$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.cer File: 2240B644D1FD422B45BF149B24CCCE788AE6DF25.cer (raw, json) Hash identifier: 3KABbHEll8xJXhVTXE8CzJBQ7cQrYFz3/3lZ5eZsTUU= Subject key identifier: 22:40:B6:44:D1:FD:42:2B:45:BF:14:9B:24:CC:CE:78:8A:E6:DF:25 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7054301AB53D09A373BFC1DA6C10454D409E14A8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 07:11:37 +0000 Certificate not after: Wed 27 Jan 2027 07:16:37 +0000 Subordinate resources: AS: 271907 IP: 181.233.88.0/22 IP: 2803:e210::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:54:30:1a:b5:3d:09:a3:73:bf:c1:da:6c:10:45:4d:40:9e:14:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 07:11:37 2026 GMT Not After : Jan 27 07:16:37 2027 GMT Subject: CN=2240B644D1FD422B45BF149B24CCCE788AE6DF25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:56:56:c1:b7:21:c3:a9:a7:eb:38:f9:ca:9c: f6:53:2d:22:9c:4f:07:1d:7f:f9:66:62:49:d4:de: 50:a9:6e:dd:83:9d:38:71:16:55:f7:eb:cd:1f:72: 03:65:63:3c:11:bc:ed:c1:6b:cf:a6:5f:72:96:3d: f1:fb:60:48:8a:bd:e4:d2:7f:3c:05:aa:5a:8a:a8: d2:3e:18:06:99:70:2c:4f:00:97:68:f6:73:b8:af: 38:41:5b:bc:41:d7:6b:97:30:3d:e1:e1:93:9d:70: 8b:69:3a:71:f1:f2:b5:9d:92:57:d7:c2:e7:1e:3d: 2b:3f:18:d6:9d:27:9d:6e:4e:4a:bd:b2:c5:9d:f5: 87:10:aa:d8:f3:56:84:d8:9d:fd:ab:0f:2f:97:d9: 08:0f:75:ff:f2:1f:fc:66:4d:8e:8e:84:6a:46:ed: cb:d2:af:0c:de:35:ef:14:d3:26:32:46:9c:15:b4: 8e:01:e4:c6:4d:b6:3d:42:64:e8:b4:0f:00:4e:73: 74:24:d7:7f:1a:d0:71:2e:4c:c7:16:5f:16:00:a5: c2:af:7b:f6:9b:bb:6c:de:9d:72:26:53:32:8f:b9: 3e:5d:f2:c8:1a:fd:73:34:e8:f5:d9:2f:b5:32:3a: 1a:2c:9e:bd:a7:29:42:ce:ff:65:74:20:4d:bd:9a: 38:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:40:B6:44:D1:FD:42:2B:45:BF:14:9B:24:CC:CE:78:8A:E6:DF:25 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.233.88.0/22 IPv6: 2803:e210::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271907 Signature Algorithm: sha256WithRSAEncryption 36:ec:3e:7d:ae:59:9c:81:68:45:2d:0a:9b:6c:ad:4b:7f:0b: 68:f1:96:b7:50:81:98:7b:e8:f9:44:98:90:93:02:af:f0:40: ce:81:39:a8:ce:e5:f7:96:02:22:ea:ee:0a:ac:ed:24:2a:2d: 84:60:57:e0:0c:e9:e4:b7:f5:bc:a9:66:69:0f:a7:5c:83:74: a4:7a:cf:2a:78:e6:92:57:a9:38:ea:7a:57:7d:e3:95:5b:56: 82:89:1c:c7:6d:26:6a:72:25:a8:ae:51:8b:2f:6b:1f:9e:94: b6:d3:56:af:7a:9b:3a:8d:54:4e:9a:40:b6:6d:b3:06:d2:fa: ac:bc:16:04:9a:3f:84:77:89:41:9b:36:5b:d5:6b:5d:07:bd: 85:dd:79:e6:f1:c2:ed:55:94:6a:3c:1a:65:5b:69:df:fc:5d: b7:71:6b:aa:44:18:2e:af:ab:33:82:05:5b:1e:c7:bf:a6:e6: a5:a0:bd:49:30:f4:f7:3a:a2:e9:ec:af:90:b0:42:36:35:96: 6e:a5:b2:07:c6:cc:60:bb:8e:a2:3d:15:7f:f5:07:00:9b:19: 8c:e5:2a:8b:26:29:30:5a:f3:f8:dc:12:0b:f5:9d:7b:d2:31: 37:47:98:59:59:54:d0:f8:dc:a9:61:f2:bc:6d:a6:c1:80:51: fd:f0:43:0e -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUcFQwGrU9CaNzv8HabBBFTUCeFKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNzExMzdaFw0yNzAxMjcwNzE2MzdaMDMxMTAvBgNV BAMTKDIyNDBCNjQ0RDFGRDQyMkI0NUJGMTQ5QjI0Q0NDRTc4OEFFNkRGMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZVlbBtyHDqafrOPnKnPZTLSKc Twcdf/lmYknU3lCpbt2DnThxFlX3680fcgNlYzwRvO3Ba8+mX3KWPfH7YEiKveTS fzwFqlqKqNI+GAaZcCxPAJdo9nO4rzhBW7xB12uXMD3h4ZOdcItpOnHx8rWdklfX wucePSs/GNadJ51uTkq9ssWd9YcQqtjzVoTYnf2rDy+X2QgPdf/yH/xmTY6OhGpG 7cvSrwzeNe8U0yYyRpwVtI4B5MZNtj1CZOi0DwBOc3Qk138a0HEuTMcWXxYApcKv e/abu2zenXImUzKPuT5d8sga/XM06PXZL7UyOhosnr2nKULO/2V0IE29mjjXAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQiQLZE0f1CK0W/ FJskzM54iubfJTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTRDNDRGMzlBMTZFQTAxRjQ3MDBDQTc3 REM1RjkzMDMxMzlEMjM0NDhFQjcxNzFBMzVBMkFEMEIwOEZGMDM3MS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81NEM0NEYzOUExNkVBMDFGNDcwMENBNzdEQzVGOTMwMzEzOUQyMzQ0OEVC NzE3MUEzNUEyQUQwQjA4RkYwMzcxLzAvMjI0MEI2NDREMUZENDIyQjQ1QkYxNDlC MjRDQ0NFNzg4QUU2REYyNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCtelYMA0EAgAC MAcDBQAoA+IQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQmIzANBgkqhkiG9w0B AQsFAAOCAQEANuw+fa5ZnIFoRS0Km2ytS38LaPGWt1CBmHvo+USYkJMCr/BAzoE5 qM7l95YCIuruCqztJCothGBX4Azp5Lf1vKlmaQ+nXIN0pHrPKnjmklepOOp6V33j lVtWgokcx20manIlqK5Riy9rH56UttNWr3qbOo1UTppAtm2zBtL6rLwWBJo/hHeJ QZs2W9VrXQe9hd155vHC7VWUajwaZVtp3/xdt3FrqkQYLq+rM4IFWx7Hv6bmpaC9 STD09zqi6eyvkLBCNjWWbqWyB8bMYLuOoj0Vf/UHAJsZjOUqiyYpMFrz+NwSC/Wd e9IxN0eYWVlU0PjcqWHyvG2mwYBR/fBDDg== -----END CERTIFICATE-----Generated at Mon Mar 2 23:40:26 2026 by rpki-client