$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer File: 538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer (raw, json) Hash identifier: 486V9f6Fj1q6wIstfBtiv5EcFCXzozj9vfdVtn/PQ7I= Subject key identifier: 53:8C:53:08:A8:AF:2D:42:0C:B9:AC:81:63:C6:06:D4:3D:3A:81:56 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3CA1426EEBDFA6256A908787A5EFD05F9CCE6A2C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 02:45:39 +0000 Certificate not after: Wed 27 Jan 2027 02:50:39 +0000 Subordinate resources: AS: 266682 IP: 45.228.76.0/22 IP: 2803:4520::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Feb 2026 22:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a1:42:6e:eb:df:a6:25:6a:90:87:87:a5:ef:d0:5f:9c:ce:6a:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 02:45:39 2026 GMT Not After : Jan 27 02:50:39 2027 GMT Subject: CN=538C5308A8AF2D420CB9AC8163C606D43D3A8156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:74:f0:1c:6f:0b:d7:1e:83:4e:4e:44:ac:13: 74:5f:04:07:5c:73:ca:8f:95:cc:ef:18:81:89:ae: 25:2b:77:d5:58:73:3c:7a:36:32:a5:9b:f2:eb:f8: 56:0e:11:d1:60:9e:7b:1a:40:a1:34:cc:63:c6:16: 28:e9:da:7c:5c:cf:a8:a2:cd:1d:fc:fb:41:e4:c9: e3:15:f6:b1:53:9a:12:de:1f:4a:a1:b8:40:46:e0: 23:db:47:ce:78:60:27:9b:31:84:06:d5:ba:a3:74: 20:ff:65:92:f8:56:f0:f1:62:1b:f3:a7:c2:ab:14: be:3e:84:7e:6d:75:76:a3:a1:93:c8:55:07:3f:90: cd:aa:0e:67:41:0c:02:81:6b:dc:f5:e7:8b:df:6a: dd:ab:de:0d:16:4a:ec:57:dd:3d:20:f2:ed:87:70: 4d:90:75:35:34:4c:df:80:a1:ac:80:5b:31:b9:d3: f9:12:b2:a8:0c:0d:94:0b:eb:48:95:ed:72:bb:d0: d1:bd:a0:e2:c9:c2:13:68:50:77:84:e7:39:1f:13: 73:55:34:28:c4:e2:19:00:e6:32:ff:05:a7:b5:b5: 00:2e:42:64:1a:72:e3:70:06:1b:5b:5e:2e:3b:de: ba:85:8d:3e:4b:20:0a:77:99:74:29:ae:a0:70:a2: b0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:8C:53:08:A8:AF:2D:42:0C:B9:AC:81:63:C6:06:D4:3D:3A:81:56 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.228.76.0/22 IPv6: 2803:4520::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266682 Signature Algorithm: sha256WithRSAEncryption 20:0e:1f:be:d0:9d:c8:8a:b0:0b:d3:e5:93:5a:4d:c1:6a:76: 9b:86:b7:b2:86:10:93:a2:ab:c7:27:bd:30:07:7c:67:12:54: 8a:6a:3a:0b:61:ad:b2:01:7e:92:c3:74:37:9e:16:fe:95:07: cb:02:8a:76:a1:d7:7c:30:a3:d0:2a:64:4f:c3:60:f5:5d:50: c4:8c:9b:7b:89:7e:86:0b:1c:af:09:44:8a:87:ea:a1:f5:9e: bf:5f:b4:aa:2a:e2:86:bd:f1:a7:48:48:ff:72:a6:4d:fd:eb: 3b:2b:14:97:46:cd:ef:ab:be:05:98:7a:14:b5:80:8d:6a:33: 0d:b2:21:cf:f2:43:c9:8b:35:ef:06:87:28:0d:2f:17:c6:9a: 8b:ed:88:ae:b6:11:f4:8c:02:95:29:eb:43:80:3d:51:97:a4: 18:ac:fc:d7:d7:0b:4b:17:af:e8:04:77:6b:98:49:96:b5:dd: 23:fb:df:f5:37:0b:21:4e:8e:04:d0:f2:93:a0:d6:42:d4:6f: 3d:0b:07:e6:eb:16:59:3b:9f:75:7f:93:7d:a8:64:17:24:e3: 9e:eb:c5:2a:c0:56:f5:09:f0:f0:72:a7:68:71:d9:36:66:35: 41:45:da:29:27:d5:34:11:26:64:fe:d8:33:97:91:af:22:26: 86:e0:7b:f0 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUPKFCbuvfpiVqkIeHpe/QX5zOaiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwMjQ1MzlaFw0yNzAxMjcwMjUwMzlaMDMxMTAvBgNV BAMTKDUzOEM1MzA4QThBRjJENDIwQ0I5QUM4MTYzQzYwNkQ0M0QzQTgxNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcdPAcbwvXHoNOTkSsE3RfBAdc c8qPlczvGIGJriUrd9VYczx6NjKlm/Lr+FYOEdFgnnsaQKE0zGPGFijp2nxcz6ii zR38+0HkyeMV9rFTmhLeH0qhuEBG4CPbR854YCebMYQG1bqjdCD/ZZL4VvDxYhvz p8KrFL4+hH5tdXajoZPIVQc/kM2qDmdBDAKBa9z154vfat2r3g0WSuxX3T0g8u2H cE2QdTU0TN+AoayAWzG50/kSsqgMDZQL60iV7XK70NG9oOLJwhNoUHeE5zkfE3NV NCjE4hkA5jL/Bae1tQAuQmQacuNwBhtbXi473rqFjT5LIAp3mXQprqBworCpAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRTjFMIqK8tQgy5 rIFjxgbUPTqBVjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRUExMUY5MzA1ODI2RDM2MzM0RTQ0RDEz MTM2M0JFQ0UxNTlGNUJGMDUyQjIxRDQ1MzcyM0QzNTU1MUE0MENCOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FQTExRjkzMDU4MjZEMzYzMzRFNDREMTMxMzYzQkVDRTE1OUY1QkYwNTJC MjFENDUzNzIzRDM1NTUxQTQwQ0I5LzAvNTM4QzUzMDhBOEFGMkQ0MjBDQjlBQzgx NjNDNjA2RDQzRDNBODE1Ni5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLeRMMA0EAgAC MAcDBQAoA0UgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQRujANBgkqhkiG9w0B AQsFAAOCAQEAIA4fvtCdyIqwC9Plk1pNwWp2m4a3soYQk6Krxye9MAd8ZxJUimo6 C2GtsgF+ksN0N54W/pUHywKKdqHXfDCj0CpkT8Ng9V1QxIybe4l+hgscrwlEiofq ofWev1+0qirihr3xp0hI/3KmTf3rOysUl0bN76u+BZh6FLWAjWozDbIhz/JDyYs1 7waHKA0vF8aai+2IrrYR9IwClSnrQ4A9UZekGKz819cLSxev6AR3a5hJlrXdI/vf 9TcLIU6OBNDyk6DWQtRvPQsH5usWWTufdX+TfahkFyTjnuvFKsBW9Qnw8HKnaHHZ NmY1QUXaKSfVNBEmZP7YM5eRryImhuB78A== -----END CERTIFICATE-----Generated at Wed Feb 18 22:49:48 2026 by rpki-client