$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer File: 3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer (raw, json) Hash identifier: Ellx6VSYoibY57RfXe9Z7tz4XqjZ3++DzvsHU/+ns6Y= Subject key identifier: 3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 78381FDA0082A4C2FC743548F02E59EC61CA943A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 03:05:20 +0000 Certificate not after: Wed 27 Jan 2027 03:10:20 +0000 Subordinate resources: AS: 266837 IP: 45.238.12.0/22 IP: 2803:6ca0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:38:1f:da:00:82:a4:c2:fc:74:35:48:f0:2e:59:ec:61:ca:94:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 03:05:20 2026 GMT Not After : Jan 27 03:10:20 2027 GMT Subject: CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e5:1b:4b:32:55:d1:38:ad:9e:15:2e:66:78: 1b:94:54:74:bb:d6:1d:e5:59:3a:95:4a:b8:72:52: a4:fd:5a:3a:3a:8c:1b:c9:20:b8:65:79:d7:42:83: 4c:be:c9:32:66:db:c9:70:14:98:0b:2c:bb:ae:0d: a2:da:a5:ef:3c:af:c4:ce:6d:93:f8:6e:6e:c5:a9: 59:e5:9f:0c:ed:56:a0:4a:32:89:69:99:f2:4f:76: 29:c5:4a:16:bb:ad:9e:f9:74:a8:58:87:28:69:5a: 95:25:d7:92:94:66:22:0a:55:ee:c3:76:b5:60:af: 5f:1f:9e:7e:38:de:12:90:54:48:13:58:ee:ff:0a: 67:47:d3:0c:0d:d7:15:7d:2b:20:5e:14:da:7b:44: 49:16:83:57:2e:3f:b5:25:11:25:6d:9b:3e:45:87: 8d:2d:98:25:17:6f:5b:98:0c:77:a5:1b:c4:4a:df: 4f:88:f6:50:8e:05:95:e4:d1:f2:b0:a7:c7:3a:7c: 4b:5d:dc:5b:58:79:e8:e0:ce:83:af:d9:37:f0:9f: 95:36:95:98:85:1d:aa:e7:25:ce:ea:d1:7d:9e:5d: 16:4b:30:24:2d:84:06:4e:c7:fe:3a:1e:71:de:cb: 0a:10:44:ea:04:a2:15:85:f4:b3:19:7c:9a:98:93: e2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.238.12.0/22 IPv6: 2803:6ca0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266837 Signature Algorithm: sha256WithRSAEncryption 4e:b7:26:8b:ea:98:ff:67:b8:10:f0:b2:d3:16:16:56:c2:8b: 95:64:01:41:14:70:e4:38:b1:ca:ed:34:b1:f2:fe:8b:71:f0: 9f:10:e4:40:25:76:a6:90:df:c6:8d:8f:0e:5a:3c:64:53:ae: 8f:c1:c4:44:3b:08:37:18:ca:f8:48:30:c2:34:be:46:57:ae: 20:15:34:13:03:7f:33:ad:73:db:9f:e8:f8:46:6f:0e:40:df: 86:f3:d2:92:aa:50:c4:c6:1d:ac:ef:bb:7b:fd:66:4e:56:e4: 44:d0:3a:e0:86:09:70:f2:cc:68:aa:37:3f:28:e3:bc:f5:20: 93:05:21:50:cd:09:8e:78:8a:9b:30:d1:ce:a8:32:4b:93:9f: 38:a7:3e:ac:f4:2e:fa:94:02:e0:90:06:ba:5a:5d:90:9d:26: a3:64:cb:ce:13:db:0a:6d:14:cd:33:0d:b2:59:2a:fd:81:25: c0:4c:de:31:c8:ae:bb:63:47:95:8d:d4:be:c4:2d:ee:bd:d0: 3b:6c:3f:67:91:4c:d7:bf:4b:5c:06:b4:69:e6:e5:86:a4:80: 56:09:9a:21:af:16:95:ff:a6:14:de:af:c8:2c:e1:44:86:6a: 8b:f4:a4:0f:b8:49:cf:ac:9a:37:39:16:a3:6f:bb:87:cf:22: 61:ab:5c:3d -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUeDgf2gCCpML8dDVI8C5Z7GHKlDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwMzA1MjBaFw0yNzAxMjcwMzEwMjBaMDMxMTAvBgNV BAMTKDNBMkMzREUzOURFREJBNTIyNUVBN0ZFQkMyODkzMzEyMEFCOTM2MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/5RtLMlXROK2eFS5meBuUVHS7 1h3lWTqVSrhyUqT9Wjo6jBvJILhleddCg0y+yTJm28lwFJgLLLuuDaLape88r8TO bZP4bm7FqVnlnwztVqBKMolpmfJPdinFSha7rZ75dKhYhyhpWpUl15KUZiIKVe7D drVgr18fnn443hKQVEgTWO7/CmdH0wwN1xV9KyBeFNp7REkWg1cuP7UlESVtmz5F h40tmCUXb1uYDHelG8RK30+I9lCOBZXk0fKwp8c6fEtd3FtYeejgzoOv2Tfwn5U2 lZiFHarnJc7q0X2eXRZLMCQthAZOx/46HnHeywoQROoEohWF9LMZfJqYk+K3AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ6LD3jne26UiXq f+vCiTMSCrk2GzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjNGMDgyMzJCRjUwMjE5NEUzQTJFNDAx MURCNDgzREQ3QkY0OEM4NDY1NzQxODBGNEVFQjUxN0VBOTE4M0YzMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yM0YwODIzMkJGNTAyMTk0RTNBMkU0MDExREI0ODNERDdCRjQ4Qzg0NjU3 NDE4MEY0RUVCNTE3RUE5MTgzRjMwLzAvM0EyQzNERTM5REVEQkE1MjI1RUE3RkVC QzI4OTMzMTIwQUI5MzYxQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLe4MMA0EAgAC MAcDBQAoA2ygMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQSVTANBgkqhkiG9w0B AQsFAAOCAQEATrcmi+qY/2e4EPCy0xYWVsKLlWQBQRRw5Dixyu00sfL+i3HwnxDk QCV2ppDfxo2PDlo8ZFOuj8HERDsINxjK+EgwwjS+RleuIBU0EwN/M61z25/o+EZv DkDfhvPSkqpQxMYdrO+7e/1mTlbkRNA64IYJcPLMaKo3PyjjvPUgkwUhUM0JjniK mzDRzqgyS5OfOKc+rPQu+pQC4JAGulpdkJ0mo2TLzhPbCm0UzTMNslkq/YElwEze Mciuu2NHlY3UvsQt7r3QO2w/Z5FM179LXAa0aeblhqSAVgmaIa8Wlf+mFN6vyCzh RIZqi/SkD7hJz6yaNzkWo2+7h88iYatcPQ== -----END CERTIFICATE-----Generated at Thu Feb 19 11:45:45 2026 by rpki-client