$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.cer File: 88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.cer (raw, json) Hash identifier: ipgB8Uj79tWdqMalbKPo04iSz7FItmlHS5o/MYYokXc= Subject key identifier: 88:F3:86:89:30:7E:A2:90:5E:98:E7:E6:F6:C4:4D:7E:6D:8E:1C:35 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7FC6565CFBFE82A09BEE1AC8716F5A5D7CB7ECEE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 14 Apr 2026 17:45:01 +0000 Certificate not after: Tue 13 Apr 2027 17:50:01 +0000 Subordinate resources: AS: 28522 AS: 28539 AS: 265602 IP: 45.185.244.0/22 IP: 138.186.200.0/22 IP: 170.247.172.0/22 IP: 201.150.0.0 -- 201.150.11.255 IP: 201.159.96.0/20 IP: 201.159.124.0/22 IP: 2806:211::/32 IP: 2806:34c::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Apr 2026 04:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:c6:56:5c:fb:fe:82:a0:9b:ee:1a:c8:71:6f:5a:5d:7c:b7:ec:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Apr 14 17:45:01 2026 GMT Not After : Apr 13 17:50:01 2027 GMT Subject: CN=88F38689307EA2905E98E7E6F6C44D7E6D8E1C35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8a:b5:5e:26:97:20:0e:3b:2c:c1:a9:2b:aa: ae:59:ee:08:f0:9d:42:89:51:4b:d8:8c:de:c9:d9: 86:bd:59:48:15:59:d5:89:1a:da:92:2d:56:ff:b9: 1e:98:e9:d3:69:b3:01:e1:a4:ab:cb:ac:0a:91:71: 4e:c6:96:28:a8:55:90:42:ac:58:4f:28:fd:26:8a: 05:e2:ec:dc:fd:14:a1:4f:c1:ec:34:d9:09:e9:94: 72:58:a2:91:08:cb:26:3d:b8:95:98:2d:7d:9c:fb: 86:fa:29:0f:3c:49:47:8c:52:be:ab:c0:81:f3:e5: 79:65:d7:56:09:9c:1d:2c:82:59:2e:45:f1:c1:40: c3:0a:1a:d9:f8:81:b9:2e:7c:94:19:ad:b2:bd:39: 51:68:c6:e0:1c:d3:29:0d:db:c7:4a:96:60:a4:dc: 75:7b:32:24:33:bc:cf:b8:55:d5:c4:0a:a6:ea:dd: 2d:bc:fb:1e:12:df:8d:4c:de:fe:72:38:88:d8:38: cc:b9:46:8b:53:56:b2:f3:7c:67:28:5f:74:03:0c: 81:3a:a3:1d:d4:ab:49:e4:c6:d0:12:77:4e:e7:55: 7f:bc:9f:28:98:10:ee:2e:a8:7c:54:78:38:9e:45: 9a:20:fe:10:ac:e4:97:09:3a:16:fb:7f:43:ed:69: 4b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:F3:86:89:30:7E:A2:90:5E:98:E7:E6:F6:C4:4D:7E:6D:8E:1C:35 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C5716CA7C4D4303B05EE6121F3B17D6168738C8AE002BDE83AE1E8E74C00C56C/0/88F38689307EA2905E98E7E6F6C44D7E6D8E1C35.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.185.244.0/22 138.186.200.0/22 170.247.172.0/22 201.150.0.0-201.150.11.255 201.159.96.0/20 201.159.124.0/22 IPv6: 2806:211::/32 2806:34c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28522 28539 265602 Signature Algorithm: sha256WithRSAEncryption 09:e3:4a:21:39:08:06:67:be:73:54:5c:55:ad:4a:af:a7:86: 16:2f:a9:e5:ed:59:c7:28:c5:0e:23:de:df:f8:67:2b:19:ed: 43:74:1c:ee:5f:22:dc:6e:41:2c:d1:37:d4:78:17:6f:69:a0: 23:cf:22:d7:a6:f4:48:c4:28:3d:8d:d9:41:d8:48:aa:26:52: 83:d4:0f:a5:12:75:f0:11:32:9a:36:19:9a:a0:d2:9a:df:51: 77:45:0a:b1:a5:81:d6:2a:67:c7:ed:91:de:ab:f5:c5:04:df: 08:3c:41:f3:65:e0:0b:fe:68:0c:a4:8a:28:8c:16:3b:82:c1: ea:84:de:d1:7f:81:d8:ec:4d:89:dc:82:c0:91:39:db:51:5d: 6d:61:df:7d:d1:09:ae:cc:10:06:ea:a3:33:2c:25:5c:24:cd: f5:0d:0b:74:da:00:16:5e:c6:30:37:99:64:db:18:13:e4:76: d9:b6:5e:bd:0f:79:56:e4:7b:75:84:f0:31:d7:f9:14:5e:4d: ba:78:be:85:70:51:b3:ff:fd:75:7c:0c:c5:73:2b:74:2d:de: ed:59:74:ef:c0:30:80:6e:c6:fa:fc:04:9f:c2:d5:be:5f:fe: 6e:24:1b:ce:32:2f:1f:7f:9e:13:fe:00:e0:8f:4f:c2:0e:ce: ad:d6:0f:99 -----BEGIN CERTIFICATE----- MIIG2TCCBcGgAwIBAgIUf8ZWXPv+gqCb7hrIcW9aXXy37O4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA0MTQxNzQ1MDFaFw0yNzA0MTMxNzUwMDFaMDMxMTAvBgNV BAMTKDg4RjM4Njg5MzA3RUEyOTA1RTk4RTdFNkY2QzQ0RDdFNkQ4RTFDMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtirVeJpcgDjsswakrqq5Z7gjw nUKJUUvYjN7J2Ya9WUgVWdWJGtqSLVb/uR6Y6dNpswHhpKvLrAqRcU7GliioVZBC rFhPKP0migXi7Nz9FKFPwew02QnplHJYopEIyyY9uJWYLX2c+4b6KQ88SUeMUr6r wIHz5Xll11YJnB0sglkuRfHBQMMKGtn4gbkufJQZrbK9OVFoxuAc0ykN28dKlmCk 3HV7MiQzvM+4VdXECqbq3S28+x4S341M3v5yOIjYOMy5RotTVrLzfGcoX3QDDIE6 ox3Uq0nkxtASd07nVX+8nyiYEO4uqHxUeDieRZog/hCs5JcJOhb7f0PtaUsvAgMB AAGjggPjMIID3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSI84aJMH6ikF6Y 5+b2xE1+bY4cNTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzU3MTZDQTdDNEQ0MzAzQjA1RUU2MTIx RjNCMTdENjE2ODczOEM4QUUwMDJCREU4M0FFMUU4RTc0QzAwQzU2Qy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DNTcxNkNBN0M0RDQzMDNCMDVFRTYxMjFGM0IxN0Q2MTY4NzM4QzhBRTAw MkJERTgzQUUxRThFNzRDMDBDNTZDLzAvODhGMzg2ODkzMDdFQTI5MDVFOThFN0U2 RjZDNDREN0U2RDhFMUMzNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTAxBAIAATArAwQCLbn0AwQCirrI AwQCqvesMAsDAwHJlgMEAsmWCAMEBMmfYAMEAsmffDAUBAIAAjAOAwUAKAYCEQMF ACgGA0wwIgYIKwYBBQUHAQgBAf8EEzARoA8wDQICb2oCAm97AgMEDYIwDQYJKoZI hvcNAQELBQADggEBAAnjSiE5CAZnvnNUXFWtSq+nhhYvqeXtWccoxQ4j3t/4ZysZ 7UN0HO5fItxuQSzRN9R4F29poCPPItem9EjEKD2N2UHYSKomUoPUD6USdfARMpo2 GZqg0prfUXdFCrGlgdYqZ8ftkd6r9cUE3wg8QfNl4Av+aAykiiiMFjuCweqE3tF/ gdjsTYncgsCROdtRXW1h333RCa7MEAbqozMsJVwkzfUNC3TaABZexjA3mWTbGBPk dtm2Xr0PeVbke3WE8DHX+RReTbp4voVwUbP//XV8DMVzK3Qt3u1ZdO/AMIBuxvr8 BJ/C1b5f/m4kG84yLx9/nhP+AOCPT8IOzq3WD5k= -----END CERTIFICATE-----Generated at Fri Apr 17 21:21:50 2026 by rpki-client