$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.cer File: 22E20380327B2CB679071D7FE9AC4DBFA317A166.cer (raw, json) Hash identifier: GmTuAY+qUF29YgM0m8f9GpJCEw8EClm+YoDZQgT5SMg= Subject key identifier: 22:E2:03:80:32:7B:2C:B6:79:07:1D:7F:E9:AC:4D:BF:A3:17:A1:66 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 6CDAC4CECDEB4DF4C2BE299BE011F2CDBF5E3478 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 22:03:04 +0000 Certificate not after: Wed 27 Jan 2027 22:08:04 +0000 Subordinate resources: AS: 265551 IP: 45.238.188.0/22 IP: 2806:302::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:da:c4:ce:cd:eb:4d:f4:c2:be:29:9b:e0:11:f2:cd:bf:5e:34:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 22:03:04 2026 GMT Not After : Jan 27 22:08:04 2027 GMT Subject: CN=22E20380327B2CB679071D7FE9AC4DBFA317A166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d6:0d:de:0c:54:7b:21:46:55:0a:55:87:7c: 73:2e:c4:66:9e:a1:35:2b:0e:04:d0:e5:fd:a1:2d: 16:19:18:da:2e:40:8b:5a:bd:d8:3c:3c:bf:d8:41: 3f:4b:65:cf:85:c0:97:2d:b9:b6:7d:82:04:68:0c: 36:9f:33:df:16:ad:2a:26:04:35:4d:8d:54:1b:54: e0:3c:d2:17:a7:d4:6f:53:ad:de:64:e9:a7:eb:dd: 78:c1:44:69:ae:c1:39:2f:6a:ce:49:ce:e9:dc:f6: a7:fb:82:b8:d7:d5:14:83:13:45:57:23:90:41:35: 72:18:b4:d8:2e:99:3c:f3:be:d1:5d:a1:5d:bd:d7: 1d:65:d9:42:e5:1b:5f:54:bf:0d:f9:86:1d:09:ca: a8:37:d9:02:3a:db:ef:0a:07:b7:7f:f2:f5:c0:30: 4c:3e:05:17:83:cb:2d:f9:fd:50:df:cd:21:e2:b7: 5b:eb:01:8f:56:de:10:43:c4:42:2b:54:5a:ea:12: c0:41:87:21:d7:cc:50:23:c2:34:13:d0:bd:ad:4b: 06:26:c4:81:a0:3e:23:8d:7d:cd:f9:33:41:da:1c: 55:26:02:7c:f3:3e:27:c9:6b:c9:d2:ae:fe:17:06: 67:46:c0:31:88:56:0f:4d:ef:9b:86:de:e0:7c:99: e7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:E2:03:80:32:7B:2C:B6:79:07:1D:7F:E9:AC:4D:BF:A3:17:A1:66 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.238.188.0/22 IPv6: 2806:302::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265551 Signature Algorithm: sha256WithRSAEncryption 21:62:ca:13:b5:4f:10:f3:ba:1b:d6:05:ea:dd:84:bf:45:7c: 81:14:c8:a5:df:27:c2:b7:b1:34:a5:31:76:09:97:44:95:40: 66:f7:5f:d5:1e:38:75:c4:f9:75:ae:72:63:9c:3d:6c:4f:59: 3f:8b:73:a5:02:e4:29:01:c1:14:b2:d3:ba:6d:68:dc:43:78: d8:b9:0f:fd:4f:33:ac:af:0b:e9:1e:fb:f2:eb:53:7f:87:af: 91:d1:78:bc:9c:cf:ed:c4:c7:ff:da:32:aa:03:3a:35:b0:41: ee:f7:d8:bc:00:29:04:f2:03:1b:d9:d0:3b:14:fb:f8:8a:14: bc:cd:d0:1d:36:67:01:d8:9a:2f:e7:8e:48:6a:b1:1b:83:28: c0:9e:8d:9f:6f:89:a6:51:a0:72:20:0b:1e:2e:40:15:f6:5a: 64:3a:b1:63:0e:73:bf:9a:48:f6:f9:23:1b:91:03:e9:46:5d: 7f:09:a9:28:62:af:7b:34:a5:a7:22:61:f5:92:70:c1:10:de: e4:69:c1:a0:7d:9f:d8:e4:53:2b:b3:c1:91:93:94:1b:38:76: 02:38:c0:e4:92:c0:b9:4a:2d:c9:84:33:5e:85:0b:99:1e:21: 5d:c4:b8:5d:16:90:9a:40:74:9a:20:3e:0e:d1:9c:f7:10:0a: c0:ba:2d:6c -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUbNrEzs3rTfTCvimb4BHyzb9eNHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgyMjAzMDRaFw0yNzAxMjcyMjA4MDRaMDMxMTAvBgNV BAMTKDIyRTIwMzgwMzI3QjJDQjY3OTA3MUQ3RkU5QUM0REJGQTMxN0ExNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo1g3eDFR7IUZVClWHfHMuxGae oTUrDgTQ5f2hLRYZGNouQItavdg8PL/YQT9LZc+FwJctubZ9ggRoDDafM98WrSom BDVNjVQbVOA80hen1G9Trd5k6afr3XjBRGmuwTkvas5Jzunc9qf7grjX1RSDE0VX I5BBNXIYtNgumTzzvtFdoV291x1l2ULlG19Uvw35hh0Jyqg32QI62+8KB7d/8vXA MEw+BReDyy35/VDfzSHit1vrAY9W3hBDxEIrVFrqEsBBhyHXzFAjwjQT0L2tSwYm xIGgPiONfc35M0HaHFUmAnzzPifJa8nSrv4XBmdGwDGIVg9N75uG3uB8medbAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQi4gOAMnsstnkH HX/prE2/oxehZjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTM1OUNCMTE1NzA3QTk0QjJDM0UxMjhC QzAxQjQ4RjVFOTVGRTk4QTZGQ0Q2NjU4MTI3NERGRkNCNjQ0N0FBRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81MzU5Q0IxMTU3MDdBOTRCMkMzRTEyOEJDMDFCNDhGNUU5NUZFOThBNkZD RDY2NTgxMjc0REZGQ0I2NDQ3QUFGLzAvMjJFMjAzODAzMjdCMkNCNjc5MDcxRDdG RTlBQzREQkZBMzE3QTE2Ni5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLe68MA0EAgAC MAcDBQAoBgMCMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQNTzANBgkqhkiG9w0B AQsFAAOCAQEAIWLKE7VPEPO6G9YF6t2Ev0V8gRTIpd8nwrexNKUxdgmXRJVAZvdf 1R44dcT5da5yY5w9bE9ZP4tzpQLkKQHBFLLTum1o3EN42LkP/U8zrK8L6R778utT f4evkdF4vJzP7cTH/9oyqgM6NbBB7vfYvAApBPIDG9nQOxT7+IoUvM3QHTZnAdia L+eOSGqxG4MowJ6Nn2+JplGgciALHi5AFfZaZDqxYw5zv5pI9vkjG5ED6UZdfwmp KGKvezSlpyJh9ZJwwRDe5GnBoH2f2ORTK7PBkZOUGzh2AjjA5JLAuUotyYQzXoUL mR4hXcS4XRaQmkB0miA+DtGc9xAKwLotbA== -----END CERTIFICATE-----Generated at Thu Feb 19 00:11:32 2026 by rpki-client