$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer File: 8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer (raw, json) Hash identifier: 51KM8IrGVDT7E9LYu3KKawul++2Dvz8s2mPwnFqQJ4A= Subject key identifier: 8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0DC2FE0C6FE1E8F92BCFA2454D92B2A9FE5268E3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 29 Aug 2026 02:55:42 +0000 Certificate not after: Sat 28 Aug 2027 03:00:42 +0000 Subordinate resources: AS: 17072 AS: 22884 AS: 28414 IP: 138.186.28.0/22 IP: 148.224.64.0/18 IP: 148.230.128.0/17 IP: 148.239.64.0/18 IP: 186.96.0.0/18 IP: 186.96.128.0/18 IP: 187.188.0.0 -- 187.191.63.255 IP: 187.251.96.0 -- 187.251.159.255 IP: 187.251.192.0/18 IP: 189.201.0.0/17 IP: 189.203.0.0/16 IP: 200.34.221.0 -- 200.34.222.255 IP: 200.76.64.0/20 IP: 201.149.128.0/17 IP: 2806:2f0::/32 IP: 2806:380::/27 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 04:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:c2:fe:0c:6f:e1:e8:f9:2b:cf:a2:45:4d:92:b2:a9:fe:52:68:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Aug 29 02:55:42 2026 GMT Not After : Aug 28 03:00:42 2027 GMT Subject: CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d9:c5:8f:76:47:3c:6e:d5:57:75:82:02:a0: bc:bc:9e:e6:d6:fb:7e:bc:12:6b:10:b4:9c:c1:8f: ca:7f:d8:9c:38:b7:49:55:fd:68:84:98:e4:8c:db: be:58:c3:1a:2a:ab:4a:96:4a:fc:70:e8:4a:a6:b8: 1e:2b:db:19:ae:89:ba:46:97:2c:a1:d5:63:66:b1: 4c:b5:61:00:28:0e:f2:6b:e3:86:1e:4f:dc:04:ab: 8b:17:04:35:53:43:e1:1c:ae:c7:b2:af:24:cc:e0: 06:3b:11:5c:df:84:c5:84:45:2a:1c:b2:13:a5:b1: 2d:6b:66:a3:83:b5:60:7e:73:7c:25:13:eb:7b:63: 9f:0e:e1:e0:9f:fa:4c:97:62:5a:0e:fe:ed:07:62: c6:06:66:2f:e5:f9:ef:aa:1a:e3:79:9b:cc:91:2b: 2b:7c:ac:f6:78:6c:35:0a:52:ba:8d:56:ce:17:92: 33:dc:af:73:ec:f4:bb:ef:fc:23:17:5b:c0:11:a0: da:e9:87:97:4c:f7:c8:17:8b:cd:f5:a5:f5:08:d2: b7:65:3e:5f:a0:e0:6c:74:70:f9:fb:a6:04:68:d7: 8d:0a:ca:42:20:3b:8a:95:6d:1a:d9:86:02:59:d5: 77:e1:25:8d:97:ae:22:2e:0c:a8:72:39:3b:8b:85: 62:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.28.0/22 148.224.64.0/18 148.230.128.0/17 148.239.64.0/18 186.96.0.0/18 186.96.128.0/18 187.188.0.0-187.191.63.255 187.251.96.0-187.251.159.255 187.251.192.0/18 189.201.0.0/17 189.203.0.0/16 200.34.221.0-200.34.222.255 200.76.64.0/20 201.149.128.0/17 IPv6: 2806:2f0::/32 2806:380::/27 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17072 22884 28414 Signature Algorithm: sha256WithRSAEncryption 84:4d:46:d0:4f:ad:0b:25:00:d7:20:5f:e8:24:2d:c8:0b:e1: 28:31:34:fc:7d:f5:81:dc:12:3d:dc:e5:c4:13:db:c9:cc:56: f3:c6:5b:82:c4:cf:22:fd:5d:3a:62:95:c1:7c:7d:f7:5a:6d: a9:51:f4:81:81:f9:b5:ff:f2:b0:71:2d:1a:a1:0f:23:e6:2e: a9:a6:4d:c4:93:4e:8d:fb:75:19:85:31:1c:6d:a7:cb:05:4b: 11:af:39:0f:b8:c7:cb:82:ce:f4:3a:66:9d:09:75:95:15:65: b2:de:a4:7b:e0:76:c6:07:4b:f1:28:a5:83:3a:60:7a:a2:ce: f2:19:e2:95:00:a2:a4:b2:a0:cc:8e:0d:6e:42:aa:d4:d2:7a: 1d:52:bd:a1:0e:0b:be:92:fd:91:8f:93:30:40:9b:78:8c:a4: 92:9c:90:ac:89:0b:c9:d4:6b:f6:98:69:b6:27:10:22:23:69: a8:a7:95:cf:a5:2f:9c:7c:7c:b1:79:4e:a4:ad:1f:d6:76:f3: 9c:be:1f:8b:5f:d5:e6:46:55:23:df:ed:2b:c1:29:87:23:24: 30:26:10:35:76:88:23:45:01:b7:9b:b1:7b:67:35:82:b4:88: af:dd:92:7b:69:8f:69:1c:8a:1b:e0:49:ec:08:dd:4c:71:2d: ad:a4:5c:ef -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUDcL+DG/h6Pkrz6JFTZKyqf5SaOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA4MjkwMjU1NDJaFw0yNzA4MjgwMzAwNDJaMDMxMTAvBgNV BAMTKDhBQUYxQzMxMkMyNDExMjUyQzdGNzc2M0EyNUM5NzVGNThBQTBCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi2cWPdkc8btVXdYICoLy8nubW +368EmsQtJzBj8p/2Jw4t0lV/WiEmOSM275Ywxoqq0qWSvxw6EqmuB4r2xmuibpG lyyh1WNmsUy1YQAoDvJr44YeT9wEq4sXBDVTQ+EcrseyryTM4AY7EVzfhMWERSoc shOlsS1rZqODtWB+c3wlE+t7Y58O4eCf+kyXYloO/u0HYsYGZi/l+e+qGuN5m8yR Kyt8rPZ4bDUKUrqNVs4XkjPcr3Ps9Lvv/CMXW8ARoNrph5dM98gXi831pfUI0rdl Pl+g4Gx0cPn7pgRo140KykIgO4qVbRrZhgJZ1XfhJY2XriIuDKhyOTuLhWJfAgMB AAGjggQkMIIEIDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSKrxwxLCQRJSx/ d2OiXJdfWKoL/zAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTBCRjlFMDYzMjk0QzczNUI4MzVBRUFF MTU4MTZERjA3NDk3NjIxRDIzMTA0MDlDNTc3MjlBQTY4Rjc3M0NCNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BMEJGOUUwNjMyOTRDNzM1QjgzNUFFQUUxNTgxNkRGMDc0OTc2MjFEMjMx MDQwOUM1NzcyOUFBNjhGNzczQ0I0LzAvOEFBRjFDMzEyQzI0MTEyNTJDN0Y3NzYz QTI1Qzk3NUY1OEFBMEJGRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMIGbBggrBgEFBQcBBwEB/wSBizCBiDBwBAIAATBqAwQCirocAwQG lOBAAwQHlOaAAwQGlO9AAwQGumAAAwQGumCAMAsDAwK7vAMEBru/ADAMAwQFu/tg AwQFu/uAAwQGu/vAAwQHvckAAwMAvcswDAMEAMgi3QMEAMgi3gMEBMhMQAMEB8mV gDAUBAIAAjAOAwUAKAYC8AMFBSgGA4AwIQYIKwYBBQUHAQgBAf8EEjAQoA4wDAIC QrACAllkAgJu/jANBgkqhkiG9w0BAQsFAAOCAQEAhE1G0E+tCyUA1yBf6CQtyAvh KDE0/H31gdwSPdzlxBPbycxW88ZbgsTPIv1dOmKVwXx991ptqVH0gYH5tf/ysHEt GqEPI+YuqaZNxJNOjft1GYUxHG2nywVLEa85D7jHy4LO9DpmnQl1lRVlst6ke+B2 xgdL8SilgzpgeqLO8hnilQCipLKgzI4NbkKq1NJ6HVK9oQ4LvpL9kY+TMECbeIyk kpyQrIkLydRr9phpticQIiNpqKeVz6UvnHx8sXlOpK0f1nbznL4fi1/V5kZVI9/t K8EphyMkMCYQNXaII0UBt5uxe2c1grSIr92Se2mPaRyKG+BJ7AjdTHEtraRc7w== -----END CERTIFICATE-----Generated at Fri Sep 18 13:18:24 2026 by rpki-client