$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38BB77D54066782A688F0637FD2B6B6CEF74FC3E.cer File: 38BB77D54066782A688F0637FD2B6B6CEF74FC3E.cer (raw, json) Hash identifier: re5wK3gL6NE+P+gHKvjMOzkVnQnxFTuK+JhEoiMGGro= Subject key identifier: 38:BB:77:D5:40:66:78:2A:68:8F:06:37:FD:2B:6B:6C:EF:74:FC:3E Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 5891E121DA3CE3464D67C47EDA413EF574330299 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/01BB6E0FC87B834BAF2BA2E1225203397532F5ACA15D9122BB347346F7D6E288/0/38BB77D54066782A688F0637FD2B6B6CEF74FC3E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/01BB6E0FC87B834BAF2BA2E1225203397532F5ACA15D9122BB347346F7D6E288/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 15:06:28 +0000 Certificate not after: Wed 27 Jan 2027 15:11:28 +0000 Subordinate resources: AS: 267829 IP: 45.174.148.0/22 IP: 2803:7860::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:91:e1:21:da:3c:e3:46:4d:67:c4:7e:da:41:3e:f5:74:33:02:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 15:06:28 2026 GMT Not After : Jan 27 15:11:28 2027 GMT Subject: CN=38BB77D54066782A688F0637FD2B6B6CEF74FC3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4c:ad:f7:27:68:38:dc:bc:42:2c:e6:2d:88: 0b:0d:31:9f:8b:25:24:0e:23:e6:89:33:53:0b:b7: b8:a7:de:a8:a0:07:16:4a:47:e5:ca:1b:bd:9f:c2: 20:17:53:71:eb:38:ab:58:82:8a:e4:06:4e:69:90: a1:60:ce:79:19:9f:3d:f4:b8:0b:2d:39:69:1a:a1: 2d:ae:08:61:80:ea:ce:31:cf:58:1b:ae:4f:d4:0a: 3b:21:61:92:ef:63:69:33:d1:4d:c5:72:d7:2b:c3: 56:68:b2:77:d3:03:bc:6a:91:4c:9b:c5:95:be:83: 80:18:95:6e:c8:1a:f0:2c:7b:b5:cd:bd:39:a8:2e: 7f:03:d6:6d:02:c4:2f:02:96:e5:f6:e2:dd:9f:4d: e4:3e:b5:11:bc:76:6f:97:a6:84:f4:7a:6f:15:f8: b1:ca:56:0c:0d:ce:b0:2f:6a:5b:6f:2a:3d:c4:f6: 43:83:86:5f:cb:f8:ce:9b:a2:11:57:ef:60:9a:3d: a4:a2:dd:e3:a0:23:aa:73:2e:42:b6:05:25:5c:a8: 4c:0f:fb:0d:24:6f:05:5a:0c:30:67:8f:83:90:8f: 8b:bc:cd:e6:d7:f7:5a:65:b7:30:c3:0b:64:1a:db: 49:57:68:ef:3f:c8:4b:c9:7d:06:3f:50:bf:74:91: 24:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 38:BB:77:D5:40:66:78:2A:68:8F:06:37:FD:2B:6B:6C:EF:74:FC:3E X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/01BB6E0FC87B834BAF2BA2E1225203397532F5ACA15D9122BB347346F7D6E288/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/01BB6E0FC87B834BAF2BA2E1225203397532F5ACA15D9122BB347346F7D6E288/0/38BB77D54066782A688F0637FD2B6B6CEF74FC3E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.174.148.0/22 IPv6: 2803:7860::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267829 Signature Algorithm: sha256WithRSAEncryption 32:26:fd:c6:82:19:9b:e1:2f:8e:5f:0d:f0:ff:89:fd:49:93: df:4b:b2:3b:a6:3e:fd:ac:aa:7d:5a:23:70:d9:b0:81:e5:e9: d8:59:60:28:8d:ef:49:9c:99:de:44:bb:fc:5b:03:df:4f:f2: 91:0f:73:c6:ec:b2:c1:89:11:b9:85:2b:f1:1c:4e:00:41:df: 10:de:f8:8c:b3:6b:3b:83:83:f2:68:a8:8b:56:75:b8:37:f9: e7:17:e3:66:2a:94:33:70:18:c0:df:f1:68:ba:62:e8:26:e5: fb:b4:de:21:5c:1f:d9:a3:28:74:15:a3:94:d0:f1:f5:ac:2d: b0:71:f3:3b:3e:4a:78:a9:70:cd:7f:5f:d4:f3:85:c0:f6:b2: 8b:6d:d6:9f:04:f9:aa:05:ab:76:0e:a7:8c:16:cb:fe:9b:66: d0:a8:d6:a5:ba:32:41:99:26:6c:20:2d:dc:49:bc:93:11:15: 2e:08:2f:04:b6:92:83:31:f6:e5:30:e6:61:8d:e5:03:0e:49: 3e:52:3d:4c:4c:2d:8d:71:cd:76:21:3c:6f:75:57:9f:8c:6d: f0:a4:19:ec:72:c0:20:25:a6:87:18:05:db:20:ab:45:6d:44: 23:b6:78:68:99:cf:15:92:cd:d9:c3:6d:d7:b9:b0:e1:22:47: d0:a2:7c:79 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUWJHhIdo840ZNZ8R+2kE+9XQzApkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNTA2MjhaFw0yNzAxMjcxNTExMjhaMDMxMTAvBgNV BAMTKDM4QkI3N0Q1NDA2Njc4MkE2ODhGMDYzN0ZEMkI2QjZDRUY3NEZDM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTK33J2g43LxCLOYtiAsNMZ+L JSQOI+aJM1MLt7in3qigBxZKR+XKG72fwiAXU3HrOKtYgorkBk5pkKFgznkZnz30 uAstOWkaoS2uCGGA6s4xz1gbrk/UCjshYZLvY2kz0U3Fctcrw1ZosnfTA7xqkUyb xZW+g4AYlW7IGvAse7XNvTmoLn8D1m0CxC8CluX24t2fTeQ+tRG8dm+XpoT0em8V +LHKVgwNzrAvaltvKj3E9kODhl/L+M6bohFX72CaPaSi3eOgI6pzLkK2BSVcqEwP +w0kbwVaDDBnj4OQj4u8zebX91pltzDDC2Qa20lXaO8/yEvJfQY/UL90kSTvAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ4u3fVQGZ4KmiP Bjf9K2ts73T8PjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDFCQjZFMEZDODdCODM0QkFGMkJBMkUx MjI1MjAzMzk3NTMyRjVBQ0ExNUQ5MTIyQkIzNDczNDZGN0Q2RTI4OC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wMUJCNkUwRkM4N0I4MzRCQUYyQkEyRTEyMjUyMDMzOTc1MzJGNUFDQTE1 RDkxMjJCQjM0NzM0NkY3RDZFMjg4LzAvMzhCQjc3RDU0MDY2NzgyQTY4OEYwNjM3 RkQyQjZCNkNFRjc0RkMzRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLa6UMA0EAgAC MAcDBQAoA3hgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQWNTANBgkqhkiG9w0B AQsFAAOCAQEAMib9xoIZm+Evjl8N8P+J/UmT30uyO6Y+/ayqfVojcNmwgeXp2Flg KI3vSZyZ3kS7/FsD30/ykQ9zxuyywYkRuYUr8RxOAEHfEN74jLNrO4OD8mioi1Z1 uDf55xfjZiqUM3AYwN/xaLpi6Cbl+7TeIVwf2aModBWjlNDx9awtsHHzOz5KeKlw zX9f1POFwPayi23WnwT5qgWrdg6njBbL/ptm0KjWpboyQZkmbCAt3Em8kxEVLggv BLaSgzH25TDmYY3lAw5JPlI9TEwtjXHNdiE8b3VXn4xt8KQZ7HLAICWmhxgF2yCr RW1EI7Z4aJnPFZLN2cNt17mw4SJH0KJ8eQ== -----END CERTIFICATE-----Generated at Thu Feb 19 01:41:39 2026 by rpki-client