$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF40DB638B2BD71A39880C226C06C598B5D9BCB5.cer File: EF40DB638B2BD71A39880C226C06C598B5D9BCB5.cer (raw, json) Hash identifier: z0Tnf1uqi9nnTJ7cs/O2nBTBp6OQMhCuaO0YL+cX1dM= Subject key identifier: EF:40:DB:63:8B:2B:D7:1A:39:88:0C:22:6C:06:C5:98:B5:D9:BC:B5 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7559A16F955E36E155CAE56B9DECEFD1959AF1DA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/70D55A4661528D190685ACDB99C44916FB6D27E6306E1FF380769159F3E3583C/0/EF40DB638B2BD71A39880C226C06C598B5D9BCB5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/70D55A4661528D190685ACDB99C44916FB6D27E6306E1FF380769159F3E3583C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 02 Jul 2026 17:15:00 +0000 Certificate not after: Thu 01 Jul 2027 17:20:00 +0000 Subordinate resources: AS: 274024 IP: 190.114.103.0/24 IP: 200.123.38.0/24 IP: 2803:2cd0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 01:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:59:a1:6f:95:5e:36:e1:55:ca:e5:6b:9d:ec:ef:d1:95:9a:f1:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jul 2 17:15:00 2026 GMT Not After : Jul 1 17:20:00 2027 GMT Subject: CN=EF40DB638B2BD71A39880C226C06C598B5D9BCB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c5:36:50:08:5b:52:e0:86:c3:08:48:e6:c0: 9f:63:f7:51:ed:9f:7e:97:1c:23:5f:67:6f:5e:9b: ef:f4:ab:aa:0e:3e:6a:3c:89:41:79:84:ca:c6:fa: e5:f4:82:d4:8e:91:f0:28:74:6a:08:f6:87:03:c3: c1:d2:29:f3:9b:3f:c1:b6:43:95:51:69:f3:2a:4a: db:4d:d6:30:80:e0:c1:25:af:2d:b2:a1:ae:fc:fa: 50:80:17:96:0c:17:5d:43:c2:44:68:b8:ca:76:1d: a6:41:f4:95:7c:59:9a:fc:f8:30:6d:26:86:de:d6: 2e:b5:de:0e:bc:31:b3:08:5a:a2:8c:50:65:a5:f9: 91:11:d7:61:b1:de:0a:fb:89:20:91:b7:6f:ee:97: 77:1f:71:b8:60:ca:12:7c:ee:df:b8:30:24:b9:8a: 77:9a:f1:d6:f9:19:7a:0e:c8:71:33:14:a5:d1:dc: 77:c3:d7:24:4b:64:b0:6f:28:8a:f8:7f:9a:6d:b7: ec:f2:d0:35:65:e1:ed:ab:0d:ef:93:32:9a:2a:7e: d8:e5:6f:a5:16:72:9b:52:c6:60:22:1e:16:9e:94: 7c:31:ee:4b:a9:e1:d0:88:77:41:a7:08:56:61:1d: 6f:59:aa:4f:32:de:20:2d:c6:d8:db:eb:a8:60:6c: fe:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EF:40:DB:63:8B:2B:D7:1A:39:88:0C:22:6C:06:C5:98:B5:D9:BC:B5 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/70D55A4661528D190685ACDB99C44916FB6D27E6306E1FF380769159F3E3583C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/70D55A4661528D190685ACDB99C44916FB6D27E6306E1FF380769159F3E3583C/0/EF40DB638B2BD71A39880C226C06C598B5D9BCB5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.114.103.0/24 200.123.38.0/24 IPv6: 2803:2cd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274024 Signature Algorithm: sha256WithRSAEncryption 7b:68:1a:bb:bc:2e:ec:0e:88:77:95:18:6e:91:44:18:b7:b5: 6e:8e:1e:54:f9:f4:57:5c:ea:34:c7:ab:a0:10:ef:7e:85:d9: 7a:33:1b:df:f9:72:61:45:b8:36:59:9e:73:de:e1:c5:24:d2: 53:fe:0c:07:ac:19:90:a9:eb:7b:a3:b2:6e:22:a6:29:2a:42: 83:be:a4:b6:cf:3d:12:1f:29:45:99:62:08:fd:81:be:4d:c6: 40:dd:3a:ae:b0:e5:32:c2:2e:66:9c:eb:37:24:4e:89:b6:1e: fc:8e:47:ba:85:37:9e:27:90:ca:b4:d0:ae:bf:54:01:5e:3a: 35:17:9b:dd:ca:d6:de:c6:83:e6:37:93:c2:9f:0e:2e:e5:75: 7a:e6:eb:f7:06:d4:65:09:a6:ab:62:40:c6:63:09:cf:26:cf: ed:f0:35:e6:09:61:cc:ff:22:99:36:92:ec:cb:20:da:d6:44: ee:28:16:22:d6:d1:4c:4a:0f:02:5f:ed:37:0a:ed:14:a4:9c: b2:24:73:ff:ba:8e:0c:b0:15:51:0f:9b:f3:49:e1:14:48:7b: 1a:3c:f1:8a:2d:03:52:52:05:b0:17:36:63:8a:70:4e:72:9c: 13:6c:9c:ec:ff:3e:10:5f:5d:fd:86:ba:f0:51:b2:9f:b8:18: 38:64:0d:22 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUdVmhb5VeNuFVyuVrnezv0ZWa8dowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA3MDIxNzE1MDBaFw0yNzA3MDExNzIwMDBaMDMxMTAvBgNV BAMTKEVGNDBEQjYzOEIyQkQ3MUEzOTg4MEMyMjZDMDZDNTk4QjVEOUJDQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1xTZQCFtS4IbDCEjmwJ9j91Ht n36XHCNfZ29em+/0q6oOPmo8iUF5hMrG+uX0gtSOkfAodGoI9ocDw8HSKfObP8G2 Q5VRafMqSttN1jCA4MElry2yoa78+lCAF5YMF11DwkRouMp2HaZB9JV8WZr8+DBt Jobe1i613g68MbMIWqKMUGWl+ZER12Gx3gr7iSCRt2/ul3cfcbhgyhJ87t+4MCS5 inea8db5GXoOyHEzFKXR3HfD1yRLZLBvKIr4f5ptt+zy0DVl4e2rDe+TMpoqftjl b6UWcptSxmAiHhaelHwx7kup4dCId0GnCFZhHW9Zqk8y3iAtxtjb66hgbP7VAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTvQNtjiyvXGjmI DCJsBsWYtdm8tTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzBENTVBNDY2MTUyOEQxOTA2ODVBQ0RC OTlDNDQ5MTZGQjZEMjdFNjMwNkUxRkYzODA3NjkxNTlGM0UzNTgzQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83MEQ1NUE0NjYxNTI4RDE5MDY4NUFDREI5OUM0NDkxNkZCNkQyN0U2MzA2 RTFGRjM4MDc2OTE1OUYzRTM1ODNDLzAvRUY0MERCNjM4QjJCRDcxQTM5ODgwQzIy NkMwNkM1OThCNUQ5QkNCNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAvnJnAwQAyHsm MA0EAgACMAcDBQAoAyzQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQuaDANBgkq hkiG9w0BAQsFAAOCAQEAe2gau7wu7A6Id5UYbpFEGLe1bo4eVPn0V1zqNMeroBDv foXZejMb3/lyYUW4Nlmec97hxSTSU/4MB6wZkKnre6OybiKmKSpCg76kts89Eh8p RZliCP2Bvk3GQN06rrDlMsIuZpzrNyROibYe/I5HuoU3nieQyrTQrr9UAV46NReb 3crW3saD5jeTwp8OLuV1eubr9wbUZQmmq2JAxmMJzybP7fA15glhzP8imTaS7Msg 2tZE7igWItbRTEoPAl/tNwrtFKScsiRz/7qODLAVUQ+b80nhFEh7Gjzxii0DUlIF sBc2Y4pwTnKcE2yc7P8+EF9d/Ya68FGyn7gYOGQNIg== -----END CERTIFICATE-----Generated at Fri Jul 24 21:01:10 2026 by rpki-client