$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68DBCC5CE140160B185BF17F4114347E2C82B275.cer File: 68DBCC5CE140160B185BF17F4114347E2C82B275.cer (raw, json) Hash identifier: tzI8DeOPoC6LJhhDIKHM5p3CBV+hl7u0PZMRQEzOgVM= Subject key identifier: 68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 061630C27FFD50ED00160E4E764137AB0B0AA41F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sun 12 Jul 2026 21:05:09 +0000 Certificate not after: Sun 11 Jul 2027 21:10:09 +0000 Subordinate resources: AS: 27892 IP: 190.170.0.0/18 IP: 2800:a028::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 05:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:16:30:c2:7f:fd:50:ed:00:16:0e:4e:76:41:37:ab:0b:0a:a4:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jul 12 21:05:09 2026 GMT Not After : Jul 11 21:10:09 2027 GMT Subject: CN=68DBCC5CE140160B185BF17F4114347E2C82B275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fd:5e:d2:61:56:f5:ff:b6:81:59:97:05:9e: 6d:0a:dd:ae:5f:d9:69:63:d4:20:ee:98:84:f2:a4: 37:6f:57:74:66:ab:90:11:08:75:27:6f:c3:49:69: 13:b9:e9:16:ca:00:4c:49:0d:93:7a:b8:25:04:9f: 71:92:0b:dd:f9:d1:48:42:fa:5c:48:19:48:d4:c2: 73:d6:0f:3b:8a:6e:96:f0:cc:2b:c8:d7:d1:74:6d: 69:da:e7:51:87:88:24:56:c4:c4:90:5a:7b:b4:a2: 5d:79:7b:7d:0e:61:63:3c:4e:98:91:77:d4:e9:3c: 15:b0:f0:ad:6b:24:a3:23:74:43:89:a0:26:43:bd: c8:53:6f:c9:b9:24:2b:fa:dc:4d:4a:f8:b2:af:41: 8b:c3:dd:92:d9:31:4b:c5:ab:00:8e:65:26:81:df: 92:56:ac:df:a1:58:43:e5:d6:e7:d4:6c:e3:70:b7: 19:77:91:42:20:22:7b:26:ed:18:97:f0:8d:6b:d4: 9f:b0:6d:d7:eb:d8:ab:99:de:8d:0b:46:f7:c4:51: 20:cb:61:02:9e:40:09:ba:e3:68:4d:0f:df:e6:48: 4f:2f:b4:44:c8:6e:b4:ff:99:a8:01:f6:b3:38:65: b5:48:c1:63:a2:67:85:1d:a6:bc:19:bf:c6:bd:8c: 12:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:DB:CC:5C:E1:40:16:0B:18:5B:F1:7F:41:14:34:7E:2C:82:B2:75 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B06F68C0C8563336D1C02C95894558060A912EEA5B82B77FDAC163FA830BCE20/0/68DBCC5CE140160B185BF17F4114347E2C82B275.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.170.0.0/18 IPv6: 2800:a028::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27892 Signature Algorithm: sha256WithRSAEncryption 6d:d5:63:dc:f1:4b:64:87:b8:da:3f:b8:67:ba:0c:e3:a3:c6: 6e:c7:33:66:df:00:3f:59:93:d7:9e:42:16:36:0a:70:03:07: 52:09:ba:30:a4:6e:28:26:ce:27:e2:3a:45:36:a3:5a:e0:d7: 90:73:ea:6d:a2:59:92:28:dd:c1:3e:13:48:56:ff:70:1c:f1: 59:cc:c1:6b:e8:54:48:07:ca:7d:bf:f1:70:4b:14:1b:3c:88: f6:ba:3b:ff:82:99:60:44:34:3b:3c:54:ea:1d:29:5d:ea:45: 02:fd:ce:a9:86:ed:1d:46:6f:b2:e7:0b:3d:84:82:15:8d:de: 61:8f:f5:e4:d0:af:6e:3d:fb:6f:f1:bc:ba:c6:88:12:24:8a: f6:d0:60:42:3c:d7:09:b4:75:d2:af:83:14:59:4c:49:77:be: 29:69:c4:e5:54:6b:c2:29:48:fa:0b:9d:4d:b7:16:ef:16:bb: 4b:5a:de:c9:80:00:8b:3c:17:d4:e0:b0:02:58:81:1a:b1:15: 0d:19:8b:44:29:48:24:61:7d:55:e8:36:09:d9:20:7d:fc:ee: 89:97:92:9e:45:3d:66:7c:aa:8e:15:05:18:e7:6e:a7:1d:01: ce:af:9d:7e:6c:8c:03:10:39:de:00:b0:97:a5:2f:60:54:a3: 6a:e7:8b:7c -----BEGIN CERTIFICATE----- MIIGpDCCBYygAwIBAgIUBhYwwn/9UO0AFg5OdkE3qwsKpB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA3MTIyMTA1MDlaFw0yNzA3MTEyMTEwMDlaMDMxMTAvBgNV BAMTKDY4REJDQzVDRTE0MDE2MEIxODVCRjE3RjQxMTQzNDdFMkM4MkIyNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP/V7SYVb1/7aBWZcFnm0K3a5f 2Wlj1CDumITypDdvV3Rmq5ARCHUnb8NJaRO56RbKAExJDZN6uCUEn3GSC9350UhC +lxIGUjUwnPWDzuKbpbwzCvI19F0bWna51GHiCRWxMSQWnu0ol15e30OYWM8TpiR d9TpPBWw8K1rJKMjdEOJoCZDvchTb8m5JCv63E1K+LKvQYvD3ZLZMUvFqwCOZSaB 35JWrN+hWEPl1ufUbONwtxl3kUIgInsm7RiX8I1r1J+wbdfr2KuZ3o0LRvfEUSDL YQKeQAm642hND9/mSE8vtETIbrT/magB9rM4ZbVIwWOiZ4UdprwZv8a9jBINAgMB AAGjggOuMIIDqjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRo28xc4UAWCxhb 8X9BFDR+LIKydTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjA2RjY4QzBDODU2MzMzNkQxQzAyQzk1 ODk0NTU4MDYwQTkxMkVFQTVCODJCNzdGREFDMTYzRkE4MzBCQ0UyMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CMDZGNjhDMEM4NTYzMzM2RDFDMDJDOTU4OTQ1NTgwNjBBOTEyRUVBNUI4 MkI3N0ZEQUMxNjNGQTgzMEJDRTIwLzAvNjhEQkNDNUNFMTQwMTYwQjE4NUJGMTdG NDExNDM0N0UyQzgyQjI3NS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQGvqoAMA0EAgAC MAcDBQAoAKAoMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmz0MA0GCSqGSIb3DQEB CwUAA4IBAQBt1WPc8Utkh7jaP7hnugzjo8ZuxzNm3wA/WZPXnkIWNgpwAwdSCbow pG4oJs4n4jpFNqNa4NeQc+ptolmSKN3BPhNIVv9wHPFZzMFr6FRIB8p9v/FwSxQb PIj2ujv/gplgRDQ7PFTqHSld6kUC/c6phu0dRm+y5ws9hIIVjd5hj/Xk0K9uPftv 8by6xogSJIr20GBCPNcJtHXSr4MUWUxJd74pacTlVGvCKUj6C51NtxbvFrtLWt7J gACLPBfU4LACWIEasRUNGYtEKUgkYX1V6DYJ2SB9/O6Jl5KeRT1mfKqOFQUY526n HQHOr51+bIwDEDneALCXpS9gVKNq54t8 -----END CERTIFICATE-----Generated at Tue Jul 21 11:35:11 2026 by rpki-client