$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/888C0A34A0711F72CCE87F9CFF2018C4235E7DF0.cer File: 888C0A34A0711F72CCE87F9CFF2018C4235E7DF0.cer (raw, json) Hash identifier: zc/KhJI7p5peGvoecqF6AFjitc1PSqXL4F+jnbrHC2c= Subject key identifier: 88:8C:0A:34:A0:71:1F:72:CC:E8:7F:9C:FF:20:18:C4:23:5E:7D:F0 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 61C900AB54C25C61A9B5D05447EF0703F04C40BB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/72A75AECA10D7BA0DCEF74A8E1A2E9CEE8448A14F5CA698079FB0E0DC836F990/0/888C0A34A0711F72CCE87F9CFF2018C4235E7DF0.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/72A75AECA10D7BA0DCEF74A8E1A2E9CEE8448A14F5CA698079FB0E0DC836F990/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 21 Jul 2026 23:40:01 +0000 Certificate not after: Tue 20 Jul 2027 23:45:01 +0000 Subordinate resources: AS: 274880 IP: 2803:fa30::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 03:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c9:00:ab:54:c2:5c:61:a9:b5:d0:54:47:ef:07:03:f0:4c:40:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jul 21 23:40:01 2026 GMT Not After : Jul 20 23:45:01 2027 GMT Subject: CN=888C0A34A0711F72CCE87F9CFF2018C4235E7DF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8a:b0:d2:56:72:86:a0:7e:6f:f7:69:f5:cb: 06:52:74:cc:58:b3:a0:83:d6:89:28:92:e3:68:31: f3:42:ff:be:8e:56:79:fc:de:80:66:62:4f:53:0a: 67:64:ad:f4:d2:7f:91:b7:2e:95:a3:45:77:c2:9e: e3:5f:6a:17:6e:6a:53:2d:77:bc:44:d8:6c:3d:32: 89:f3:86:69:7c:a4:44:8d:c1:bf:d6:01:a2:5f:0c: 76:af:d4:01:55:b3:42:2f:e7:cc:19:5b:26:9c:07: 68:cd:e1:d9:a8:7d:a7:79:fa:de:39:95:84:9e:bd: d8:7b:7a:c1:5f:ba:87:93:91:87:e6:cf:08:5b:55: 24:ef:f1:8c:13:c9:60:fb:ac:cf:c8:6b:71:83:99: 9b:ab:09:ac:f0:8e:00:ee:dd:10:31:75:aa:9f:2e: f8:38:d2:ac:df:4a:41:c5:0d:a6:03:e6:4d:e9:19: 08:c9:89:28:b2:5b:0d:3d:12:c0:a3:68:25:a0:fb: 7c:bb:b1:5a:dd:53:7b:af:99:2d:e2:be:e9:ef:bd: 34:cd:fe:c5:d7:bf:51:e3:7f:d8:7e:30:d9:cd:dc: 63:5d:b9:cf:79:41:2e:5f:76:cf:6d:15:0d:c9:d6: 51:b8:09:c9:fa:65:0f:33:5b:b2:81:87:a6:e9:16: d9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:8C:0A:34:A0:71:1F:72:CC:E8:7F:9C:FF:20:18:C4:23:5E:7D:F0 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/72A75AECA10D7BA0DCEF74A8E1A2E9CEE8448A14F5CA698079FB0E0DC836F990/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/72A75AECA10D7BA0DCEF74A8E1A2E9CEE8448A14F5CA698079FB0E0DC836F990/0/888C0A34A0711F72CCE87F9CFF2018C4235E7DF0.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:fa30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274880 Signature Algorithm: sha256WithRSAEncryption 42:fd:ba:83:5d:7d:5a:86:81:ae:e5:7d:83:0f:35:cc:6c:67: 4c:0d:5b:0f:70:88:42:68:75:33:67:c4:b0:e5:3e:ba:d4:27: f9:ce:e5:7a:7a:8f:a0:70:88:45:f9:18:4d:85:82:d5:3f:0c: 36:f0:97:2f:23:ff:59:e8:59:58:23:4e:23:ce:8c:18:4c:ff: 30:27:56:b8:a3:de:7f:82:2d:5e:9a:bc:04:4f:04:48:51:e1: 24:70:0e:4d:d2:85:7c:22:52:a6:10:2f:a7:59:b2:c0:50:a2: 30:69:a4:f4:64:79:6f:4b:cf:aa:65:3f:28:0b:97:5a:72:8b: 0f:98:07:25:af:60:f7:14:cb:7e:18:3b:68:1e:aa:59:db:4d: e8:f3:3b:44:8b:99:81:c9:19:6b:e7:60:31:34:79:05:c3:c4: df:5d:b6:8f:b7:6b:f9:04:04:0c:48:c1:b1:9c:ef:64:5e:ee: 7e:09:ad:c5:08:1e:38:67:47:0a:8d:ff:88:71:5b:f1:5f:8c: 0e:fa:9a:77:07:1f:f3:28:3f:86:96:ff:e8:ac:5c:59:93:96: 27:c1:39:f3:09:1a:5c:16:dc:ca:2b:49:cb:b3:c3:81:15:eb: f5:7a:ad:68:f4:e8:26:61:85:9e:9a:75:99:56:bc:90:3e:db: b2:ee:d6:f1 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUYckAq1TCXGGptdBUR+8HA/BMQLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA3MjEyMzQwMDFaFw0yNzA3MjAyMzQ1MDFaMDMxMTAvBgNV BAMTKDg4OEMwQTM0QTA3MTFGNzJDQ0U4N0Y5Q0ZGMjAxOEM0MjM1RTdERjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxirDSVnKGoH5v92n1ywZSdMxY s6CD1okokuNoMfNC/76OVnn83oBmYk9TCmdkrfTSf5G3LpWjRXfCnuNfahdualMt d7xE2Gw9Monzhml8pESNwb/WAaJfDHav1AFVs0Iv58wZWyacB2jN4dmofad5+t45 lYSevdh7esFfuoeTkYfmzwhbVSTv8YwTyWD7rM/Ia3GDmZurCazwjgDu3RAxdaqf Lvg40qzfSkHFDaYD5k3pGQjJiSiyWw09EsCjaCWg+3y7sVrdU3uvmS3ivunvvTTN /sXXv1Hjf9h+MNnN3GNduc95QS5fds9tFQ3J1lG4Ccn6ZQ8zW7KBh6bpFtm/AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSIjAo0oHEfcszo f5z/IBjEI1598DAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzJBNzVBRUNBMTBEN0JBMERDRUY3NEE4 RTFBMkU5Q0VFODQ0OEExNEY1Q0E2OTgwNzlGQjBFMERDODM2Rjk5MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy83MkE3NUFFQ0ExMEQ3QkEwRENFRjc0QThFMUEyRTlDRUU4NDQ4QTE0RjVD QTY5ODA3OUZCMEUwREM4MzZGOTkwLzAvODg4QzBBMzRBMDcxMUY3MkNDRTg3RjlD RkYyMDE4QzQyMzVFN0RGMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAP6MDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEMcAwDQYJKoZIhvcNAQELBQADggEBAEL9uoNd fVqGga7lfYMPNcxsZ0wNWw9wiEJodTNnxLDlPrrUJ/nO5Xp6j6BwiEX5GE2FgtU/ DDbwly8j/1noWVgjTiPOjBhM/zAnVrij3n+CLV6avARPBEhR4SRwDk3ShXwiUqYQ L6dZssBQojBppPRkeW9Lz6plPygLl1pyiw+YByWvYPcUy34YO2geqlnbTejzO0SL mYHJGWvnYDE0eQXDxN9dto+3a/kEBAxIwbGc72Re7n4JrcUIHjhnRwqN/4hxW/Ff jA76mncHH/MoP4aW/+isXFmTlifBOfMJGlwW3MorScuzw4EV6/V6rWj06CZhhZ6a dZlWvJA+27Lu1vE= -----END CERTIFICATE-----Generated at Thu Jul 23 23:22:40 2026 by rpki-client