$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CB88E5F497CD357EF6162F26D773596551B0885.cer File: 7CB88E5F497CD357EF6162F26D773596551B0885.cer (raw, json) Hash identifier: qcBD8ktZwS+GnrT1uOjQGkYau+c6pcV/mzkTBqq9RDg= Subject key identifier: 7C:B8:8E:5F:49:7C:D3:57:EF:61:62:F2:6D:77:35:96:55:1B:08:85 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 52750B5598E85E0B11FB530786EA5AF1D58E7A3C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/EE07388D71523B96A0F5905566AB82B578DF91A22F752C3DFEAE9ADA4BEAE2FE/0/7CB88E5F497CD357EF6162F26D773596551B0885.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/EE07388D71523B96A0F5905566AB82B578DF91A22F752C3DFEAE9ADA4BEAE2FE/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 22 Sep 2026 19:05:00 +0000 Certificate not after: Tue 21 Sep 2027 19:10:00 +0000 Subordinate resources: AS: 273029 IP: 200.24.104.0/22 IP: 2803:8b90::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Sep 2026 07:20:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:75:0b:55:98:e8:5e:0b:11:fb:53:07:86:ea:5a:f1:d5:8e:7a:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Sep 22 19:05:00 2026 GMT Not After : Sep 21 19:10:00 2027 GMT Subject: CN=7CB88E5F497CD357EF6162F26D773596551B0885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:00:c5:16:5f:40:64:dc:ae:98:35:b9:b3:da: c5:2b:43:06:e5:2b:b2:ae:06:53:88:ac:3c:53:62: 69:78:e9:7d:56:3a:df:7b:5a:4d:85:0a:45:70:1a: 63:6f:ce:86:0e:35:cf:82:2b:02:cc:ac:d5:58:34: df:cb:d7:44:f0:96:f5:cd:2b:ef:58:b0:2f:71:92: cf:8e:eb:05:a3:6c:18:d4:16:01:ce:d7:cf:74:c7: ef:f2:b4:e7:79:37:f9:04:35:4a:b0:cb:e8:a1:e5: 78:1c:02:d2:ac:39:09:2b:95:dd:00:c4:20:27:4b: a8:c6:40:5b:33:f3:a9:57:0c:91:5d:11:50:70:18: 10:6c:90:7e:b4:61:9b:83:bd:4c:96:45:a0:41:cd: 25:b7:85:c5:75:b6:e6:51:62:0d:e2:13:2a:a4:8d: af:85:50:35:e5:ad:70:6d:93:a3:9a:b0:57:95:7b: 43:2b:9a:2a:75:9c:58:82:8f:fd:e6:61:ff:10:09: 7c:df:37:ac:04:30:55:87:03:3a:e4:24:00:b7:c7: 4b:fb:f9:52:75:8f:7e:10:13:38:40:ce:ba:70:45: 33:94:35:d7:b0:93:86:aa:ea:82:53:21:da:50:dc: 21:b8:c4:64:e7:31:8a:9a:ac:7f:b7:b3:5b:f8:52: bf:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7C:B8:8E:5F:49:7C:D3:57:EF:61:62:F2:6D:77:35:96:55:1B:08:85 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EE07388D71523B96A0F5905566AB82B578DF91A22F752C3DFEAE9ADA4BEAE2FE/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EE07388D71523B96A0F5905566AB82B578DF91A22F752C3DFEAE9ADA4BEAE2FE/0/7CB88E5F497CD357EF6162F26D773596551B0885.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.24.104.0/22 IPv6: 2803:8b90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273029 Signature Algorithm: sha256WithRSAEncryption 26:e1:55:ea:b1:35:e9:c3:d9:21:84:17:27:a9:ba:00:77:27: ed:b8:8b:76:03:40:50:d1:b9:8d:05:40:7f:05:81:13:69:73: 77:89:f4:1a:8c:44:b2:b6:31:a9:57:6e:d9:98:25:60:04:fb: 35:96:c4:83:11:e5:50:80:30:f7:d8:b2:a6:bf:1d:ba:aa:e0: df:83:53:0c:97:c5:67:6a:8e:b7:e1:00:0d:9d:1c:0b:b3:4d: 9c:49:24:b2:a3:9d:ee:cc:ea:88:4d:ec:b6:3d:c1:68:91:58: 48:b7:ad:bd:91:9b:0d:0f:b2:5d:86:2b:50:3d:8a:c5:24:29: 28:e2:ad:ea:45:61:34:1c:e3:b8:c1:38:7f:22:e9:07:96:98: dc:be:63:bc:14:9a:4b:8f:d4:5f:77:c2:ce:db:d9:f4:3d:04: 5e:36:95:b8:2d:aa:01:79:cb:34:f3:dd:4e:58:ba:76:1b:c5: a7:4d:eb:ab:0a:e0:e5:da:62:29:75:5f:44:50:ff:e7:ae:c7: e2:c0:12:6b:89:c2:1f:76:81:77:d9:76:b1:06:85:1c:b6:50: c4:a8:93:b0:de:39:a2:04:52:99:20:4e:25:98:92:fa:f6:7c: 18:17:f8:1b:1c:21:c9:3a:00:62:06:40:86:4d:01:33:c4:43: 46:57:e8:7b -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUUnULVZjoXgsR+1MHhupa8dWOejwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA5MjIxOTA1MDBaFw0yNzA5MjExOTEwMDBaMDMxMTAvBgNV BAMTKDdDQjg4RTVGNDk3Q0QzNTdFRjYxNjJGMjZENzczNTk2NTUxQjA4ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6AMUWX0Bk3K6YNbmz2sUrQwbl K7KuBlOIrDxTYml46X1WOt97Wk2FCkVwGmNvzoYONc+CKwLMrNVYNN/L10TwlvXN K+9YsC9xks+O6wWjbBjUFgHO1890x+/ytOd5N/kENUqwy+ih5XgcAtKsOQkrld0A xCAnS6jGQFsz86lXDJFdEVBwGBBskH60YZuDvUyWRaBBzSW3hcV1tuZRYg3iEyqk ja+FUDXlrXBtk6OasFeVe0Mrmip1nFiCj/3mYf8QCXzfN6wEMFWHAzrkJAC3x0v7 +VJ1j34QEzhAzrpwRTOUNdewk4aq6oJTIdpQ3CG4xGTnMYqarH+3s1v4Ur9vAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR8uI5fSXzTV+9h YvJtdzWWVRsIhTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRUUwNzM4OEQ3MTUyM0I5NkEwRjU5MDU1 NjZBQjgyQjU3OERGOTFBMjJGNzUyQzNERkVBRTlBREE0QkVBRTJGRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FRTA3Mzg4RDcxNTIzQjk2QTBGNTkwNTU2NkFCODJCNTc4REY5MUEyMkY3 NTJDM0RGRUFFOUFEQTRCRUFFMkZFLzAvN0NCODhFNUY0OTdDRDM1N0VGNjE2MkYy NkQ3NzM1OTY1NTFCMDg4NS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCyBhoMA0EAgAC MAcDBQAoA4uQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQqhTANBgkqhkiG9w0B AQsFAAOCAQEAJuFV6rE16cPZIYQXJ6m6AHcn7biLdgNAUNG5jQVAfwWBE2lzd4n0 GoxEsrYxqVdu2ZglYAT7NZbEgxHlUIAw99iypr8duqrg34NTDJfFZ2qOt+EADZ0c C7NNnEkksqOd7szqiE3stj3BaJFYSLetvZGbDQ+yXYYrUD2KxSQpKOKt6kVhNBzj uME4fyLpB5aY3L5jvBSaS4/UX3fCztvZ9D0EXjaVuC2qAXnLNPPdTli6dhvFp03r qwrg5dpiKXVfRFD/567H4sASa4nCH3aBd9l2sQaFHLZQxKiTsN45ogRSmSBOJZiS +vZ8GBf4GxwhyToAYgZAhk0BM8RDRlfoew== -----END CERTIFICATE-----Generated at Fri Sep 25 09:55:41 2026 by rpki-client