:ef:03:71:bf:46:be:3f:d7:cf:57:d0:6d: bf:aa:a4:e5:2b:15:5f:a3:61:8c:72:16:a3:f2:5f: d8:d1:a0:e1:bc:95:9d:d6:9f:c9:51:b0:5e:ec:7e: fd:84:37:cd:89:97:2a:ff:f6:68:54:00:ce:b4:b9: 0a:d5:41:11:20:a4:95:66:bb:11:4f:35:98:4c:fb: ec:54:e8:95:eb:75:9a:3d:f8:f4:82:b6:9a:c8:03: 56:f4:5d:c9:03:31:ba:7a:e0:9a:37:fc:67:55:9d: 4b:33:b2:7b:f9:97:89:f4:db:c5:96:81:2a:30:ae: bf:ad:51:c8:1a:c4:01:7b:5c:74:85:26:7a:df:a5: 94:5f:49:a1:58:51:6e:6b:d6:2b:04:e6:d2:c3:c9: 64:05:0e:a8:09:ab:92:48:4d:9f:93:e0:e9:2a:0e: 37:b0:6c:18:28:6e:78:1b:d3:31:4a:3b:70:06:da: ec:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:52:23:31:0D:86:11:34:9B:6A:C3:BA:70:22:52:E2:D0:5B:E5:14 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/130E2627651439154032AFAE101262E665000C0B9B9CE3850F40C743A1C91074/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/130E2627651439154032AFAE101262E665000C0B9B9CE3850F40C743A1C91074/0/A25223310D8611349B6AC3BA702252E2D05BE514.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:3f0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270176 Signature Algorithm: sha256WithRSAEncryption 46:f0:ce:7b:cc:6b:20:6e:79:f2:a0:0e:f5:85:55:0a:b9:ee: d0:97:6f:39:ab:65:a6:61:ae:90:c4:f2:e1:a5:01:1c:c7:c9: f2:5c:c1:53:1a:7f:60:b5:1b:9c:a8:d3:67:c8:62:2f:dd:3e: 77:ce:0d:39:0b:1d:77:b1:8d:bb:18:b1:98:60:a1:78:ae:56: 5a:a8:dc:d7:13:21:38:37:38:ad:aa:ad:b0:f8:9b:9d:07:28: d0:4d:ad:4c:a4:c1:83:ed:43:99:86:65:b1:09:e6:be:6d:ac: 25:de:1a:c5:5f:88:7e:df:05:9a:4c:fb:a4:b5:be:51:ea:3f: b7:dc:70:91:29:37:43:e7:33:15:7b:ce:bb:15:ff:f4:ce:fd: 30:ea:41:25:83:19:58:df:11:ba:f7:ca:39:6d:08:02:d1:6d: 7a:9d:de:2f:f3:78:9a:c1:7b:b6:d0:67:3a:5a:26:27:b8:97: 9c:8c:d4:97:ca:41:c1:92:72:e1:2e:31:c9:37:94:28:b8:c7: 8a:16:42:bf:12:ce:bb:14:c1:2f:4f:5e:a2:e8:91:78:de:30: 08:66:39:9f:0a:2b:f3:fa:e8:da:7a:45:2f:0e:0a:2e:39:82: 53:10:d6:f7:f6:ea:86:25:12:6c:1f:69:08:99:de:ca:22:27: af:9d:88:ed -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUD0AzfcIgUDsSD6KLfdqhOQpJYW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA0MzAxNjE1MDFaFw0yNzA0MjkxNjIwMDFaMDMxMTAvBgNV BAMTKEEyNTIyMzMxMEQ4NjExMzQ5QjZBQzNCQTcwMjI1MkUyRDA1QkU1MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/uBr0av5tRAcG4f4t/cc+YO0U vtTtRleM/25TZvczdd4ZEPac8AFCg9a/XcYrP8IslZ2zFEHAH1MXVRY1/tp+U1/M vUx28MOF4cKquO8Dcb9Gvj/Xz1fQbb+qpOUrFV+jYYxyFqPyX9jRoOG8lZ3Wn8lR sF7sfv2EN82Jlyr/9mhUAM60uQrVQREgpJVmuxFPNZhM++xU6JXrdZo9+PSCtprI A1b0XckDMbp64Jo3/GdVnUszsnv5l4n028WWgSowrr+tUcgaxAF7XHSFJnrfpZRf SaFYUW5r1isE5tLDyWQFDqgJq5JITZ+T4OkqDjewbBgobngb0zFKO3AG2uyjAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSiUiMxDYYRNJtq w7pwIlLi0FvlFDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTMwRTI2Mjc2NTE0MzkxNTQwMzJBRkFF MTAxMjYyRTY2NTAwMEMwQjlCOUNFMzg1MEY0MEM3NDNBMUM5MTA3NC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xMzBFMjYyNzY1MTQzOTE1NDAzMkFGQUUxMDEyNjJFNjY1MDAwQzBCOUI5 Q0UzODUwRjQwQzc0M0ExQzkxMDc0LzAvQTI1MjIzMzEwRDg2MTEzNDlCNkFDM0JB NzAyMjUyRTJEMDVCRTUxNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYD8DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEH2AwDQYJKoZIhvcNAQELBQADggEBAEbwznvM ayBuefKgDvWFVQq57tCXbzmrZaZhrpDE8uGlARzHyfJcwVMaf2C1G5yo02fIYi/d PnfODTkLHXexjbsYsZhgoXiuVlqo3NcTITg3OK2qrbD4m50HKNBNrUykwYPtQ5mG ZbEJ5r5trCXeGsVfiH7fBZpM+6S1vlHqP7fccJEpN0PnMxV7zrsV//TO/TDqQSWD GVjfEbr3yjltCALRbXqd3i/zeJrBe7bQZzpaJie4l5yM1JfKQcGScuEuMck3lCi4 x4oWQr8SzrsUwS9PXqLokXjeMAhmOZ8KK/P66Np6RS8OCi45glMQ1vf26oYlEmwf aQiZ3soiJ6+diO0= -----END CERTIFICATE-----Generated at Wed May 13 16:36:32 2026 by rpki-client