$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.cer File: 34DA34C5571EA566E24D3B569191DDECD3CC94A0.cer (raw, json) Hash identifier: q+Jj2c0vPJtm7jPUJSYG5/LBhM+rIbB6Qw8E6Nj3yco= Subject key identifier: 34:DA:34:C5:57:1E:A5:66:E2:4D:3B:56:91:91:DD:EC:D3:CC:94:A0 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3602F95D97F469F6F0FC7B1A329725711AEAE443 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 14:05:09 +0000 Certificate not after: Wed 27 Jan 2027 14:10:09 +0000 Subordinate resources: AS: 271878 IP: 207.248.12.0/22 IP: 2803:9c10::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:02:f9:5d:97:f4:69:f6:f0:fc:7b:1a:32:97:25:71:1a:ea:e4:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 14:05:09 2026 GMT Not After : Jan 27 14:10:09 2027 GMT Subject: CN=34DA34C5571EA566E24D3B569191DDECD3CC94A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b9:83:f4:12:b2:38:1e:72:00:f8:2b:11:5e: d9:a6:19:b6:07:4f:02:74:8a:f2:df:e4:eb:e1:2d: b5:cf:8f:41:fe:b1:75:30:18:89:66:f3:5f:b2:5e: 7b:63:dc:10:3d:a8:5d:35:b5:c5:77:b0:99:1c:33: 9d:00:d0:a1:a8:6d:cb:60:6b:dc:18:87:7e:c8:40: c8:32:50:c0:a7:28:2e:6b:67:48:10:ca:57:e5:33: 7c:91:a7:14:c9:b9:61:72:e1:fb:ed:fe:4a:ab:90: 16:28:f1:d3:11:86:ec:b3:a7:0e:bc:53:88:fe:c9: dc:c4:da:fc:43:0a:7f:fb:9e:e6:84:3f:26:c4:af: 8e:fe:37:87:fe:2a:a8:86:11:9b:77:a5:df:93:31: 1b:a5:10:74:81:15:40:ac:11:53:7c:c0:27:7a:db: d1:92:a1:a0:23:4d:b0:62:f7:d5:57:93:44:fa:28: 9c:a6:6b:ac:ba:95:7b:4e:e0:5a:61:c3:e1:fa:08: 81:64:cc:b6:ac:9c:26:31:cf:4f:4b:d4:89:be:86: a5:48:e7:85:55:34:cf:1d:28:b0:40:ee:a4:cd:87: f6:73:c3:3e:d2:85:54:aa:11:a9:2f:78:ac:1e:ad: d6:a5:04:05:a5:33:69:98:36:64:b0:64:a5:15:85: 56:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:DA:34:C5:57:1E:A5:66:E2:4D:3B:56:91:91:DD:EC:D3:CC:94:A0 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.248.12.0/22 IPv6: 2803:9c10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271878 Signature Algorithm: sha256WithRSAEncryption 53:11:23:0a:16:bf:e2:41:e3:97:40:b3:f9:f5:14:7c:c5:20: a3:a6:30:62:0c:d3:29:5e:9d:18:9b:74:b1:d5:86:dd:35:21: a3:bb:a7:f2:24:22:19:c5:a0:bb:3f:e6:bf:88:d8:46:cb:82: 31:fa:0a:3c:d4:f1:1e:3a:53:9b:cf:7d:ee:9e:fb:0e:6f:60: ea:81:e4:af:e4:29:8a:cc:74:f1:62:af:82:c3:69:78:e5:83: 17:4c:ca:d5:91:d0:90:4a:15:d0:7e:ef:d4:7e:c1:07:e4:af: f6:c8:ec:79:4b:71:cf:1a:ab:28:d6:8d:a3:f0:0d:da:ef:14: d3:5e:ae:59:be:4b:da:26:ef:6d:ec:b6:17:35:c5:76:a2:7a: ad:4e:2e:66:8c:ac:ba:a0:54:39:39:5c:6c:f3:cc:bd:a6:66: 30:c4:bf:38:ad:af:7b:e3:54:e9:f2:3a:77:c4:b9:8d:4d:c2: 7a:d7:02:c8:5d:e8:b1:1c:65:4c:55:28:cf:ca:85:09:aa:d3: 8f:6c:e5:19:a8:17:6b:23:87:f2:cd:68:43:38:10:34:35:42: 88:7d:f1:9d:bc:ed:98:d2:9b:0b:3c:93:88:9d:f5:12:67:21: 32:8d:73:e6:57:1f:1c:7c:49:a5:bb:67:f6:de:24:4f:2e:c6: 39:8d:e0:ca -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUNgL5XZf0afbw/HsaMpclcRrq5EMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNDA1MDlaFw0yNzAxMjcxNDEwMDlaMDMxMTAvBgNV BAMTKDM0REEzNEM1NTcxRUE1NjZFMjREM0I1NjkxOTFEREVDRDNDQzk0QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKuYP0ErI4HnIA+CsRXtmmGbYH TwJ0ivLf5OvhLbXPj0H+sXUwGIlm81+yXntj3BA9qF01tcV3sJkcM50A0KGobctg a9wYh37IQMgyUMCnKC5rZ0gQylflM3yRpxTJuWFy4fvt/kqrkBYo8dMRhuyzpw68 U4j+ydzE2vxDCn/7nuaEPybEr47+N4f+KqiGEZt3pd+TMRulEHSBFUCsEVN8wCd6 29GSoaAjTbBi99VXk0T6KJyma6y6lXtO4Fphw+H6CIFkzLasnCYxz09L1Im+hqVI 54VVNM8dKLBA7qTNh/Zzwz7ShVSqEakveKwerdalBAWlM2mYNmSwZKUVhVavAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ02jTFVx6lZuJN O1aRkd3s08yUoDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTU0REY0RjFFMUM4MDVGQjQ4RkIyQzdD QzdDODBENzgwRTkzQzA4NURGN0EwQTZCNDI4NUUzNkM3MTUzODRCRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FNTRERjRGMUUxQzgwNUZCNDhGQjJDN0NDN0M4MEQ3ODBFOTNDMDg1REY3 QTBBNkI0Mjg1RTM2QzcxNTM4NEJFLzAvMzREQTM0QzU1NzFFQTU2NkUyNEQzQjU2 OTE5MURERUNEM0NDOTRBMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCz/gMMA0EAgAC MAcDBQAoA5wQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQmBjANBgkqhkiG9w0B AQsFAAOCAQEAUxEjCha/4kHjl0Cz+fUUfMUgo6YwYgzTKV6dGJt0sdWG3TUho7un 8iQiGcWguz/mv4jYRsuCMfoKPNTxHjpTm8997p77Dm9g6oHkr+Qpisx08WKvgsNp eOWDF0zK1ZHQkEoV0H7v1H7BB+Sv9sjseUtxzxqrKNaNo/AN2u8U016uWb5L2ibv bey2FzXFdqJ6rU4uZoysuqBUOTlcbPPMvaZmMMS/OK2ve+NU6fI6d8S5jU3CetcC yF3osRxlTFUoz8qFCarTj2zlGagXayOH8s1oQzgQNDVCiH3xnbztmNKbCzyTiJ31 EmchMo1z5lcfHHxJpbtn9t4kTy7GOY3gyg== -----END CERTIFICATE-----Generated at Thu Feb 19 07:18:51 2026 by rpki-client