$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6.cer File: A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6.cer (raw, json) Hash identifier: aIk9e/Z970RN1cWhnq8Slfe154nwZDaFL2svj7Ei6MQ= Subject key identifier: A0:AE:C7:E3:71:CC:B7:7E:9F:61:85:47:50:32:EC:F6:6F:5A:F8:E6 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 491283EC542B5D9C203558B0AF380890302B020B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 01 Jul 2026 17:55:31 +0000 Certificate not after: Wed 30 Jun 2027 18:00:31 +0000 Subordinate resources: AS: 264637 AS: 266688 IP: 45.229.128.0/22 IP: 170.80.20.0/22 IP: 190.113.88.0/22 IP: 2803:5300::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 05:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:12:83:ec:54:2b:5d:9c:20:35:58:b0:af:38:08:90:30:2b:02:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jul 1 17:55:31 2026 GMT Not After : Jun 30 18:00:31 2027 GMT Subject: CN=A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:08:9b:e7:88:88:98:e6:72:3f:da:92:a7:29: 04:d6:7f:97:cd:ed:ed:6d:c2:52:3f:14:2d:13:2a: b7:7c:e3:75:cf:4d:36:9a:7f:1f:cb:8e:b5:19:75: a5:5c:ec:9d:19:51:05:cf:20:56:ab:85:0f:df:26: 79:12:ee:87:75:4e:73:89:04:66:65:2b:48:86:73: 84:41:dd:1b:0d:a7:44:aa:0e:1f:3d:b2:11:b7:4d: 91:e6:c5:f6:25:af:aa:0c:34:06:0b:44:8d:6a:94: fd:97:74:2b:69:2a:fa:61:06:0d:19:17:c7:fc:43: 28:85:b0:70:76:25:22:e6:fc:b7:33:c0:69:7a:1c: 48:77:d5:7d:18:ba:65:5b:7a:38:b2:8d:09:19:99: d6:6f:8c:41:b9:8a:d8:0d:fd:0c:45:77:e0:62:98: e0:4d:d9:38:24:11:14:ae:26:ba:1f:95:e2:e2:6a: 03:d8:b1:0b:74:fa:ab:96:1a:cc:ae:af:c9:bd:15: ea:cd:cc:30:47:d8:c4:a1:c5:16:28:df:4a:e0:d0: f1:68:9e:7b:33:a0:a0:17:92:b0:43:50:ce:77:2a: 0d:91:e4:d2:7a:e7:a0:e7:74:a6:ce:dc:a2:0d:41: 20:1f:2a:83:13:c4:85:4e:2d:77:96:25:80:36:53: 9c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A0:AE:C7:E3:71:CC:B7:7E:9F:61:85:47:50:32:EC:F6:6F:5A:F8:E6 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C3E043639915CFD2CBA79424AC63DD0E672E2202404388FDA16671CD2CDAA71C/0/A0AEC7E371CCB77E9F6185475032ECF66F5AF8E6.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.229.128.0/22 170.80.20.0/22 190.113.88.0/22 IPv6: 2803:5300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264637 266688 Signature Algorithm: sha256WithRSAEncryption 67:0a:51:ad:0c:0e:1c:74:80:3c:c7:41:a3:f0:be:9f:55:1b: 1c:4a:c3:e3:02:49:9c:20:53:33:77:09:b7:19:8d:d5:5d:3f: 98:70:f8:84:f5:78:37:a6:f5:0a:d9:09:32:6e:4b:0f:91:60: 14:37:2c:9a:68:d0:e8:20:5e:12:0d:89:c1:90:3a:1e:68:bc: 3e:0c:a1:74:24:45:e1:4c:a0:6d:f2:41:2b:54:9e:fa:fb:b7: 80:14:bc:e9:63:a2:ed:50:78:85:3f:0c:c8:44:87:d4:8d:a0: 97:2c:0c:85:a9:82:db:79:bf:1c:dd:0e:11:a9:e7:25:86:83: 21:02:53:7c:84:6e:4f:1d:bc:46:17:dc:cf:7a:4a:f9:a2:96: b3:ff:9e:d3:06:96:2b:58:7f:3a:f9:69:04:ce:6d:fa:19:cd: ba:e3:2f:a3:cb:03:4c:14:f8:d9:54:f9:fe:50:13:74:e7:46: 34:8d:c6:ad:67:b7:bb:60:5c:49:99:f8:a0:2a:33:4c:e6:20: c7:af:b2:29:3f:57:45:1a:de:9b:88:ab:79:16:1a:be:61:8f: c2:c7:c2:21:e7:d3:88:44:91:20:4c:ae:a5:53:21:a2:b3:41: c3:0f:96:de:9b:5f:c7:1c:89:56:96:f2:86:e8:6c:8b:e8:92: 41:fb:83:18 -----BEGIN CERTIFICATE----- MIIGtjCCBZ6gAwIBAgIUSRKD7FQrXZwgNViwrzgIkDArAgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA3MDExNzU1MzFaFw0yNzA2MzAxODAwMzFaMDMxMTAvBgNV BAMTKEEwQUVDN0UzNzFDQ0I3N0U5RjYxODU0NzUwMzJFQ0Y2NkY1QUY4RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfCJvniIiY5nI/2pKnKQTWf5fN 7e1twlI/FC0TKrd843XPTTaafx/LjrUZdaVc7J0ZUQXPIFarhQ/fJnkS7od1TnOJ BGZlK0iGc4RB3RsNp0SqDh89shG3TZHmxfYlr6oMNAYLRI1qlP2XdCtpKvphBg0Z F8f8QyiFsHB2JSLm/LczwGl6HEh31X0YumVbejiyjQkZmdZvjEG5itgN/QxFd+Bi mOBN2TgkERSuJrofleLiagPYsQt0+quWGsyur8m9FerNzDBH2MShxRYo30rg0PFo nnszoKAXkrBDUM53Kg2R5NJ656DndKbO3KINQSAfKoMTxIVOLXeWJYA2U5zfAgMB AAGjggPAMIIDvDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSgrsfjccy3fp9h hUdQMuz2b1r45jAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzNFMDQzNjM5OTE1Q0ZEMkNCQTc5NDI0 QUM2M0REMEU2NzJFMjIwMjQwNDM4OEZEQTE2NjcxQ0QyQ0RBQTcxQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DM0UwNDM2Mzk5MTVDRkQyQ0JBNzk0MjRBQzYzREQwRTY3MkUyMjAyNDA0 Mzg4RkRBMTY2NzFDRDJDREFBNzFDLzAvQTBBRUM3RTM3MUNDQjc3RTlGNjE4NTQ3 NTAzMkVDRjY2RjVBRjhFNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLeWAAwQCqlAU AwQCvnFYMA0EAgACMAcDBQAoA1MAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwQJ vQIDBBHAMA0GCSqGSIb3DQEBCwUAA4IBAQBnClGtDA4cdIA8x0Gj8L6fVRscSsPj AkmcIFMzdwm3GY3VXT+YcPiE9Xg3pvUK2QkybksPkWAUNyyaaNDoIF4SDYnBkDoe aLw+DKF0JEXhTKBt8kErVJ76+7eAFLzpY6LtUHiFPwzIRIfUjaCXLAyFqYLbeb8c 3Q4RqeclhoMhAlN8hG5PHbxGF9zPekr5opaz/57TBpYrWH86+WkEzm36Gc264y+j ywNMFPjZVPn+UBN050Y0jcatZ7e7YFxJmfigKjNM5iDHr7IpP1dFGt6biKt5Fhq+ YY/Cx8Ih59OIRJEgTK6lUyGis0HDD5bem1/HHIlWlvKG6GyL6JJB+4MY -----END CERTIFICATE-----Generated at Tue Jul 21 11:30:52 2026 by rpki-client