$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/371E5A26C210869532E000462FB1803BC6DD1E13.cer File: 371E5A26C210869532E000462FB1803BC6DD1E13.cer (raw, json) Hash identifier: yXYdL30GAb+KnvPULWK/PlAPVqE55QuOPUfjRK4tZaU= Subject key identifier: 37:1E:5A:26:C2:10:86:95:32:E0:00:46:2F:B1:80:3B:C6:DD:1E:13 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 70122E92A86C429524F2BC1F014FDB0123D08E4C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D7A76DF03DD179CFDB0ACA39A787CB581CAA3E30F4BC947868C5F46428A2A22C/0/371E5A26C210869532E000462FB1803BC6DD1E13.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D7A76DF03DD179CFDB0ACA39A787CB581CAA3E30F4BC947868C5F46428A2A22C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 17:59:01 +0000 Certificate not after: Wed 27 Jan 2027 18:04:01 +0000 Subordinate resources: AS: 264812 IP: 170.238.108.0/22 IP: 2803:acc0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:12:2e:92:a8:6c:42:95:24:f2:bc:1f:01:4f:db:01:23:d0:8e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 17:59:01 2026 GMT Not After : Jan 27 18:04:01 2027 GMT Subject: CN=371E5A26C210869532E000462FB1803BC6DD1E13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d8:0d:57:ca:13:36:d3:06:f2:86:bd:14:24: cf:7e:d8:78:4f:3d:48:9e:ab:f6:b2:31:36:33:d4: 37:ad:f6:69:49:c0:2e:1f:fa:d1:c5:d0:50:82:2a: 38:74:7e:dd:e3:40:8c:36:9a:0e:f1:ce:d9:04:5a: 59:70:af:ce:0e:b4:fe:07:f4:a0:a0:56:7a:86:17: f3:29:62:30:bf:2a:6d:69:7b:42:92:42:89:3e:74: ed:1e:6e:2d:40:15:10:66:8f:69:fc:f1:34:d8:05: d9:0d:da:82:31:b3:68:0a:a7:02:d7:74:9d:77:5e: 92:5c:b4:0d:04:d2:ee:1b:fa:b4:46:c7:ae:ae:ab: 8b:db:19:ad:6f:3f:8b:87:99:cb:3c:31:ff:1d:94: 81:a9:4d:a3:d7:52:16:d4:da:85:a5:1c:41:56:26: 5b:9e:6a:a9:0e:3f:79:7d:31:35:fd:16:e9:66:ad: fc:b0:4f:2d:d0:db:66:d5:c0:bf:76:83:5d:2a:cc: 2f:c7:72:a1:ba:dc:e5:6e:62:9b:7d:b5:1c:1d:71: 4d:46:17:de:50:8c:88:99:12:25:39:79:ec:a1:f1: c7:6f:53:16:a0:ce:0e:93:a5:f7:1f:86:18:d9:ba: 54:64:5a:56:74:ad:4d:a2:b3:b2:bd:29:cc:11:c6: 45:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 37:1E:5A:26:C2:10:86:95:32:E0:00:46:2F:B1:80:3B:C6:DD:1E:13 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D7A76DF03DD179CFDB0ACA39A787CB581CAA3E30F4BC947868C5F46428A2A22C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D7A76DF03DD179CFDB0ACA39A787CB581CAA3E30F4BC947868C5F46428A2A22C/0/371E5A26C210869532E000462FB1803BC6DD1E13.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.238.108.0/22 IPv6: 2803:acc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264812 Signature Algorithm: sha256WithRSAEncryption 58:21:f4:ce:96:95:41:dd:d8:65:6d:1a:d5:bc:7b:5f:b0:48: 5d:06:2b:79:6e:ba:59:ee:df:40:21:00:54:74:97:1b:f9:8c: ad:4b:4f:88:12:ee:01:71:0a:0c:95:ad:86:ef:cc:57:d2:38: db:a4:08:0b:c4:f6:b9:39:1e:d3:69:10:97:23:d2:dc:07:09: 9d:e3:53:0c:bf:e6:51:6e:81:d2:93:9c:23:e3:9d:ae:cf:bc: 74:0e:48:72:d4:4d:e3:ed:75:dc:e3:72:7f:aa:b7:55:ed:c3: 28:a5:b0:13:e7:b4:e7:94:59:a0:50:0a:a5:92:b8:c4:d9:f3: 39:3e:9e:b5:a4:5b:52:dd:36:70:9a:55:bf:80:cb:2a:39:3d: 5c:13:54:77:5a:ab:da:50:59:16:b8:43:d3:65:4d:82:6b:c3: ce:59:c2:52:4e:1a:86:7f:d2:d9:50:6b:5e:d8:b4:ba:c9:c7: 46:d2:ee:10:a9:2c:10:93:c3:06:3d:2b:df:9c:23:d7:0e:d7: e0:69:28:7a:d9:ff:f3:6b:6e:71:d1:23:cd:a7:7c:25:08:ea: 30:8b:d2:f2:a6:7b:ff:12:b5:77:72:49:e3:08:9c:de:2a:5c: e7:02:91:47:24:dc:a3:f5:44:1d:cd:77:59:45:30:47:75:53: b2:dc:da:bc -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUcBIukqhsQpUk8rwfAU/bASPQjkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNzU5MDFaFw0yNzAxMjcxODA0MDFaMDMxMTAvBgNV BAMTKDM3MUU1QTI2QzIxMDg2OTUzMkUwMDA0NjJGQjE4MDNCQzZERDFFMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt2A1XyhM20wbyhr0UJM9+2HhP PUieq/ayMTYz1Det9mlJwC4f+tHF0FCCKjh0ft3jQIw2mg7xztkEWllwr84OtP4H 9KCgVnqGF/MpYjC/Km1pe0KSQok+dO0ebi1AFRBmj2n88TTYBdkN2oIxs2gKpwLX dJ13XpJctA0E0u4b+rRGx66uq4vbGa1vP4uHmcs8Mf8dlIGpTaPXUhbU2oWlHEFW JlueaqkOP3l9MTX9FulmrfywTy3Q22bVwL92g10qzC/HcqG63OVuYpt9tRwdcU1G F95QjIiZEiU5eeyh8cdvUxagzg6TpfcfhhjZulRkWlZ0rU2is7K9KcwRxkULAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ3HlomwhCGlTLg AEYvsYA7xt0eEzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDdBNzZERjAzREQxNzlDRkRCMEFDQTM5 QTc4N0NCNTgxQ0FBM0UzMEY0QkM5NDc4NjhDNUY0NjQyOEEyQTIyQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EN0E3NkRGMDNERDE3OUNGREIwQUNBMzlBNzg3Q0I1ODFDQUEzRTMwRjRC Qzk0Nzg2OEM1RjQ2NDI4QTJBMjJDLzAvMzcxRTVBMjZDMjEwODY5NTMyRTAwMDQ2 MkZCMTgwM0JDNkREMUUxMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqu5sMA0EAgAC MAcDBQAoA6zAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQKbDANBgkqhkiG9w0B AQsFAAOCAQEAWCH0zpaVQd3YZW0a1bx7X7BIXQYreW66We7fQCEAVHSXG/mMrUtP iBLuAXEKDJWthu/MV9I426QIC8T2uTke02kQlyPS3AcJneNTDL/mUW6B0pOcI+Od rs+8dA5IctRN4+113ONyf6q3Ve3DKKWwE+e055RZoFAKpZK4xNnzOT6etaRbUt02 cJpVv4DLKjk9XBNUd1qr2lBZFrhD02VNgmvDzlnCUk4ahn/S2VBrXti0usnHRtLu EKksEJPDBj0r35wj1w7X4Gkoetn/82tucdEjzad8JQjqMIvS8qZ7/xK1d3JJ4wic 3ipc5wKRRyTco/VEHc13WUUwR3VTstzavA== -----END CERTIFICATE-----Generated at Thu Feb 19 15:53:46 2026 by rpki-client