$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34090330F5A38CD685507A29EEE8D849546FBEBA.cer File: 34090330F5A38CD685507A29EEE8D849546FBEBA.cer (raw, json) Hash identifier: EXg8Dk0kH1/CIRP/3CUQrug79A+/P8554LUVxNNJ77c= Subject key identifier: 34:09:03:30:F5:A3:8C:D6:85:50:7A:29:EE:E8:D8:49:54:6F:BE:BA Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 49B6DE04F0C581A3D74F9CF334AF0EAB41CC7473 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A812FE5FCEFEAF70B7D79AEE8E84BC794BD60FF0BCA0C0C34AF26279041CEC28/0/34090330F5A38CD685507A29EEE8D849546FBEBA.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A812FE5FCEFEAF70B7D79AEE8E84BC794BD60FF0BCA0C0C34AF26279041CEC28/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 18:05:03 +0000 Certificate not after: Wed 27 Jan 2027 18:10:03 +0000 Subordinate resources: AS: 28461 IP: 2001:1204::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 24 Feb 2026 02:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:b6:de:04:f0:c5:81:a3:d7:4f:9c:f3:34:af:0e:ab:41:cc:74:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 18:05:03 2026 GMT Not After : Jan 27 18:10:03 2027 GMT Subject: CN=34090330F5A38CD685507A29EEE8D849546FBEBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:70:3f:25:18:b4:e4:ca:cb:be:2c:b1:b0:31: 2a:c3:9e:c7:3d:8a:d4:f2:10:a5:11:29:78:5f:fd: a3:c7:76:ef:37:c6:17:e7:a8:d4:4d:0e:a4:1a:7e: 24:88:b5:44:18:c0:3e:a2:d3:a9:cd:e0:d6:87:1c: 5d:d1:b2:37:a8:30:d4:89:f7:8c:37:b1:ee:01:ef: 7e:c5:77:d1:2b:12:9e:0b:2a:7e:7d:0a:c8:f4:e0: 90:f6:61:57:07:74:80:10:a8:03:39:9c:ab:6e:59: e4:a7:e0:9c:6b:f8:4c:9e:f5:2e:fd:36:ea:c6:6a: e1:fb:41:fd:01:8e:cb:27:76:1f:1c:33:2c:b9:aa: c7:5a:6f:16:7f:cc:0c:1f:fc:2b:22:8f:6e:d3:3c: 6d:81:8f:41:ba:a5:87:e6:f8:a7:4a:a2:aa:08:6d: 98:9b:6f:5a:a1:ea:8a:c4:75:a6:2e:1a:a9:e6:01: a4:b7:e0:f9:58:e3:dc:fc:63:51:d5:57:38:5a:b9: a7:97:af:e8:7b:13:0d:19:ca:44:50:ce:83:d8:c6: 6e:e8:93:a6:36:28:aa:71:8c:73:ab:1f:be:a9:d2: da:a1:51:a0:e3:6f:cc:79:28:5b:a0:a7:5b:3d:7d: ff:60:62:d1:b0:c6:9f:95:8d:30:67:27:50:a3:7b: 8b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:09:03:30:F5:A3:8C:D6:85:50:7A:29:EE:E8:D8:49:54:6F:BE:BA X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A812FE5FCEFEAF70B7D79AEE8E84BC794BD60FF0BCA0C0C34AF26279041CEC28/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A812FE5FCEFEAF70B7D79AEE8E84BC794BD60FF0BCA0C0C34AF26279041CEC28/0/34090330F5A38CD685507A29EEE8D849546FBEBA.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:1204::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28461 Signature Algorithm: sha256WithRSAEncryption 48:31:f6:83:8a:a9:88:c3:5e:ee:a0:59:ee:58:32:78:47:5c: db:c4:2a:22:bf:95:f0:c0:b6:9a:0c:e1:60:07:3d:9b:22:96: d2:3f:ab:ad:ed:82:c2:11:64:c5:5d:d8:9f:b5:e6:ad:11:a4: 99:98:d6:5a:9a:b7:f4:0e:c2:77:0e:d4:a8:41:11:f3:dc:55: e7:b9:b6:d7:ab:75:02:92:95:62:5d:aa:00:f2:9b:50:7d:65: 23:e9:1e:fd:54:2c:49:82:aa:8c:3b:d5:7d:c7:ce:de:97:80: 9e:a0:43:e6:b9:5c:20:fd:23:29:04:6e:fd:b4:78:3d:cc:1b: e5:ac:48:d2:0a:20:cb:8a:c2:6d:29:3b:07:ea:00:02:b8:71: 77:87:c7:70:04:0a:88:9e:4d:7b:0f:e3:65:5c:d7:1e:36:28: 2a:9d:05:79:77:81:78:72:70:e7:30:6b:a4:43:a7:f8:ff:9b: 62:23:21:6c:19:a4:81:57:7c:86:cf:e4:78:37:11:a9:05:b6: 5d:3f:6e:4e:72:7f:72:8c:cd:f1:a0:d8:81:e6:90:1f:fc:83: eb:ab:9a:c5:83:51:83:40:49:e8:24:4c:e5:f8:ea:82:47:02: b9:c3:f3:f7:cf:77:27:21:98:35:19:0d:f8:df:6a:68:53:58: eb:bb:56:58 -----BEGIN CERTIFICATE----- MIIGljCCBX6gAwIBAgIUSbbeBPDFgaPXT5zzNK8Oq0HMdHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxODA1MDNaFw0yNzAxMjcxODEwMDNaMDMxMTAvBgNV BAMTKDM0MDkwMzMwRjVBMzhDRDY4NTUwN0EyOUVFRThEODQ5NTQ2RkJFQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNcD8lGLTkysu+LLGwMSrDnsc9 itTyEKURKXhf/aPHdu83xhfnqNRNDqQafiSItUQYwD6i06nN4NaHHF3RsjeoMNSJ 94w3se4B737Fd9ErEp4LKn59Csj04JD2YVcHdIAQqAM5nKtuWeSn4Jxr+Eye9S79 NurGauH7Qf0Bjssndh8cMyy5qsdabxZ/zAwf/Csij27TPG2Bj0G6pYfm+KdKoqoI bZibb1qh6orEdaYuGqnmAaS34PlY49z8Y1HVVzhauaeXr+h7Ew0ZykRQzoPYxm7o k6Y2KKpxjHOrH76p0tqhUaDjb8x5KFugp1s9ff9gYtGwxp+VjTBnJ1Cje4vZAgMB AAGjggOgMIIDnDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ0CQMw9aOM1oVQ einu6NhJVG++ujAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTgxMkZFNUZDRUZFQUY3MEI3RDc5QUVF OEU4NEJDNzk0QkQ2MEZGMEJDQTBDMEMzNEFGMjYyNzkwNDFDRUMyOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BODEyRkU1RkNFRkVBRjcwQjdENzlBRUU4RTg0QkM3OTRCRDYwRkYwQkNB MEMwQzM0QUYyNjI3OTA0MUNFQzI4LzAvMzQwOTAzMzBGNUEzOENENjg1NTA3QTI5 RUVFOEQ4NDk1NDZGQkVCQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAESBDAZBggr BgEFBQcBCAEB/wQKMAigBjAEAgJvLTANBgkqhkiG9w0BAQsFAAOCAQEASDH2g4qp iMNe7qBZ7lgyeEdc28QqIr+V8MC2mgzhYAc9myKW0j+rre2CwhFkxV3Yn7XmrRGk mZjWWpq39A7Cdw7UqEER89xV57m216t1ApKVYl2qAPKbUH1lI+ke/VQsSYKqjDvV fcfO3peAnqBD5rlcIP0jKQRu/bR4Pcwb5axI0gogy4rCbSk7B+oAArhxd4fHcAQK iJ5New/jZVzXHjYoKp0FeXeBeHJw5zBrpEOn+P+bYiMhbBmkgVd8hs/keDcRqQW2 XT9uTnJ/cozN8aDYgeaQH/yD66uaxYNRg0BJ6CRM5fjqgkcCucPz9893JyGYNRkN +N9qaFNY67tWWA== -----END CERTIFICATE-----Generated at Fri Feb 20 01:44:34 2026 by rpki-client