$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A25223310D8611349B6AC3BA702252E2D05BE514.cer File: A25223310D8611349B6AC3BA702252E2D05BE514.cer (raw, json) Hash identifier: Be1k+8dPYzZ3k9kG2ogrBb//SiWSG6oJUZlBV7LoM0o= Subject key identifier: A2:52:23:31:0D:86:11:34:9B:6A:C3:BA:70:22:52:E2:D0:5B:E5:14 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 226FA2FDB0518CEE642C8E1FE9D55BE1ACCEE6D1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/130E2627651439154032AFAE101262E665000C0B9B9CE3850F40C743A1C91074/0/A25223310D8611349B6AC3BA702252E2D05BE514.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/130E2627651439154032AFAE101262E665000C0B9B9CE3850F40C743A1C91074/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 15 Jul 2026 17:55:44 +0000 Certificate not after: Wed 14 Jul 2027 18:00:44 +0000 Subordinate resources: AS: 270176 IP: 148.224.32.0/21 IP: 2806:3f0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 03:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:6f:a2:fd:b0:51:8c:ee:64:2c:8e:1f:e9:d5:5b:e1:ac:ce:e6:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jul 15 17:55:44 2026 GMT Not After : Jul 14 18:00:44 2027 GMT Subject: CN=A25223310D8611349B6AC3BA702252E2D05BE514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:1a:f4:6a:fe:6d:44:07:06:e1:fe:2d:fd: c7:3e:60:ed:14:be:d4:ed:46:57:8c:ff:6e:53:66: f7:33:75:de:19:10:f6:9c:f0:01:42:83:d6:bf:5d: c6:2b:3f:c2:2c:95:9d:b3:14:41:c0:1f:53:17:55: 16:35:fe:da:7e:53:5f:cc:bd:4c:76:f0:c3:85:e1: c2:aa:b8:ef:03:71:bf:46:be:3f:d7:cf:57:d0:6d: bf:aa:a4:e5:2b:15:5f:a3:61:8c:72:16:a3:f2:5f: d8:d1:a0:e1:bc:95:9d:d6:9f:c9:51:b0:5e:ec:7e: fd:84:37:cd:89:97:2a:ff:f6:68:54:00:ce:b4:b9: 0a:d5:41:11:20:a4:95:66:bb:11:4f:35:98:4c:fb: ec:54:e8:95:eb:75:9a:3d:f8:f4:82:b6:9a:c8:03: 56:f4:5d:c9:03:31:ba:7a:e0:9a:37:fc:67:55:9d: 4b:33:b2:7b:f9:97:89:f4:db:c5:96:81:2a:30:ae: bf:ad:51:c8:1a:c4:01:7b:5c:74:85:26:7a:df:a5: 94:5f:49:a1:58:51:6e:6b:d6:2b:04:e6:d2:c3:c9: 64:05:0e:a8:09:ab:92:48:4d:9f:93:e0:e9:2a:0e: 37:b0:6c:18:28:6e:78:1b:d3:31:4a:3b:70:06:da: ec:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:52:23:31:0D:86:11:34:9B:6A:C3:BA:70:22:52:E2:D0:5B:E5:14 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/130E2627651439154032AFAE101262E665000C0B9B9CE3850F40C743A1C91074/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/130E2627651439154032AFAE101262E665000C0B9B9CE3850F40C743A1C91074/0/A25223310D8611349B6AC3BA702252E2D05BE514.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.224.32.0/21 IPv6: 2806:3f0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270176 Signature Algorithm: sha256WithRSAEncryption 34:fa:43:18:13:d1:b4:cd:e3:34:55:1f:3c:97:c0:e4:8b:49: 17:16:73:31:99:b5:a5:04:b6:ca:ac:88:3c:96:94:63:c4:9b: 19:42:85:b2:cd:12:d9:84:06:ef:25:f7:49:a6:d8:b5:fb:f3: 76:d9:67:28:f3:84:63:2c:90:af:f0:bc:5a:e3:0b:ce:9a:0c: c1:97:37:ac:0b:c3:23:79:e3:0b:7d:de:73:f6:5d:db:68:91: bf:08:b4:bb:83:d8:82:b2:0a:b2:51:dd:5c:a5:0b:33:10:86: 05:74:b6:38:41:2f:c3:cd:6d:c3:a7:72:fc:f1:52:ee:b6:47: ca:b4:3d:58:7b:b0:fa:fc:31:02:0f:f4:5c:ea:89:bc:a0:b1: f3:57:76:3d:df:46:9e:aa:b9:94:f2:37:0c:34:c6:d0:97:2e: 89:1b:39:d7:4d:19:ca:97:3e:8b:16:9a:ba:01:7d:3e:bf:49: bc:f2:0b:15:c6:9c:f5:9f:f3:74:1c:fe:5c:23:f1:74:16:2c: fb:27:12:02:8e:e1:7d:09:8d:86:7b:80:87:6f:a4:a1:17:95: d9:bf:45:a2:f4:03:2d:2a:15:a2:5f:e0:b0:a7:c4:af:1c:f5: 70:08:c1:f5:f5:18:c6:54:8f:d6:88:96:3b:9f:81:ac:bc:04: a4:0c:23:4f -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUIm+i/bBRjO5kLI4f6dVb4azO5tEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA3MTUxNzU1NDRaFw0yNzA3MTQxODAwNDRaMDMxMTAvBgNV BAMTKEEyNTIyMzMxMEQ4NjExMzQ5QjZBQzNCQTcwMjI1MkUyRDA1QkU1MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/uBr0av5tRAcG4f4t/cc+YO0U vtTtRleM/25TZvczdd4ZEPac8AFCg9a/XcYrP8IslZ2zFEHAH1MXVRY1/tp+U1/M vUx28MOF4cKquO8Dcb9Gvj/Xz1fQbb+qpOUrFV+jYYxyFqPyX9jRoOG8lZ3Wn8lR sF7sfv2EN82Jlyr/9mhUAM60uQrVQREgpJVmuxFPNZhM++xU6JXrdZo9+PSCtprI A1b0XckDMbp64Jo3/GdVnUszsnv5l4n028WWgSowrr+tUcgaxAF7XHSFJnrfpZRf SaFYUW5r1isE5tLDyWQFDqgJq5JITZ+T4OkqDjewbBgobngb0zFKO3AG2uyjAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSiUiMxDYYRNJtq w7pwIlLi0FvlFDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTMwRTI2Mjc2NTE0MzkxNTQwMzJBRkFF MTAxMjYyRTY2NTAwMEMwQjlCOUNFMzg1MEY0MEM3NDNBMUM5MTA3NC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xMzBFMjYyNzY1MTQzOTE1NDAzMkFGQUUxMDEyNjJFNjY1MDAwQzBCOUI5 Q0UzODUwRjQwQzc0M0ExQzkxMDc0LzAvQTI1MjIzMzEwRDg2MTEzNDlCNkFDM0JB NzAyMjUyRTJEMDVCRTUxNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDlOAgMA0EAgAC MAcDBQAoBgPwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQfYDANBgkqhkiG9w0B AQsFAAOCAQEANPpDGBPRtM3jNFUfPJfA5ItJFxZzMZm1pQS2yqyIPJaUY8SbGUKF ss0S2YQG7yX3SabYtfvzdtlnKPOEYyyQr/C8WuMLzpoMwZc3rAvDI3njC33ec/Zd 22iRvwi0u4PYgrIKslHdXKULMxCGBXS2OEEvw81tw6dy/PFS7rZHyrQ9WHuw+vwx Ag/0XOqJvKCx81d2Pd9Gnqq5lPI3DDTG0JcuiRs5100Zypc+ixaaugF9Pr9JvPIL Fcac9Z/zdBz+XCPxdBYs+ycSAo7hfQmNhnuAh2+koReV2b9FovQDLSoVol/gsKfE rxz1cAjB9fUYxlSP1oiWO5+BrLwEpAwjTw== -----END CERTIFICATE-----Generated at Thu Jul 23 23:35:57 2026 by rpki-client