$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/887DF7402951291631907EA7185FEE41A69BEB7A.cer File: 887DF7402951291631907EA7185FEE41A69BEB7A.cer (raw, json) Hash identifier: zcZKVVxwl6UVzYSy/cF0Xs216HnicfJQ83n+J/1Npp4= Subject key identifier: 88:7D:F7:40:29:51:29:16:31:90:7E:A7:18:5F:EE:41:A6:9B:EB:7A Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4D9D8C2C542A0C2046020779C2074355C9091B23 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/3F9F4BAC6EE7E5EECD90664F20CF88017B9E41738F41F13674BC9CA64E64AE22/0/887DF7402951291631907EA7185FEE41A69BEB7A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/3F9F4BAC6EE7E5EECD90664F20CF88017B9E41738F41F13674BC9CA64E64AE22/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 23 Jul 2026 17:50:01 +0000 Certificate not after: Thu 22 Jul 2027 17:55:01 +0000 Subordinate resources: AS: 274874 IP: 2803:5a30::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 01:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:9d:8c:2c:54:2a:0c:20:46:02:07:79:c2:07:43:55:c9:09:1b:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jul 23 17:50:01 2026 GMT Not After : Jul 22 17:55:01 2027 GMT Subject: CN=887DF7402951291631907EA7185FEE41A69BEB7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:19:65:a2:e4:2c:b1:9e:ed:09:29:f4:9b:d0: be:55:93:53:e8:aa:20:e5:12:04:c9:ea:7a:1a:01: dd:56:9e:b9:69:7a:00:02:99:78:8b:48:42:cd:92: e0:6d:98:90:ec:0d:eb:07:61:80:64:46:82:e6:31: 73:ef:79:58:34:e8:29:e4:33:a5:f8:ae:00:71:ae: 5c:8e:d6:a3:e1:e3:1a:3c:70:b6:56:17:38:da:82: 57:30:2f:32:f7:8f:05:a1:3a:67:e7:98:b6:e9:38: 1b:3f:3e:35:7e:c2:69:48:0b:1e:b9:61:84:0c:d4: 82:3b:9d:82:0a:1a:b9:a7:97:b0:12:46:fa:22:d9: 05:3e:a1:79:4f:fb:8e:48:1e:5b:64:96:96:da:f0: 88:2d:4d:84:cd:a9:81:a3:f0:36:7b:a0:82:12:9f: b2:95:88:23:91:8f:22:c6:e8:24:05:23:a2:8e:1f: 30:6b:09:b8:f1:b8:6a:77:ed:1c:3d:f3:9f:9f:05: 54:01:8b:d7:5e:44:a0:bb:80:a7:93:c3:24:d1:2b: 0a:95:fd:2a:12:44:65:d1:d6:c8:84:b6:2c:95:60: 07:39:58:ca:9c:bd:f8:06:10:ea:b5:ec:09:86:ad: 2e:ea:ed:2f:14:6a:0a:db:9c:8a:f7:32:31:7c:68: d9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:7D:F7:40:29:51:29:16:31:90:7E:A7:18:5F:EE:41:A6:9B:EB:7A X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3F9F4BAC6EE7E5EECD90664F20CF88017B9E41738F41F13674BC9CA64E64AE22/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3F9F4BAC6EE7E5EECD90664F20CF88017B9E41738F41F13674BC9CA64E64AE22/0/887DF7402951291631907EA7185FEE41A69BEB7A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:5a30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274874 Signature Algorithm: sha256WithRSAEncryption 01:14:23:f2:ad:8a:c6:26:e1:96:a5:98:5e:c8:4a:f9:ac:44: 3a:f2:48:8a:fd:84:87:1f:4b:98:45:75:c7:f0:74:fd:36:3b: f2:12:7f:41:96:81:67:ca:30:8c:8c:84:6b:7d:d4:bb:18:30: 67:42:64:ef:fa:92:aa:63:55:76:bf:1b:5e:b8:1a:f5:d5:7f: 49:50:37:23:c5:74:3e:ef:03:50:cc:db:e7:3c:7e:1f:65:d3: 45:b7:1b:39:3b:27:f9:71:9c:74:2d:2e:db:a7:78:fe:5d:a8: 20:7d:35:66:9e:e6:03:c0:7b:5d:13:55:7d:b8:ed:b0:97:9e: 57:ec:c9:08:57:fe:75:47:fb:11:0a:83:d4:d1:dc:6f:df:8e: 35:c4:9d:8e:3e:94:ac:71:3a:34:ed:7c:ac:71:a8:77:05:36: 44:a9:89:3f:70:fd:54:96:99:2f:78:fc:dc:23:a9:85:c6:91: 1b:d4:20:31:53:70:a4:bf:54:d0:fc:07:c4:02:f3:6e:4b:43: ed:9b:ea:e3:ba:1d:c3:e2:6b:1b:92:29:79:e6:4e:8c:a9:d2: 8e:58:2b:a4:ab:61:4c:f2:f4:c8:ac:32:36:31:dc:56:fb:52: ea:8c:3a:27:df:c5:a2:cd:26:b0:ac:e2:9b:8c:66:d4:6f:4e: 3a:b3:31:b8 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUTZ2MLFQqDCBGAgd5wgdDVckJGyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA3MjMxNzUwMDFaFw0yNzA3MjIxNzU1MDFaMDMxMTAvBgNV BAMTKDg4N0RGNzQwMjk1MTI5MTYzMTkwN0VBNzE4NUZFRTQxQTY5QkVCN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdGWWi5Cyxnu0JKfSb0L5Vk1Po qiDlEgTJ6noaAd1WnrlpegACmXiLSELNkuBtmJDsDesHYYBkRoLmMXPveVg06Cnk M6X4rgBxrlyO1qPh4xo8cLZWFzjaglcwLzL3jwWhOmfnmLbpOBs/PjV+wmlICx65 YYQM1II7nYIKGrmnl7ASRvoi2QU+oXlP+45IHltklpba8IgtTYTNqYGj8DZ7oIIS n7KViCORjyLG6CQFI6KOHzBrCbjxuGp37Rw985+fBVQBi9deRKC7gKeTwyTRKwqV /SoSRGXR1siEtiyVYAc5WMqcvfgGEOq17AmGrS7q7S8UagrbnIr3MjF8aNmjAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSIffdAKVEpFjGQ fqcYX+5BppvrejAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM0Y5RjRCQUM2RUU3RTVFRUNEOTA2NjRG MjBDRjg4MDE3QjlFNDE3MzhGNDFGMTM2NzRCQzlDQTY0RTY0QUUyMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zRjlGNEJBQzZFRTdFNUVFQ0Q5MDY2NEYyMENGODgwMTdCOUU0MTczOEY0 MUYxMzY3NEJDOUNBNjRFNjRBRTIyLzAvODg3REY3NDAyOTUxMjkxNjMxOTA3RUE3 MTg1RkVFNDFBNjlCRUI3QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANaMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMbowDQYJKoZIhvcNAQELBQADggEBAAEUI/Kt isYm4ZalmF7ISvmsRDrySIr9hIcfS5hFdcfwdP02O/ISf0GWgWfKMIyMhGt91LsY MGdCZO/6kqpjVXa/G164GvXVf0lQNyPFdD7vA1DM2+c8fh9l00W3Gzk7J/lxnHQt LtuneP5dqCB9NWae5gPAe10TVX247bCXnlfsyQhX/nVH+xEKg9TR3G/fjjXEnY4+ lKxxOjTtfKxxqHcFNkSpiT9w/VSWmS94/NwjqYXGkRvUIDFTcKS/VND8B8QC825L Q+2b6uO6HcPiaxuSKXnmToyp0o5YK6SrYUzy9MisMjYx3Fb7UuqMOiffxaLNJrCs 4puMZtRvTjqzMbg= -----END CERTIFICATE-----Generated at Fri Jul 24 15:43:33 2026 by rpki-client