$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09EE930BD4EA7403B65EC54BAD159FF4B5138CA7.cer File: 09EE930BD4EA7403B65EC54BAD159FF4B5138CA7.cer (raw, json) Hash identifier: W6L8cmZhgovoee+S/pZIADXPjNgu0jzRzVVCrWxv28w= Subject key identifier: 09:EE:93:0B:D4:EA:74:03:B6:5E:C5:4B:AD:15:9F:F4:B5:13:8C:A7 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 6045C73A55B1A3B66B45C2A3A0E153E13FDDF07D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B327F6B0AE80E3692582D2FF7C5C2F4A6FE7C1E457E68513205D50D783F507C2/0/09EE930BD4EA7403B65EC54BAD159FF4B5138CA7.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B327F6B0AE80E3692582D2FF7C5C2F4A6FE7C1E457E68513205D50D783F507C2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 20:20:10 +0000 Certificate not after: Tue 26 Jan 2027 20:25:10 +0000 Subordinate resources: AS: 264848 IP: 45.235.88.0/22 IP: 2801:11:7000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:45:c7:3a:55:b1:a3:b6:6b:45:c2:a3:a0:e1:53:e1:3f:dd:f0:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 20:20:10 2026 GMT Not After : Jan 26 20:25:10 2027 GMT Subject: CN=09EE930BD4EA7403B65EC54BAD159FF4B5138CA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:e2:7a:7b:b4:79:49:dc:e8:9d:b5:ce:22: ca:ee:53:b9:50:7d:8f:e8:6b:bd:1f:c6:1e:e8:e1: b6:40:e2:67:e5:c2:a9:94:ef:cf:a8:03:38:67:6c: ef:21:97:cf:54:b0:d8:37:72:59:4c:c8:d4:95:25: ec:a9:97:5d:f9:3a:fc:52:ba:23:35:7d:45:49:92: 98:75:a8:b6:48:99:63:d3:4d:cd:78:eb:d5:1e:33: be:05:2d:87:41:94:b8:b0:90:97:28:77:13:00:ab: 7b:e1:2d:9b:2d:48:a4:7a:ec:a8:8f:0b:fc:b2:29: a3:f3:1a:55:03:09:e2:b2:f0:d1:d8:03:71:7b:9f: 4b:d7:d7:69:dc:db:c5:ba:cc:9c:3d:3c:25:c1:41: 68:dc:0f:88:57:2c:c3:1b:e8:92:12:32:25:b1:e0: 19:5b:cc:d2:9d:7e:f6:c6:52:59:13:69:fe:88:29: 98:2c:2f:cf:0e:e9:57:e9:41:d5:ce:ab:bb:dd:d6: d3:89:7d:77:40:b6:79:62:f6:f8:cd:7b:3a:bb:2c: a4:33:5f:6d:aa:ca:dd:de:4b:d8:9e:f5:6a:94:8b: 4e:35:ab:2f:ae:35:13:e4:c6:6d:37:6b:0e:7c:43: f5:33:f1:c6:da:68:13:27:f1:4f:24:8c:e6:34:56: 25:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:EE:93:0B:D4:EA:74:03:B6:5E:C5:4B:AD:15:9F:F4:B5:13:8C:A7 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B327F6B0AE80E3692582D2FF7C5C2F4A6FE7C1E457E68513205D50D783F507C2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B327F6B0AE80E3692582D2FF7C5C2F4A6FE7C1E457E68513205D50D783F507C2/0/09EE930BD4EA7403B65EC54BAD159FF4B5138CA7.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.235.88.0/22 IPv6: 2801:11:7000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264848 Signature Algorithm: sha256WithRSAEncryption 07:e5:59:ac:82:fa:6b:41:31:31:66:50:dc:fa:60:e9:58:ff: 58:76:52:b4:71:a1:35:c4:77:8f:8b:88:6b:1d:93:c8:04:26: 2c:35:a3:ea:ad:b3:e1:77:99:39:42:80:c9:73:e2:55:c3:e3: 07:3c:a7:64:70:ff:90:c9:b3:97:6b:fc:0f:0b:65:4b:2b:29: 77:f7:42:f9:bf:99:db:72:60:07:32:fe:10:95:cf:67:d2:76: fd:11:9b:8b:57:66:e5:e6:bd:59:95:d0:b1:1e:5f:c2:0b:0f: 7b:aa:91:a4:c5:47:ee:56:35:87:e2:92:0b:d8:f4:44:56:50: b2:51:63:48:8d:ef:96:86:d8:e6:0e:20:e7:e8:0d:13:80:52: af:dc:29:2d:ee:31:df:20:38:ab:97:07:e2:db:bc:6e:13:42: f5:fc:1b:b1:37:19:99:18:e1:b1:ca:c8:83:af:ea:5a:d6:27: 2f:0d:8c:fd:fe:8c:54:c3:f3:6c:1e:3b:61:e5:4d:85:c7:7c: d8:eb:bc:78:72:0f:66:af:bd:76:65:f3:4c:d3:10:ed:0c:52: a6:a9:7a:f1:29:c0:5f:1e:9a:48:16:86:b1:22:4f:25:4d:1a: 24:c0:75:d5:ee:a1:ed:07:33:aa:27:e2:29:dc:4e:fc:41:ee: 36:f2:bd:06 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUYEXHOlWxo7ZrRcKjoOFT4T/d8H0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMDIwMTBaFw0yNzAxMjYyMDI1MTBaMDMxMTAvBgNV BAMTKDA5RUU5MzBCRDRFQTc0MDNCNjVFQzU0QkFEMTU5RkY0QjUxMzhDQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/6uJ6e7R5SdzonbXOIsruU7lQ fY/oa70fxh7o4bZA4mflwqmU78+oAzhnbO8hl89UsNg3cllMyNSVJeypl135OvxS uiM1fUVJkph1qLZImWPTTc1469UeM74FLYdBlLiwkJcodxMAq3vhLZstSKR67KiP C/yyKaPzGlUDCeKy8NHYA3F7n0vX12nc28W6zJw9PCXBQWjcD4hXLMMb6JISMiWx 4BlbzNKdfvbGUlkTaf6IKZgsL88O6VfpQdXOq7vd1tOJfXdAtnli9vjNezq7LKQz X22qyt3eS9ie9WqUi041qy+uNRPkxm03aw58Q/Uz8cbaaBMn8U8kjOY0ViUDAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQJ7pML1Op0A7Ze xUutFZ/0tROMpzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjMyN0Y2QjBBRTgwRTM2OTI1ODJEMkZG N0M1QzJGNEE2RkU3QzFFNDU3RTY4NTEzMjA1RDUwRDc4M0Y1MDdDMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CMzI3RjZCMEFFODBFMzY5MjU4MkQyRkY3QzVDMkY0QTZGRTdDMUU0NTdF Njg1MTMyMDVENTBENzgzRjUwN0MyLzAvMDlFRTkzMEJENEVBNzQwM0I2NUVDNTRC QUQxNTlGRjRCNTEzOENBNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLetYMA8EAgAC MAkDBwAoAQARcAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAqQMA0GCSqGSIb3 DQEBCwUAA4IBAQAH5VmsgvprQTExZlDc+mDpWP9YdlK0caE1xHePi4hrHZPIBCYs NaPqrbPhd5k5QoDJc+JVw+MHPKdkcP+QybOXa/wPC2VLKyl390L5v5nbcmAHMv4Q lc9n0nb9EZuLV2bl5r1ZldCxHl/CCw97qpGkxUfuVjWH4pIL2PREVlCyUWNIje+W htjmDiDn6A0TgFKv3Ckt7jHfIDirlwfi27xuE0L1/BuxNxmZGOGxysiDr+pa1icv DYz9/oxUw/NsHjth5U2Fx3zY67x4cg9mr712ZfNM0xDtDFKmqXrxKcBfHppIFoax Ik8lTRokwHXV7qHtBzOqJ+Ip3E78Qe428r0G -----END CERTIFICATE-----Generated at Thu Feb 19 00:11:43 2026 by rpki-client