$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer File: 2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer (raw, json) Hash identifier: 1MhgrtnhQgwjAb/EHR+nB+DJJTcoBWsuCHN+KVogCWM= Subject key identifier: 2C:D0:A0:8E:07:C5:C1:ED:EA:6B:C3:DC:FD:0F:DF:2D:52:18:8A:BD Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 5FD2A5DE22C86BA132A0F46A6DEB0B325AFBA056 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 09:57:04 +0000 Certificate not after: Wed 27 Jan 2027 10:02:04 +0000 Subordinate resources: AS: 267707 IP: 45.163.248.0/22 IP: 2803:89a0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d2:a5:de:22:c8:6b:a1:32:a0:f4:6a:6d:eb:0b:32:5a:fb:a0:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 09:57:04 2026 GMT Not After : Jan 27 10:02:04 2027 GMT Subject: CN=2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:71:70:3c:5e:1d:07:8a:7e:ab:f6:34:36:3d: dc:80:f5:f7:7d:d9:eb:0a:40:ba:66:68:48:1f:df: 61:f9:02:2b:39:4d:72:90:dd:79:3c:19:e2:a9:75: 16:26:d3:8b:43:b1:11:bd:32:c1:26:e8:9a:80:54: fe:b1:ab:e0:47:6e:23:e5:52:45:3b:41:e8:0c:ec: 1c:a2:d2:3d:27:33:df:07:a7:9f:41:55:b5:fd:6a: da:7f:9d:39:52:5b:ce:a9:c1:e3:ac:95:9c:58:a6: 76:a9:a5:f8:35:28:59:e9:b9:cf:bd:05:c2:ac:67: 8f:44:ad:75:2e:e5:92:a1:60:bc:63:ca:bd:17:1f: b8:eb:ec:7f:25:34:41:8d:6d:69:d1:3f:77:48:f9: c4:d1:64:b8:56:ac:c2:ae:91:02:d5:2e:7d:b2:ac: a6:65:41:f3:40:8f:74:db:32:d8:cf:88:9c:a5:cc: 39:8f:09:6a:f5:a3:2b:bd:32:a7:67:cb:a3:a4:9b: c2:03:d9:bf:df:2c:aa:74:34:0f:f2:7e:c5:97:c7: 7c:56:f7:2b:61:45:fd:5b:e3:f0:f6:c4:cb:d9:f8: cb:5f:b2:ef:8a:97:e5:54:0b:b2:ef:2e:30:da:a8: 2e:89:1d:ff:89:a4:ea:e0:30:87:f0:60:87:d4:07: a7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2C:D0:A0:8E:07:C5:C1:ED:EA:6B:C3:DC:FD:0F:DF:2D:52:18:8A:BD X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.163.248.0/22 IPv6: 2803:89a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267707 Signature Algorithm: sha256WithRSAEncryption 34:61:a0:2e:e0:68:58:c8:56:32:76:ac:63:ef:49:b3:13:07: d0:01:2d:8a:f5:cc:25:f9:e9:88:2d:c9:49:69:8d:8b:52:79: 6c:71:55:56:eb:14:18:14:af:71:6d:28:6c:db:1d:08:c8:91: 46:ec:34:43:e2:3c:ef:55:d3:1f:5e:a6:35:68:23:fe:ec:92: 1d:a6:62:cf:13:d4:2c:59:7b:99:7e:02:80:84:e9:9d:a0:41: c6:4e:c6:ef:78:8e:ea:b0:88:70:d0:dd:d4:89:ea:16:e0:85: 36:a3:51:22:5f:b4:8d:f8:a0:9c:13:45:b2:df:9d:ef:1f:55: 1c:62:42:6a:8f:dc:4e:cc:3f:3f:69:f6:5b:c5:3a:dc:13:c5: 22:27:a3:f7:28:94:e8:e5:4a:b4:01:5a:76:cb:21:88:31:04: 29:55:cd:4c:94:40:62:27:80:f4:d9:8a:35:d2:cb:da:71:eb: 78:9a:67:b7:03:3d:f6:da:89:ce:8a:ad:73:60:4c:99:33:c2: 35:2a:45:ba:70:70:e1:7f:6d:85:4a:5e:43:bc:d2:2a:60:14: 32:99:f3:aa:aa:79:75:df:cd:65:80:c2:e1:45:2c:2c:fc:45: 00:14:f5:1e:f6:cb:2c:56:e5:e2:93:9d:50:e4:84:4e:5a:dc: b6:21:66:c3 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUX9Kl3iLIa6EyoPRqbesLMlr7oFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwOTU3MDRaFw0yNzAxMjcxMDAyMDRaMDMxMTAvBgNV BAMTKDJDRDBBMDhFMDdDNUMxRURFQTZCQzNEQ0ZEMEZERjJENTIxODhBQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzcXA8Xh0Hin6r9jQ2PdyA9fd9 2esKQLpmaEgf32H5Ais5TXKQ3Xk8GeKpdRYm04tDsRG9MsEm6JqAVP6xq+BHbiPl UkU7QegM7Byi0j0nM98Hp59BVbX9atp/nTlSW86pweOslZxYpnappfg1KFnpuc+9 BcKsZ49ErXUu5ZKhYLxjyr0XH7jr7H8lNEGNbWnRP3dI+cTRZLhWrMKukQLVLn2y rKZlQfNAj3TbMtjPiJylzDmPCWr1oyu9Mqdny6Okm8ID2b/fLKp0NA/yfsWXx3xW 9ythRf1b4/D2xMvZ+Mtfsu+Kl+VUC7LvLjDaqC6JHf+JpOrgMIfwYIfUB6cRAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQs0KCOB8XB7epr w9z9D98tUhiKvTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDg5M0JBNDNCQjc2NEU0MzA0MEI5NUI1 M0VBMDVEOTk5OEJGODEzMEE4QTRFMDE0RTJDQTQyRTAyNkU4NjlFOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80ODkzQkE0M0JCNzY0RTQzMDQwQjk1QjUzRUEwNUQ5OTk4QkY4MTMwQThB NEUwMTRFMkNBNDJFMDI2RTg2OUU4LzAvMkNEMEEwOEUwN0M1QzFFREVBNkJDM0RD RkQwRkRGMkQ1MjE4OEFCRC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLaP4MA0EAgAC MAcDBQAoA4mgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQVuzANBgkqhkiG9w0B AQsFAAOCAQEANGGgLuBoWMhWMnasY+9JsxMH0AEtivXMJfnpiC3JSWmNi1J5bHFV VusUGBSvcW0obNsdCMiRRuw0Q+I871XTH16mNWgj/uySHaZizxPULFl7mX4CgITp naBBxk7G73iO6rCIcNDd1InqFuCFNqNRIl+0jfignBNFst+d7x9VHGJCao/cTsw/ P2n2W8U63BPFIiej9yiU6OVKtAFadsshiDEEKVXNTJRAYieA9NmKNdLL2nHreJpn twM99tqJzoqtc2BMmTPCNSpFunBw4X9thUpeQ7zSKmAUMpnzqqp5dd/NZYDC4UUs LPxFABT1HvbLLFbl4pOdUOSETlrctiFmww== -----END CERTIFICATE-----Generated at Thu Feb 19 07:19:25 2026 by rpki-client