$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.cer File: 88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.cer (raw, json) Hash identifier: TG5j72pYWlO++8q0Nwl4N4imS0ckQhtBbuYhgSbR2UE= Subject key identifier: 88:B9:C7:D3:CB:5B:4D:C4:97:A9:B1:FA:06:B3:33:64:3B:5E:72:32 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 6B0FC94BDABD76E1FF2E5968B79A209531B832BF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 10:11:49 +0000 Certificate not after: Wed 27 Jan 2027 10:16:49 +0000 Subordinate resources: AS: 270221 IP: 2806:404::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:0f:c9:4b:da:bd:76:e1:ff:2e:59:68:b7:9a:20:95:31:b8:32:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 10:11:49 2026 GMT Not After : Jan 27 10:16:49 2027 GMT Subject: CN=88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1a:9b:17:99:03:c3:a9:2c:44:7a:95:8e:9e: 6c:1a:00:88:c7:80:78:7b:c6:91:27:29:92:1f:08: 94:29:98:ba:9b:69:5e:5d:c3:95:ba:0e:92:e4:f8: 30:46:6b:2a:df:b2:df:f2:f0:fc:94:d2:50:63:04: 1c:85:99:e3:8a:c4:90:eb:e6:64:81:fd:d6:86:db: 84:23:f3:d7:ba:1e:c6:42:31:01:15:b1:13:80:c6: 6a:78:ce:2e:b2:2f:05:53:a1:95:ca:4f:0e:49:75: a7:30:33:42:6b:89:67:39:9d:c8:33:aa:f3:88:56: 23:a1:cd:9c:1f:37:65:6e:0c:a0:97:17:ff:fc:32: d6:0c:61:56:28:a5:b9:ce:8c:5b:a9:7c:ac:4f:93: 4e:b7:6d:5b:2f:bf:6e:27:75:81:06:90:ea:df:26: a3:57:4d:11:8b:eb:3e:59:85:6a:75:ad:d7:82:dc: d6:9c:e4:f4:1f:59:e8:d9:a1:8c:4f:e5:58:0e:29: b8:20:f5:78:95:94:57:bd:97:4a:5e:f2:e3:dd:a7: 4c:97:bc:2d:14:7f:dc:e1:b5:db:f7:83:29:1d:a8: d4:65:44:b4:3d:e2:e3:63:61:f8:c5:40:43:55:76: ad:e1:e0:f1:02:6a:ad:26:43:b9:40:d4:37:55:49: 07:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:B9:C7:D3:CB:5B:4D:C4:97:A9:B1:FA:06:B3:33:64:3B:5E:72:32 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:404::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270221 Signature Algorithm: sha256WithRSAEncryption 62:04:fc:29:bb:08:5e:d5:09:0a:c5:d2:77:1d:04:af:41:43: 14:5e:16:8b:38:21:47:42:b3:0f:a4:30:65:ef:21:fd:44:e2: 0d:a7:72:14:6b:d6:37:88:5b:15:fd:20:8e:1b:67:37:ae:61: 35:e2:f8:ec:69:12:3e:11:73:c9:d6:05:ec:c0:8a:77:6a:b6: a5:03:28:85:0e:d3:e1:8b:7b:af:f5:3a:c5:66:33:e8:13:bf: 24:f7:6a:3b:2d:f6:99:c6:bc:78:1e:f2:d9:af:21:13:7b:79: 12:da:3a:ed:5a:cf:5c:41:a0:ac:32:48:6f:fc:7b:c2:c9:e6: b2:af:09:e1:a5:ba:bb:59:6d:fa:57:99:9a:93:a4:36:f9:74: c2:a3:b6:8a:83:ba:9a:6f:88:61:79:6c:5c:5e:75:20:00:67: 50:7c:11:00:07:3f:ae:6f:3c:ea:c0:3a:e2:cb:c1:1b:f7:3c: 3d:2c:6c:d4:39:14:19:6a:f1:66:4d:b8:ab:c2:78:81:38:1f: 59:d1:d8:5a:c0:da:95:80:a3:6d:17:ef:93:fe:b7:26:19:8e: 5c:1d:d2:a8:75:c6:93:9b:b1:d0:1c:37:e8:4e:1c:05:49:f9: ca:0d:3f:fe:b7:57:76:c3:88:87:da:48:6f:27:f7:22:1f:38: 81:1c:b6:8b -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUaw/JS9q9duH/Lllot5oglTG4Mr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxMDExNDlaFw0yNzAxMjcxMDE2NDlaMDMxMTAvBgNV BAMTKDg4QjlDN0QzQ0I1QjREQzQ5N0E5QjFGQTA2QjMzMzY0M0I1RTcyMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTGpsXmQPDqSxEepWOnmwaAIjH gHh7xpEnKZIfCJQpmLqbaV5dw5W6DpLk+DBGayrfst/y8PyU0lBjBByFmeOKxJDr 5mSB/daG24Qj89e6HsZCMQEVsROAxmp4zi6yLwVToZXKTw5JdacwM0JriWc5ncgz qvOIViOhzZwfN2VuDKCXF//8MtYMYVYopbnOjFupfKxPk063bVsvv24ndYEGkOrf JqNXTRGL6z5ZhWp1rdeC3Nac5PQfWejZoYxP5VgOKbgg9XiVlFe9l0pe8uPdp0yX vC0Uf9zhtdv3gykdqNRlRLQ94uNjYfjFQENVdq3h4PECaq0mQ7lA1DdVSQfdAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSIucfTy1tNxJep sfoGszNkO15yMjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTY4QUY5ODI4QzkyOUE4QkMwM0FFNDg4 QTA2ODUxOUM0MTVDMjUzRkUzMTdFOTBDRTQzN0Y5QjhGNjIyMDBGNS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xNjhBRjk4MjhDOTI5QThCQzAzQUU0ODhBMDY4NTE5QzQxNUMyNTNGRTMx N0U5MENFNDM3RjlCOEY2MjIwMEY1LzAvODhCOUM3RDNDQjVCNERDNDk3QTlCMUZB MDZCMzMzNjQzQjVFNzIzMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYEBDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEH40wDQYJKoZIhvcNAQELBQADggEBAGIE/Cm7 CF7VCQrF0ncdBK9BQxReFos4IUdCsw+kMGXvIf1E4g2nchRr1jeIWxX9II4bZzeu YTXi+OxpEj4Rc8nWBezAindqtqUDKIUO0+GLe6/1OsVmM+gTvyT3ajst9pnGvHge 8tmvIRN7eRLaOu1az1xBoKwySG/8e8LJ5rKvCeGlurtZbfpXmZqTpDb5dMKjtoqD uppviGF5bFxedSAAZ1B8EQAHP65vPOrAOuLLwRv3PD0sbNQ5FBlq8WZNuKvCeIE4 H1nR2FrA2pWAo20X75P+tyYZjlwd0qh1xpObsdAcN+hOHAVJ+coNP/63V3bDiIfa SG8n9yIfOIEctos= -----END CERTIFICATE-----Generated at Mon Mar 2 16:49:23 2026 by rpki-client