$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/648541E68129C9782F979C83A78D0CB38FE6503F.cer File: 648541E68129C9782F979C83A78D0CB38FE6503F.cer (raw, json) Hash identifier: BmaknTAv6o0ojoHAnxIa73gm3cU9VtaP8xbO5j0USjg= Subject key identifier: 64:85:41:E6:81:29:C9:78:2F:97:9C:83:A7:8D:0C:B3:8F:E6:50:3F Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 180498B88FB2C377762E1AEC8B578602A956DFE1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FEA8BC4FB7E4D885452244FC4CA3C0BF4C7E20297CF952A609DE0B01EB80DB63/0/648541E68129C9782F979C83A78D0CB38FE6503F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FEA8BC4FB7E4D885452244FC4CA3C0BF4C7E20297CF952A609DE0B01EB80DB63/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 14:29:22 +0000 Certificate not after: Wed 27 Jan 2027 14:34:22 +0000 Subordinate resources: AS: 52238 IP: 190.99.72.0/21 IP: 2803:7260::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:04:98:b8:8f:b2:c3:77:76:2e:1a:ec:8b:57:86:02:a9:56:df:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 14:29:22 2026 GMT Not After : Jan 27 14:34:22 2027 GMT Subject: CN=648541E68129C9782F979C83A78D0CB38FE6503F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:33:01:b5:49:3f:03:1f:9d:2f:6d:62:80:ee: 4a:83:27:59:6a:2e:5b:7a:ca:f6:ce:55:a7:df:ea: 45:cb:2c:62:d0:35:30:bd:3f:e9:2f:8d:0d:71:8b: 4d:76:e3:21:96:40:51:fe:c0:47:ab:a4:18:f4:fc: ce:b0:a8:96:26:85:bc:c8:a4:06:8a:70:af:d7:f8: f6:1a:df:14:26:a7:51:75:e7:25:5c:7f:31:ea:bc: 47:0c:a8:c6:ea:01:87:b6:70:63:90:35:0c:97:f0: c1:1e:d2:cd:e3:ba:4d:54:a5:f2:06:e4:2b:e6:db: ab:7d:74:9a:4c:40:f8:35:d8:ff:5f:ba:03:bb:c1: 6f:14:a3:8a:34:d1:3c:d2:c2:d1:06:c0:09:7a:54: 00:9f:38:fb:61:58:ba:3e:4a:7f:e4:19:8e:5b:be: 8a:88:f7:f3:a8:b5:a1:e4:5a:de:e9:57:b7:d7:bd: e2:ee:a5:5b:84:2e:f1:75:92:be:e3:db:c2:71:97: ec:81:95:8c:2e:71:17:44:ea:af:ff:18:28:10:d6: 1d:e6:35:74:f5:23:23:80:da:d1:8f:ef:0a:03:ce: 2d:7d:b9:41:47:87:e5:f6:1b:63:3d:2e:40:75:50: 8c:dc:5e:db:a5:15:2a:bd:93:53:86:34:24:e0:d0: 47:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 64:85:41:E6:81:29:C9:78:2F:97:9C:83:A7:8D:0C:B3:8F:E6:50:3F X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FEA8BC4FB7E4D885452244FC4CA3C0BF4C7E20297CF952A609DE0B01EB80DB63/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FEA8BC4FB7E4D885452244FC4CA3C0BF4C7E20297CF952A609DE0B01EB80DB63/0/648541E68129C9782F979C83A78D0CB38FE6503F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.99.72.0/21 IPv6: 2803:7260::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52238 Signature Algorithm: sha256WithRSAEncryption 62:35:04:1a:94:37:35:34:ce:65:9b:2c:1a:67:c6:77:be:f3: a5:30:51:4c:51:9c:b2:0b:b0:9e:06:a7:b2:6f:3a:47:07:8e: c2:2c:13:4f:b9:ca:3f:63:28:af:24:cf:b6:66:03:c7:f9:76: 73:09:ac:42:40:cc:73:1a:2f:0a:e1:3e:60:05:61:fb:b2:97: 44:33:76:bf:49:5d:58:16:0f:ab:5d:5b:76:95:eb:29:10:db: 5e:c2:cc:fb:5b:85:3a:2d:ca:a4:77:11:e7:8b:f2:a8:b1:65: b1:a6:48:8a:0f:0b:c8:ab:9f:f9:e1:0f:3a:f2:ec:62:29:96: de:18:14:97:32:d1:a1:58:aa:72:80:b2:d6:70:0d:4b:18:38: 8e:eb:fb:ed:3e:d1:88:c1:55:4a:41:53:7a:f4:6e:b4:d9:58: a0:91:d1:74:f5:3c:4b:1c:1b:d8:31:c9:b6:8b:b7:e9:d9:8e: 1b:01:1b:a0:f7:93:fe:d6:11:3d:23:04:c4:b5:7c:b2:9d:5d: 95:c4:29:1f:29:db:df:5e:4f:df:7f:62:87:04:f6:ab:c6:12: a8:27:ea:cd:b2:92:14:c3:ef:a2:c4:fc:d6:9c:0a:81:ed:6f: 8d:e2:ec:33:c4:b1:16:7b:f2:0c:4b:8a:e2:5c:97:07:c5:bc: 3a:f4:54:8b -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUGASYuI+yw3d2Lhrsi1eGAqlW3+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNDI5MjJaFw0yNzAxMjcxNDM0MjJaMDMxMTAvBgNV BAMTKDY0ODU0MUU2ODEyOUM5NzgyRjk3OUM4M0E3OEQwQ0IzOEZFNjUwM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6MwG1ST8DH50vbWKA7kqDJ1lq Llt6yvbOVaff6kXLLGLQNTC9P+kvjQ1xi0124yGWQFH+wEerpBj0/M6wqJYmhbzI pAaKcK/X+PYa3xQmp1F15yVcfzHqvEcMqMbqAYe2cGOQNQyX8MEe0s3juk1UpfIG 5Cvm26t9dJpMQPg12P9fugO7wW8Uo4o00TzSwtEGwAl6VACfOPthWLo+Sn/kGY5b voqI9/OotaHkWt7pV7fXveLupVuELvF1kr7j28Jxl+yBlYwucRdE6q//GCgQ1h3m NXT1IyOA2tGP7woDzi19uUFHh+X2G2M9LkB1UIzcXtulFSq9k1OGNCTg0EenAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRkhUHmgSnJeC+X nIOnjQyzj+ZQPzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkVBOEJDNEZCN0U0RDg4NTQ1MjI0NEZD NENBM0MwQkY0QzdFMjAyOTdDRjk1MkE2MDlERTBCMDFFQjgwREI2My8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GRUE4QkM0RkI3RTREODg1NDUyMjQ0RkM0Q0EzQzBCRjRDN0UyMDI5N0NG OTUyQTYwOURFMEIwMUVCODBEQjYzLzAvNjQ4NTQxRTY4MTI5Qzk3ODJGOTc5Qzgz QTc4RDBDQjM4RkU2NTAzRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDvmNIMA0EAgAC MAcDBQAoA3JgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMDjANBgkqhkiG9w0B AQsFAAOCAQEAYjUEGpQ3NTTOZZssGmfGd77zpTBRTFGcsguwngansm86RweOwiwT T7nKP2MoryTPtmYDx/l2cwmsQkDMcxovCuE+YAVh+7KXRDN2v0ldWBYPq11bdpXr KRDbXsLM+1uFOi3KpHcR54vyqLFlsaZIig8LyKuf+eEPOvLsYimW3hgUlzLRoViq coCy1nANSxg4juv77T7RiMFVSkFTevRutNlYoJHRdPU8Sxwb2DHJtou36dmOGwEb oPeT/tYRPSMExLV8sp1dlcQpHynb315P339ihwT2q8YSqCfqzbKSFMPvosT81pwK ge1vjeLsM8SxFnvyDEuK4lyXB8W8OvRUiw== -----END CERTIFICATE-----Generated at Thu Feb 19 04:20:12 2026 by rpki-client