$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.cer File: B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.cer (raw, json) Hash identifier: aQBJP25z4+J3xIVJet8a0d6igwe6Cl4AMbTc+j0lmLE= Subject key identifier: B3:2F:3F:6C:AB:8B:BA:CE:BE:74:DB:EC:2B:5B:3A:57:E2:1D:D0:A2 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1FDFB260CA491CF4281A66265239AAD8F2C4EACC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/BA541CB010312BB0B10FF04CD1AD404CC0DFE117BA18C3FBBE7A6A978CC35D04/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/BA541CB010312BB0B10FF04CD1AD404CC0DFE117BA18C3FBBE7A6A978CC35D04/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 15 Jul 2026 15:10:01 +0000 Certificate not after: Wed 14 Jul 2027 15:15:01 +0000 Subordinate resources: AS: 269920 IP: 201.71.2.0/23 IP: 2803:c2e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 03:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:df:b2:60:ca:49:1c:f4:28:1a:66:26:52:39:aa:d8:f2:c4:ea:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jul 15 15:10:01 2026 GMT Not After : Jul 14 15:15:01 2027 GMT Subject: CN=B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:57:73:ef:dc:e2:b6:16:85:89:0e:59:ae:b1: a9:35:f4:32:b3:ad:f2:57:1f:6c:da:f6:21:6e:70: 59:c2:79:6d:df:35:10:f6:5a:83:d5:ee:23:8e:8d: 4a:69:bc:88:b6:17:e0:04:be:a8:4c:23:ab:5f:a9: 6d:d0:90:d2:b1:f4:65:56:36:68:47:83:8a:c7:20: 8c:4b:99:46:a2:c6:1d:f5:53:3c:21:c3:9b:f5:41: 74:4c:b9:92:50:41:19:36:cf:18:0c:ea:dc:d0:7a: e2:81:6a:21:6b:ab:78:8a:08:ce:65:7a:da:19:e5: fd:61:4f:1a:e6:43:a3:4d:8c:51:8b:ab:76:55:27: b5:7c:e6:37:0c:f7:ce:14:f5:6f:75:4b:97:25:69: 2f:07:d1:33:ab:1e:c8:25:f8:30:0a:db:53:23:8c: d6:4e:94:74:f5:08:ff:61:e1:9f:57:15:0d:8b:84: 3d:2b:e4:94:07:17:ca:3a:cf:37:7d:95:8c:b1:b7: 68:72:f6:28:6d:88:89:7c:30:c6:fe:b0:51:9e:7e: 64:f7:0a:1d:3b:cf:69:82:1a:b8:d4:3c:fe:e1:32: 62:a5:2b:45:b9:33:66:d3:ed:2d:68:f3:be:49:dc: 6f:4a:02:68:8e:2e:d5:1d:07:6f:82:aa:a2:a0:f5: 6b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:2F:3F:6C:AB:8B:BA:CE:BE:74:DB:EC:2B:5B:3A:57:E2:1D:D0:A2 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BA541CB010312BB0B10FF04CD1AD404CC0DFE117BA18C3FBBE7A6A978CC35D04/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BA541CB010312BB0B10FF04CD1AD404CC0DFE117BA18C3FBBE7A6A978CC35D04/0/B32F3F6CAB8BBACEBE74DBEC2B5B3A57E21DD0A2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.71.2.0/23 IPv6: 2803:c2e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269920 Signature Algorithm: sha256WithRSAEncryption 3c:a3:2a:f9:50:01:68:15:52:d0:26:3a:25:0b:fc:f5:09:b5: 01:89:5b:97:d5:18:74:b1:03:85:bd:e5:e5:34:6c:18:a1:cc: ee:32:d9:ae:54:10:d7:cd:bb:e2:f6:66:e4:f1:a4:f6:14:1c: fa:38:07:42:96:3c:de:03:c7:c6:3e:3d:7b:ca:12:e8:0f:56: a5:e7:55:60:ca:3a:ab:48:b8:84:df:08:4d:b7:58:61:47:49: 3d:ca:24:a4:2a:6f:cf:9e:04:aa:cb:d8:3b:4e:b5:ed:ca:34: fc:9d:e8:c1:f0:29:2b:bb:6b:19:ad:6e:e1:29:8d:09:be:fb: 1a:d7:b7:cb:b9:bc:77:b3:a9:1b:35:58:d2:e9:36:3e:f9:c2: ba:b7:e2:d2:73:69:9a:52:cf:53:1b:9e:14:92:ed:e1:2f:bb: 63:9c:17:78:6f:7b:4d:ff:ad:2a:7e:99:91:2b:6c:ed:1e:88: 57:2f:16:a1:3d:6f:4c:b0:0d:35:8f:1b:42:71:4b:eb:e4:4e: 63:83:40:05:4c:11:83:71:a7:0d:9e:47:6c:94:cc:d4:fe:64: 68:5c:50:5b:2f:cd:7a:9e:c4:cb:f5:9d:da:73:66:c6:27:41: f4:b0:83:f0:a4:12:6d:e9:b5:61:9e:f9:02:b4:9a:89:b9:f9: cf:34:46:e7 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUH9+yYMpJHPQoGmYmUjmq2PLE6swwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA3MTUxNTEwMDFaFw0yNzA3MTQxNTE1MDFaMDMxMTAvBgNV BAMTKEIzMkYzRjZDQUI4QkJBQ0VCRTc0REJFQzJCNUIzQTU3RTIxREQwQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0V3Pv3OK2FoWJDlmusak19DKz rfJXH2za9iFucFnCeW3fNRD2WoPV7iOOjUppvIi2F+AEvqhMI6tfqW3QkNKx9GVW NmhHg4rHIIxLmUaixh31Uzwhw5v1QXRMuZJQQRk2zxgM6tzQeuKBaiFrq3iKCM5l etoZ5f1hTxrmQ6NNjFGLq3ZVJ7V85jcM984U9W91S5claS8H0TOrHsgl+DAK21Mj jNZOlHT1CP9h4Z9XFQ2LhD0r5JQHF8o6zzd9lYyxt2hy9ihtiIl8MMb+sFGefmT3 Ch07z2mCGrjUPP7hMmKlK0W5M2bT7S1o875J3G9KAmiOLtUdB2+CqqKg9WuLAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSzLz9sq4u6zr50 2+wrWzpX4h3QojAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQkE1NDFDQjAxMDMxMkJCMEIxMEZGMDRD RDFBRDQwNENDMERGRTExN0JBMThDM0ZCQkU3QTZBOTc4Q0MzNUQwNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CQTU0MUNCMDEwMzEyQkIwQjEwRkYwNENEMUFENDA0Q0MwREZFMTE3QkEx OEMzRkJCRTdBNkE5NzhDQzM1RDA0LzAvQjMyRjNGNkNBQjhCQkFDRUJFNzREQkVD MkI1QjNBNTdFMjFERDBBMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQByUcCMA0EAgAC MAcDBQAoA8LgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQeYDANBgkqhkiG9w0B AQsFAAOCAQEAPKMq+VABaBVS0CY6JQv89Qm1AYlbl9UYdLEDhb3l5TRsGKHM7jLZ rlQQ18274vZm5PGk9hQc+jgHQpY83gPHxj49e8oS6A9WpedVYMo6q0i4hN8ITbdY YUdJPcokpCpvz54EqsvYO0617co0/J3owfApK7trGa1u4SmNCb77Gte3y7m8d7Op GzVY0uk2PvnCurfi0nNpmlLPUxueFJLt4S+7Y5wXeG97Tf+tKn6ZkSts7R6IVy8W oT1vTLANNY8bQnFL6+ROY4NABUwRg3GnDZ5HbJTM1P5kaFxQWy/Nep7Ey/Wd2nNm xidB9LCD8KQSbem1YZ75ArSaibn5zzRG5w== -----END CERTIFICATE-----Generated at Thu Jul 23 21:34:17 2026 by rpki-client