$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.cer File: 73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.cer (raw, json) Hash identifier: DxEsd7s4s1aWa9dqHQx2xQR5UqMsrYn66/+OiB1PgMM= Subject key identifier: 73:AA:8F:CE:40:3A:C6:B0:83:BE:28:2B:03:DF:B4:0E:2E:6C:DF:A0 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 6504AB69CCCC0055A98434C7A67A69AB1AB9742E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 29 Apr 2026 22:55:33 +0000 Certificate not after: Wed 28 Apr 2027 23:00:33 +0000 Subordinate resources: AS: 270172 IP: 148.224.46.0/24 IP: 148.224.58.0/23 IP: 2001:1203::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 04 May 2026 10:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:04:ab:69:cc:cc:00:55:a9:84:34:c7:a6:7a:69:ab:1a:b9:74:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Apr 29 22:55:33 2026 GMT Not After : Apr 28 23:00:33 2027 GMT Subject: CN=73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c9:35:90:56:05:cd:1b:31:f6:8b:5f:06:39: 83:aa:b2:48:c2:f4:a7:25:fb:e5:e8:80:61:ea:1b: a3:a7:c8:44:50:12:a5:fc:66:4e:d9:fe:c2:f3:5e: 9f:19:84:07:44:ae:c3:f8:4f:ce:f4:06:8b:93:64: 6b:a0:6e:77:49:bd:70:34:c6:27:1b:2d:e9:10:55: 59:53:3d:d8:6a:55:35:27:58:dc:a3:99:ce:e2:b1: fa:b4:39:15:1a:11:52:c1:a1:78:e2:37:c7:97:0e: 0e:e1:b8:eb:15:c9:d4:49:a4:27:5a:cb:9e:31:92: e8:df:57:06:38:92:6e:d4:ee:c2:cd:4a:0e:dd:07: dd:05:84:e2:f9:8d:cf:30:fa:9e:81:64:26:9e:61: 57:59:3c:27:ea:ca:59:21:f4:29:07:73:4a:ba:fe: 74:98:da:68:5b:62:5b:95:59:a0:2f:cb:87:eb:78: f0:41:a5:b9:d6:4b:ae:e3:d1:3c:5b:86:3e:f8:12: e9:43:45:0b:01:0c:5a:4b:b4:36:e4:b3:1d:05:60: 10:a7:f7:0b:52:20:25:b4:00:99:b9:95:5c:b3:56: 80:81:eb:4c:ae:5f:35:70:9b:2d:d5:75:dd:c4:d2: 01:5a:cc:bc:ef:88:44:c9:8c:88:e9:75:97:41:9d: 02:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 73:AA:8F:CE:40:3A:C6:B0:83:BE:28:2B:03:DF:B4:0E:2E:6C:DF:A0 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.224.46.0/24 148.224.58.0/23 IPv6: 2001:1203::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270172 Signature Algorithm: sha256WithRSAEncryption 15:81:16:b1:65:92:96:58:7c:ca:39:c4:6d:42:c1:48:6f:c3: c4:93:0a:53:93:d9:e9:37:dd:9e:5b:41:c5:d3:e3:64:7d:12: ef:28:4a:7e:2d:04:16:26:c7:05:52:2a:39:31:dc:d6:5f:b6: 30:30:b9:fa:7e:92:ec:e8:5f:65:df:f9:d5:3f:bf:c5:f3:1f: f7:06:ea:ad:df:e2:89:bd:32:cc:7b:e3:f6:3c:f7:7c:6a:a3: 98:24:08:53:e2:30:cc:a0:7f:0b:c0:16:6b:c7:54:08:96:8f: 49:86:37:4e:bb:d9:84:9c:d8:33:d2:70:94:10:1a:af:10:c0: d6:e5:45:c1:16:b8:4e:4f:b1:12:f4:60:c1:f6:ab:75:59:ca: c3:b5:dd:da:b9:b9:92:f4:0a:c9:1c:da:a7:4a:b2:c8:d9:25: fc:17:fa:37:25:35:a6:6f:5d:7a:77:80:46:16:05:56:7b:7b: 93:a8:e5:a1:40:e9:f4:45:d2:61:a4:b3:55:84:20:df:4d:51: b9:af:28:30:62:c1:2c:5a:14:fd:04:66:2c:8d:1e:20:d4:16: 88:17:62:18:b5:e0:59:47:82:6e:81:e2:22:26:23:b0:0c:36: 15:00:8a:d2:b6:75:d9:4f:00:93:5c:63:88:f7:04:60:5f:af: a2:68:75:33 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUZQSraczMAFWphDTHpnppqxq5dC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA0MjkyMjU1MzNaFw0yNzA0MjgyMzAwMzNaMDMxMTAvBgNV BAMTKDczQUE4RkNFNDAzQUM2QjA4M0JFMjgyQjAzREZCNDBFMkU2Q0RGQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJyTWQVgXNGzH2i18GOYOqskjC 9Kcl++XogGHqG6OnyERQEqX8Zk7Z/sLzXp8ZhAdErsP4T870BouTZGugbndJvXA0 xicbLekQVVlTPdhqVTUnWNyjmc7isfq0ORUaEVLBoXjiN8eXDg7huOsVydRJpCda y54xkujfVwY4km7U7sLNSg7dB90FhOL5jc8w+p6BZCaeYVdZPCfqylkh9CkHc0q6 /nSY2mhbYluVWaAvy4frePBBpbnWS67j0Txbhj74EulDRQsBDFpLtDbksx0FYBCn 9wtSICW0AJm5lVyzVoCB60yuXzVwmy3Vdd3E0gFazLzviETJjIjpdZdBnQK3AgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRzqo/OQDrGsIO+ KCsD37QOLmzfoDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOUQ1OTA5OTkzQTBGOTBFOEVGODI4QzAw QjY1OTc0QTlEOTg5NTU5REVDRjE4REE3Nzg0MTREQzc2QTU1NDM5My8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85RDU5MDk5OTNBMEY5MEU4RUY4MjhDMDBCNjU5NzRBOUQ5ODk1NTlERUNG MThEQTc3ODQxNERDNzZBNTU0MzkzLzAvNzNBQThGQ0U0MDNBQzZCMDgzQkUyODJC MDNERkI0MEUyRTZDREZBMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAlOAuAwQBlOA6 MA0EAgACMAcDBQAgARIDMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQfXDANBgkq hkiG9w0BAQsFAAOCAQEAFYEWsWWSllh8yjnEbULBSG/DxJMKU5PZ6TfdnltBxdPj ZH0S7yhKfi0EFibHBVIqOTHc1l+2MDC5+n6S7OhfZd/51T+/xfMf9wbqrd/iib0y zHvj9jz3fGqjmCQIU+IwzKB/C8AWa8dUCJaPSYY3TrvZhJzYM9JwlBAarxDA1uVF wRa4Tk+xEvRgwfardVnKw7Xd2rm5kvQKyRzap0qyyNkl/Bf6NyU1pm9deneARhYF Vnt7k6jloUDp9EXSYaSzVYQg301Rua8oMGLBLFoU/QRmLI0eINQWiBdiGLXgWUeC boHiIiYjsAw2FQCK0rZ12U8Ak1xjiPcEYF+vomh1Mw== -----END CERTIFICATE-----Generated at Thu Apr 30 04:54:46 2026 by rpki-client