$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E4116CCBE654DC11AAAE503A49C372DC9517AF2.cer File: 3E4116CCBE654DC11AAAE503A49C372DC9517AF2.cer (raw, json) Hash identifier: pssrWgMijNl6lncr6uR4L3BbiNoZG60hLfm4U6N/w5o= Subject key identifier: 3E:41:16:CC:BE:65:4D:C1:1A:AA:E5:03:A4:9C:37:2D:C9:51:7A:F2 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 5F75297A87C29A7DE78D5339E48CEFA140025513 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/03BDF702614678E9C2C05FF5C9BAC60024A40FC97898AAC06449F68E3F4C7260/0/3E4116CCBE654DC11AAAE503A49C372DC9517AF2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/03BDF702614678E9C2C05FF5C9BAC60024A40FC97898AAC06449F68E3F4C7260/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 21:03:57 +0000 Certificate not after: Tue 26 Jan 2027 21:08:57 +0000 Subordinate resources: AS: 52495 IP: 190.103.64.0/20 IP: 190.109.224.0/19 IP: 2803:fa00::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:75:29:7a:87:c2:9a:7d:e7:8d:53:39:e4:8c:ef:a1:40:02:55:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 21:03:57 2026 GMT Not After : Jan 26 21:08:57 2027 GMT Subject: CN=3E4116CCBE654DC11AAAE503A49C372DC9517AF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:01:ce:86:fa:5e:71:c8:83:18:b1:20:0e:c2: ce:be:66:e4:89:c5:39:d5:e5:72:ef:dc:f3:f3:3f: d5:c7:61:4a:b8:1c:87:ec:27:3c:58:d5:22:5f:16: 04:63:c0:e0:21:4e:b6:49:21:e0:8e:91:22:46:13: 60:9a:8f:3a:ae:ca:74:15:1d:d9:bf:fc:c9:d7:aa: fd:ee:1d:ad:2f:b3:72:fc:7c:8e:75:0d:43:37:33: df:90:0c:66:a3:56:a1:e2:38:ea:e9:e1:df:66:28: f1:cc:3d:0c:3a:c5:95:a7:7f:02:76:10:35:ee:48: 33:29:99:70:ff:84:af:fb:73:d9:8a:6d:78:96:ef: 26:56:a2:44:0b:ad:0c:8a:08:e0:0c:2d:df:5f:af: 32:22:ed:e5:d3:56:00:11:bf:48:f4:3f:b0:f9:24: ed:07:05:cc:c8:41:0a:d7:44:81:f8:fe:58:f0:a1: f4:3d:7f:75:fe:23:d3:4a:cd:09:e5:1d:b8:91:e1: 9c:88:03:6c:83:76:4e:9b:0a:29:4a:a7:70:94:8b: 90:94:ea:39:c9:09:aa:d5:c6:51:e2:e1:d3:42:49: 53:ef:ad:f3:31:df:f0:74:11:94:74:6c:fa:af:c3: 36:d6:80:f2:83:2a:1e:b5:6a:39:59:db:77:24:7e: 1f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3E:41:16:CC:BE:65:4D:C1:1A:AA:E5:03:A4:9C:37:2D:C9:51:7A:F2 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/03BDF702614678E9C2C05FF5C9BAC60024A40FC97898AAC06449F68E3F4C7260/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/03BDF702614678E9C2C05FF5C9BAC60024A40FC97898AAC06449F68E3F4C7260/0/3E4116CCBE654DC11AAAE503A49C372DC9517AF2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.103.64.0/20 190.109.224.0/19 IPv6: 2803:fa00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52495 Signature Algorithm: sha256WithRSAEncryption 84:43:a9:18:38:15:52:d9:5e:8b:24:79:2a:04:ee:43:54:76: a4:89:ac:3a:ae:ad:16:98:ca:21:40:0d:68:bf:c6:5e:dc:81: 2d:51:4f:22:fc:d9:11:45:14:21:bb:03:54:da:4a:8a:bc:3c: 89:4a:9b:ef:e3:37:b5:6b:a8:8f:a6:d7:57:2b:f4:88:ba:88: 9a:ef:a2:1f:e1:9b:2b:ca:34:26:e6:7a:91:d4:2f:93:e7:a8: 0d:a3:6f:9e:71:85:ba:41:42:aa:6f:cc:64:a5:c8:7c:d1:fa: 52:5b:a1:ac:8a:93:bd:bd:4a:7b:f8:c6:3b:78:4f:f8:7c:45: d0:19:2f:f2:6a:db:4b:87:46:78:d1:54:11:33:b6:84:e1:63: b5:87:e2:c1:59:98:ed:d0:a8:f6:3a:7f:f2:31:dd:4e:4d:26: a8:4b:ca:a2:1c:c8:9a:2c:9e:42:2e:fd:78:6e:e2:9c:d1:2a: 4f:b8:db:bc:16:6a:52:4e:ff:0b:b2:0e:51:69:1f:11:81:ac: 8a:5d:42:a8:d3:41:c0:f1:48:88:c6:01:32:be:6a:91:e1:6b: ae:14:23:fd:46:de:a4:99:cf:8f:f2:52:1d:9b:75:85:c7:03: 90:8d:d3:23:56:b5:56:72:4a:58:df:ff:bc:cd:d0:48:65:86: 48:fc:1a:ec -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUX3UpeofCmn3njVM55IzvoUACVRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMTAzNTdaFw0yNzAxMjYyMTA4NTdaMDMxMTAvBgNV BAMTKDNFNDExNkNDQkU2NTREQzExQUFBRTUwM0E0OUMzNzJEQzk1MTdBRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Ac6G+l5xyIMYsSAOws6+ZuSJ xTnV5XLv3PPzP9XHYUq4HIfsJzxY1SJfFgRjwOAhTrZJIeCOkSJGE2CajzquynQV Hdm//MnXqv3uHa0vs3L8fI51DUM3M9+QDGajVqHiOOrp4d9mKPHMPQw6xZWnfwJ2 EDXuSDMpmXD/hK/7c9mKbXiW7yZWokQLrQyKCOAMLd9frzIi7eXTVgARv0j0P7D5 JO0HBczIQQrXRIH4/ljwofQ9f3X+I9NKzQnlHbiR4ZyIA2yDdk6bCilKp3CUi5CU 6jnJCarVxlHi4dNCSVPvrfMx3/B0EZR0bPqvwzbWgPKDKh61ajlZ23ckfh8rAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+QRbMvmVNwRqq 5QOknDctyVF68jAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDNCREY3MDI2MTQ2NzhFOUMyQzA1RkY1 QzlCQUM2MDAyNEE0MEZDOTc4OThBQUMwNjQ0OUY2OEUzRjRDNzI2MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wM0JERjcwMjYxNDY3OEU5QzJDMDVGRjVDOUJBQzYwMDI0QTQwRkM5Nzg5 OEFBQzA2NDQ5RjY4RTNGNEM3MjYwLzAvM0U0MTE2Q0NCRTY1NERDMTFBQUFFNTAz QTQ5QzM3MkRDOTUxN0FGMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEvmdAAwQFvm3g MA0EAgACMAcDBQAoA/oAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDNDzANBgkq hkiG9w0BAQsFAAOCAQEAhEOpGDgVUtleiyR5KgTuQ1R2pImsOq6tFpjKIUANaL/G XtyBLVFPIvzZEUUUIbsDVNpKirw8iUqb7+M3tWuoj6bXVyv0iLqImu+iH+GbK8o0 JuZ6kdQvk+eoDaNvnnGFukFCqm/MZKXIfNH6UluhrIqTvb1Ke/jGO3hP+HxF0Bkv 8mrbS4dGeNFUETO2hOFjtYfiwVmY7dCo9jp/8jHdTk0mqEvKohzImiyeQi79eG7i nNEqT7jbvBZqUk7/C7IOUWkfEYGsil1CqNNBwPFIiMYBMr5qkeFrrhQj/UbepJnP j/JSHZt1hccDkI3TI1a1VnJKWN//vM3QSGWGSPwa7A== -----END CERTIFICATE-----Generated at Thu Feb 19 03:07:30 2026 by rpki-client