$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer File: 0D1797043F7F529F13952CEE646AE7365392BBC3.cer (raw, json) Hash identifier: DBB73IDVoVX9JysvwCK4AIMcbf3FSgB98QgBrMdSYTk= Subject key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1745F0904D3F9A52C027501C35697D9A3B04C864 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 21:30:34 +0000 Certificate not after: Wed 27 Jan 2027 21:35:34 +0000 Subordinate resources: AS: 262166 IP: 168.234.0.0/16 IP: 200.9.74.0/24 IP: 2801:0:110::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Feb 2026 22:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:45:f0:90:4d:3f:9a:52:c0:27:50:1c:35:69:7d:9a:3b:04:c8:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 21:30:34 2026 GMT Not After : Jan 27 21:35:34 2027 GMT Subject: CN=0D1797043F7F529F13952CEE646AE7365392BBC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d0:10:bd:78:aa:63:93:67:79:44:29:d9:8e: 76:ba:6b:58:66:ce:87:58:a9:e8:b3:93:e1:fb:80: df:12:e8:ea:a2:c2:34:f1:ca:28:a7:71:0e:d0:21: ee:a3:70:b8:99:ab:0c:77:92:92:43:31:88:5b:24: 1e:54:33:e7:e8:27:50:99:15:a5:8e:ae:27:11:25: 27:58:53:48:e5:d4:7f:05:df:b4:a5:5d:58:be:39: 27:ed:eb:31:3a:8f:98:36:ff:89:29:ef:ea:4c:12: fe:02:1b:57:98:dc:54:d6:45:a2:e7:03:25:9b:3d: 27:4b:df:88:04:01:e6:eb:65:ae:2a:5b:d8:9f:05: f9:72:de:7f:22:1a:c8:2d:df:fb:a2:73:c1:b0:00: cf:3a:2c:ad:d5:4b:e6:33:0b:40:b3:3d:04:7f:ad: 25:a8:1e:b2:d9:e2:3c:dd:a9:c6:bd:a1:57:7f:22: 95:d4:f0:ed:82:a9:bb:58:fb:73:b3:1c:79:72:bf: 72:60:3f:fa:84:4a:46:bb:e5:76:51:16:f3:6d:3b: e9:c3:b1:f4:f4:96:cc:55:e7:c0:46:74:60:ae:10: a8:c0:ea:33:0f:c3:55:0c:eb:1e:18:e3:5f:01:85: 80:4f:1d:29:ce:3b:d1:c1:9e:72:86:62:7a:ed:c2: 83:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.234.0.0/16 200.9.74.0/24 IPv6: 2801:0:110::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262166 Signature Algorithm: sha256WithRSAEncryption 2b:3b:32:be:a5:19:c6:ed:34:ba:ed:e1:a9:51:48:86:7b:f8: 6e:2f:b2:f2:f6:eb:94:dd:6e:49:23:f0:c5:28:db:ab:57:c6: 94:80:10:a6:2f:46:d9:3d:9a:a7:91:e4:6e:31:28:64:17:9c: 2d:75:ea:ed:34:d7:59:b3:39:3a:8d:74:c0:5a:e3:b4:3f:bd: 83:94:f2:65:57:12:33:2b:49:fb:8d:a8:55:60:b6:1b:f0:3e: cf:25:5f:a7:49:28:ec:b0:1c:4c:07:e9:69:eb:04:24:7d:48: 27:42:8a:ce:cc:77:89:fd:ed:f4:d1:00:f3:f8:14:f4:03:64: 77:99:50:47:58:84:27:1d:b6:52:a1:c8:b2:72:99:e0:fd:e9: b6:7d:ae:38:fa:88:39:4f:cf:d1:04:a8:8c:ea:b8:9f:c1:c0: 80:c0:66:b9:92:92:a4:3a:87:73:d2:4d:31:4f:ce:05:72:d2: bc:2d:bc:b9:d7:55:f0:33:f6:19:5e:f1:a7:0a:16:f4:cd:12: 11:65:13:1d:81:98:dc:99:10:11:a4:d8:e8:b4:95:4e:91:6d: aa:b4:db:09:f7:51:b3:ac:7b:e5:30:2b:cc:6a:3e:6d:88:da: 70:55:51:0c:6d:bf:02:6b:02:86:78:21:9f:43:f0:b7:2c:c3: f3:cc:88:42 -----BEGIN CERTIFICATE----- MIIGrDCCBZSgAwIBAgIUF0XwkE0/mlLAJ1AcNWl9mjsEyGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgyMTMwMzRaFw0yNzAxMjcyMTM1MzRaMDMxMTAvBgNV BAMTKDBEMTc5NzA0M0Y3RjUyOUYxMzk1MkNFRTY0NkFFNzM2NTM5MkJCQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh0BC9eKpjk2d5RCnZjna6a1hm zodYqeizk+H7gN8S6OqiwjTxyiincQ7QIe6jcLiZqwx3kpJDMYhbJB5UM+foJ1CZ FaWOricRJSdYU0jl1H8F37SlXVi+OSft6zE6j5g2/4kp7+pMEv4CG1eY3FTWRaLn AyWbPSdL34gEAebrZa4qW9ifBfly3n8iGsgt3/uic8GwAM86LK3VS+YzC0CzPQR/ rSWoHrLZ4jzdqca9oVd/IpXU8O2CqbtY+3OzHHlyv3JgP/qESka75XZRFvNtO+nD sfT0lsxV58BGdGCuEKjA6jMPw1UM6x4Y418BhYBPHSnOO9HBnnKGYnrtwoNLAgMB AAGjggO2MIIDsjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNF5cEP39SnxOV LO5kauc2U5K7wzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzYzNTQ1NDNEMjI0MjcyQ0Y0NzIyRkY0 RDcxODE5OEVCOEUyRkY4Q0JENkQ5QjdCOTdDREE4NjBEOUMxQ0QzQi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zNjM1NDU0M0QyMjQyNzJDRjQ3MjJGRjRENzE4MTk4RUI4RTJGRjhDQkQ2 RDlCN0I5N0NEQTg2MEQ5QzFDRDNCLzAvMEQxNzk3MDQzRjdGNTI5RjEzOTUyQ0VF NjQ2QUU3MzY1MzkyQkJDMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDARBAIAATALAwMAqOoDBADICUow DwQCAAIwCQMHACgBAAABEDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEABYwDQYJ KoZIhvcNAQELBQADggEBACs7Mr6lGcbtNLrt4alRSIZ7+G4vsvL265Tdbkkj8MUo 26tXxpSAEKYvRtk9mqeR5G4xKGQXnC116u0011mzOTqNdMBa47Q/vYOU8mVXEjMr SfuNqFVgthvwPs8lX6dJKOywHEwH6WnrBCR9SCdCis7Md4n97fTRAPP4FPQDZHeZ UEdYhCcdtlKhyLJymeD96bZ9rjj6iDlPz9EEqIzquJ/BwIDAZrmSkqQ6h3PSTTFP zgVy0rwtvLnXVfAz9hle8acKFvTNEhFlEx2BmNyZEBGk2Oi0lU6Rbaq02wn3UbOs e+UwK8xqPm2I2nBVUQxtvwJrAoZ4IZ9D8Lcsw/PMiEI= -----END CERTIFICATE-----Generated at Wed Feb 18 23:05:19 2026 by rpki-client