$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA.cer File: 11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA.cer (raw, json) Hash identifier: 4GP7LYnbIUBbUO6nNYvutBA4SUS1+XrzNA/qXyph1yY= Subject key identifier: 11:CB:02:0A:EC:E3:C0:AA:F4:EE:29:7A:9A:FD:12:BE:EA:62:65:DA Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 216A09C059DCA283C64B56B3E73DE490EE8D537E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DCC6696BF619F80A53ED89E14649C67327E748F3E4323585AC27CCCCF1F45FC6/0/11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DCC6696BF619F80A53ED89E14649C67327E748F3E4323585AC27CCCCF1F45FC6/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 22 Jun 2026 17:55:28 +0000 Certificate not after: Mon 21 Jun 2027 18:00:28 +0000 Subordinate resources: AS: 271869 IP: 45.230.38.0/23 IP: 200.123.40.0/24 IP: 2803:4c10::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 26 Jul 2026 10:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:6a:09:c0:59:dc:a2:83:c6:4b:56:b3:e7:3d:e4:90:ee:8d:53:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jun 22 17:55:28 2026 GMT Not After : Jun 21 18:00:28 2027 GMT Subject: CN=11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1b:4e:85:a8:fa:0b:bc:8b:3c:9d:5e:62:46: 0f:f9:8c:82:e3:42:df:3f:55:3e:fc:98:bd:c9:3d: 67:77:8e:f0:2a:a1:a4:90:04:b7:52:77:3a:e7:6e: 37:c9:ba:a9:7f:f5:e2:5b:04:00:86:99:b0:ec:e7: 1a:37:00:79:87:4b:d0:7b:7b:aa:f4:c0:ec:1f:36: 75:9c:c7:40:55:16:1c:65:cd:c7:01:58:59:c2:81: 41:08:bf:0b:c6:97:c6:f6:a5:0c:91:d7:90:c8:73: f5:67:a4:b7:7f:0e:e0:03:48:86:39:60:72:07:81: 99:0f:da:8c:ef:42:31:5b:72:6e:58:a2:5d:bd:dd: 0a:c8:c7:1d:5c:81:e1:57:b1:4d:cf:13:ec:47:fe: 27:25:1c:91:6c:2a:c4:83:58:ce:44:0a:71:ae:45: f5:61:0f:d3:73:e1:d3:1c:56:e6:f5:82:31:9c:80: 39:f1:7f:c3:7f:60:1a:fb:2b:5d:5b:e9:ae:62:7d: ca:04:a1:65:3e:c6:38:cc:11:e8:e1:71:21:b9:25: cb:cc:70:17:25:f4:cd:a1:b5:0b:34:a9:5e:67:39: 53:4e:2e:25:ca:50:bd:a9:cc:43:47:cd:8b:80:e6: 24:15:3b:57:4f:d8:d0:3a:04:61:6d:16:79:a5:d6: 51:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 11:CB:02:0A:EC:E3:C0:AA:F4:EE:29:7A:9A:FD:12:BE:EA:62:65:DA X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DCC6696BF619F80A53ED89E14649C67327E748F3E4323585AC27CCCCF1F45FC6/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DCC6696BF619F80A53ED89E14649C67327E748F3E4323585AC27CCCCF1F45FC6/0/11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.230.38.0/23 200.123.40.0/24 IPv6: 2803:4c10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271869 Signature Algorithm: sha256WithRSAEncryption 6e:72:c2:60:b2:9c:9a:37:4c:5f:e5:55:c4:a5:a9:77:4f:b9: 8a:3e:26:8c:1e:2a:76:30:e0:76:b3:5f:ee:e9:5b:15:55:ad: 01:f4:46:bd:29:35:eb:f1:04:54:ca:6d:a7:00:5d:9d:b0:02: 40:b4:ad:d7:87:53:60:fb:57:ca:ea:c7:30:7d:9a:55:3d:8a: 74:b0:d7:80:66:25:99:33:f1:9a:97:d8:ee:f5:f5:45:82:71: 4d:fe:85:9f:7c:c0:9c:6e:f0:24:89:f2:0d:a3:95:af:c7:47: 6e:a2:a4:29:0f:3b:ba:91:32:20:fb:7e:64:c5:4e:53:3e:c7: 78:ff:e1:3f:e2:39:c3:f8:0b:26:2b:09:60:97:04:78:8c:10: fd:9a:9d:2a:4a:16:8e:32:1d:1c:82:1a:0e:6a:f8:8f:a9:4a: 60:3f:bd:2e:e6:84:d0:f6:b6:20:0f:f7:f1:d9:81:97:46:2c: fa:57:4f:7c:89:5f:7a:38:88:f7:51:60:c1:d0:d0:10:bb:64: d8:4c:c0:49:48:bc:33:dc:41:7c:2b:04:02:56:39:86:79:dd: 0e:4d:d7:fa:57:ea:79:b6:e9:cf:f3:c1:3b:ba:bc:9e:0d:54: e6:bb:c0:5b:92:31:2e:52:f4:1e:bd:99:9a:e5:c9:e4:a6:71: ae:86:87:26 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUIWoJwFncooPGS1az5z3kkO6NU34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA2MjIxNzU1MjhaFw0yNzA2MjExODAwMjhaMDMxMTAvBgNV BAMTKDExQ0IwMjBBRUNFM0MwQUFGNEVFMjk3QTlBRkQxMkJFRUE2MjY1REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeG06FqPoLvIs8nV5iRg/5jILj Qt8/VT78mL3JPWd3jvAqoaSQBLdSdzrnbjfJuql/9eJbBACGmbDs5xo3AHmHS9B7 e6r0wOwfNnWcx0BVFhxlzccBWFnCgUEIvwvGl8b2pQyR15DIc/VnpLd/DuADSIY5 YHIHgZkP2ozvQjFbcm5Yol293QrIxx1cgeFXsU3PE+xH/iclHJFsKsSDWM5ECnGu RfVhD9Nz4dMcVub1gjGcgDnxf8N/YBr7K11b6a5ifcoEoWU+xjjMEejhcSG5JcvM cBcl9M2htQs0qV5nOVNOLiXKUL2pzENHzYuA5iQVO1dP2NA6BGFtFnml1lG7AgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQRywIK7OPAqvTu KXqa/RK+6mJl2jAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRENDNjY5NkJGNjE5RjgwQTUzRUQ4OUUx NDY0OUM2NzMyN0U3NDhGM0U0MzIzNTg1QUMyN0NDQ0NGMUY0NUZDNi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQ0M2Njk2QkY2MTlGODBBNTNFRDg5RTE0NjQ5QzY3MzI3RTc0OEYzRTQz MjM1ODVBQzI3Q0NDQ0YxRjQ1RkM2LzAvMTFDQjAyMEFFQ0UzQzBBQUY0RUUyOTdB OUFGRDEyQkVFQTYyNjVEQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBLeYmAwQAyHso MA0EAgACMAcDBQAoA0wQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQl/TANBgkq hkiG9w0BAQsFAAOCAQEAbnLCYLKcmjdMX+VVxKWpd0+5ij4mjB4qdjDgdrNf7ulb FVWtAfRGvSk16/EEVMptpwBdnbACQLSt14dTYPtXyurHMH2aVT2KdLDXgGYlmTPx mpfY7vX1RYJxTf6Fn3zAnG7wJInyDaOVr8dHbqKkKQ87upEyIPt+ZMVOUz7HeP/h P+I5w/gLJisJYJcEeIwQ/ZqdKkoWjjIdHIIaDmr4j6lKYD+9LuaE0Pa2IA/38dmB l0Ys+ldPfIlfejiI91FgwdDQELtk2EzASUi8M9xBfCsEAlY5hnndDk3X+lfqebbp z/PBO7q8ng1U5rvAW5IxLlL0Hr2ZmuXJ5KZxroaHJg== -----END CERTIFICATE-----Generated at Wed Jul 22 08:38:27 2026 by rpki-client