$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C3FB0581813B7EC1889FA7BA9577F4D6646516.cer File: 68C3FB0581813B7EC1889FA7BA9577F4D6646516.cer (raw, json) Hash identifier: p3PdTZstDeJrW8RSMu5kJ+CkGvbT3+bto3om6VnjXTA= Subject key identifier: 68:C3:FB:05:81:81:3B:7E:C1:88:9F:A7:BA:95:77:F4:D6:64:65:16 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 498690746867FC653CA3E3CF8C7D4E381C8B39AE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B1316F921D23257EFA35AE8DB01776F13A43CAD9276FB1E5C93DECEDEB579CDE/0/68C3FB0581813B7EC1889FA7BA9577F4D6646516.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B1316F921D23257EFA35AE8DB01776F13A43CAD9276FB1E5C93DECEDEB579CDE/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:50:47 +0000 Certificate not after: Tue 26 Jan 2027 17:55:47 +0000 Subordinate resources: AS: 27993 IP: 190.122.240.0/20 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Feb 2026 22:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:86:90:74:68:67:fc:65:3c:a3:e3:cf:8c:7d:4e:38:1c:8b:39:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:50:47 2026 GMT Not After : Jan 26 17:55:47 2027 GMT Subject: CN=68C3FB0581813B7EC1889FA7BA9577F4D6646516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ff:8f:3a:fb:b8:53:6a:04:2b:16:40:b1:1e: 9f:0a:96:fc:08:99:ca:2d:56:d7:c4:81:c2:63:7a: f9:a3:95:32:dc:d2:14:e8:c5:cc:e2:67:d8:73:d5: 43:b1:c4:e7:01:b8:c4:28:c5:2e:da:91:c4:fd:42: ca:61:b7:24:30:bc:2c:8d:e8:a5:e0:05:11:07:f7: 1b:9d:78:c9:21:24:e0:46:db:dd:99:1c:9b:e1:4b: fc:18:38:3d:98:5e:d3:33:39:95:e6:59:be:1a:27: 52:e9:a6:82:f8:de:77:78:a1:43:cb:4a:a7:f7:a1: fd:0d:e2:6d:b8:40:ab:94:dc:11:52:ac:be:6a:67: fa:2b:68:b2:46:e4:61:4c:d7:d7:61:d6:cb:12:fa: 5d:e7:82:55:6d:0f:6a:9f:60:74:b4:c3:6d:d5:45: e3:79:6e:95:59:b1:69:7e:f4:a7:f5:69:c0:58:18: 54:2f:46:60:ef:a6:31:11:2b:69:43:e6:31:df:60: 4f:f5:00:0f:75:4d:65:72:2a:b6:07:d8:10:ba:8a: fc:76:b3:13:6e:a3:6e:d3:8a:2b:c7:40:20:f2:a8: f9:aa:2c:b7:a9:91:e2:e8:46:76:1b:f6:da:cb:d3: 9e:98:e2:58:5e:64:5e:6a:56:6d:eb:8e:5e:f5:62: 6a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:C3:FB:05:81:81:3B:7E:C1:88:9F:A7:BA:95:77:F4:D6:64:65:16 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B1316F921D23257EFA35AE8DB01776F13A43CAD9276FB1E5C93DECEDEB579CDE/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B1316F921D23257EFA35AE8DB01776F13A43CAD9276FB1E5C93DECEDEB579CDE/0/68C3FB0581813B7EC1889FA7BA9577F4D6646516.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.122.240.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27993 Signature Algorithm: sha256WithRSAEncryption 14:03:9e:8f:22:f6:82:f3:51:94:b1:ed:1b:0b:9f:e2:25:f4: ef:e9:40:3e:ba:ff:3a:29:6b:8f:53:4a:61:f6:23:e8:c5:38: ba:43:94:61:97:5a:0b:d4:77:bd:95:db:c0:9f:2a:6e:31:7c: e7:8a:2a:29:7c:16:4e:9e:a5:ec:25:e2:ad:87:fd:d2:61:dc: f6:9c:28:5a:ab:31:68:01:85:d3:30:8f:db:4c:4b:45:59:c6: 4b:e0:cc:22:88:7e:1d:93:6b:fe:c9:fa:63:3f:34:d7:14:07: 68:df:f0:d1:db:65:d0:5d:1b:bb:43:07:39:25:70:9e:dc:40: 66:eb:50:33:58:70:25:5e:09:67:0f:70:86:5a:bb:17:f6:38: 11:c6:e0:26:e0:83:75:ee:95:be:04:ca:5c:aa:78:d1:dd:55: d0:2e:1f:63:0c:2c:1a:28:0d:32:c6:ce:26:7c:08:a3:e6:bc: 03:e3:b9:6f:e5:77:a9:67:c8:49:58:aa:e4:d4:6e:37:fc:76: 67:d3:18:56:79:6f:8e:7d:6c:29:c2:91:d3:27:e2:99:c9:58: 7f:13:2d:24:65:f2:3e:d4:91:34:a4:e9:0d:7e:f4:75:a1:73: 44:22:b2:28:e6:8d:57:ec:df:7b:12:aa:8a:34:3c:dc:0c:33: 85:e8:94:b9 -----BEGIN CERTIFICATE----- MIIGlTCCBX2gAwIBAgIUSYaQdGhn/GU8o+PPjH1OOByLOa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzUwNDdaFw0yNzAxMjYxNzU1NDdaMDMxMTAvBgNV BAMTKDY4QzNGQjA1ODE4MTNCN0VDMTg4OUZBN0JBOTU3N0Y0RDY2NDY1MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ/486+7hTagQrFkCxHp8KlvwI mcotVtfEgcJjevmjlTLc0hToxcziZ9hz1UOxxOcBuMQoxS7akcT9QsphtyQwvCyN 6KXgBREH9xudeMkhJOBG292ZHJvhS/wYOD2YXtMzOZXmWb4aJ1LppoL43nd4oUPL Sqf3of0N4m24QKuU3BFSrL5qZ/oraLJG5GFM19dh1ssS+l3nglVtD2qfYHS0w23V ReN5bpVZsWl+9Kf1acBYGFQvRmDvpjERK2lD5jHfYE/1AA91TWVyKrYH2BC6ivx2 sxNuo27TiivHQCDyqPmqLLepkeLoRnYb9trL056Y4lheZF5qVm3rjl71YmqxAgMB AAGjggOfMIIDmzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRow/sFgYE7fsGI n6e6lXf01mRlFjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjEzMTZGOTIxRDIzMjU3RUZBMzVBRThE QjAxNzc2RjEzQTQzQ0FEOTI3NkZCMUU1QzkzREVDRURFQjU3OUNERS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CMTMxNkY5MjFEMjMyNTdFRkEzNUFFOERCMDE3NzZGMTNBNDNDQUQ5Mjc2 RkIxRTVDOTNERUNFREVCNTc5Q0RFLzAvNjhDM0ZCMDU4MTgxM0I3RUMxODg5RkE3 QkE5NTc3RjRENjY0NjUxNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvnrwMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm1ZMA0GCSqGSIb3DQEBCwUAA4IBAQAUA56PIvaC 81GUse0bC5/iJfTv6UA+uv86KWuPU0ph9iPoxTi6Q5Rhl1oL1He9ldvAnypuMXzn iiopfBZOnqXsJeKth/3SYdz2nChaqzFoAYXTMI/bTEtFWcZL4MwiiH4dk2v+yfpj PzTXFAdo3/DR22XQXRu7Qwc5JXCe3EBm61AzWHAlXglnD3CGWrsX9jgRxuAm4IN1 7pW+BMpcqnjR3VXQLh9jDCwaKA0yxs4mfAij5rwD47lv5XepZ8hJWKrk1G43/HZn 0xhWeW+OfWwpwpHTJ+KZyVh/Ey0kZfI+1JE0pOkNfvR1oXNEIrIo5o1X7N97EqqK NDzcDDOF6JS5 -----END CERTIFICATE-----Generated at Wed Feb 18 22:48:32 2026 by rpki-client