$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/820671988E907632A2724A1AD953CE30FC87B161.cer File: 820671988E907632A2724A1AD953CE30FC87B161.cer (raw, json) Hash identifier: SZhUhF0XAKXUK9iwmz9VIOJ5oJuSI+ZvVjjhkkBg4QE= Subject key identifier: 82:06:71:98:8E:90:76:32:A2:72:4A:1A:D9:53:CE:30:FC:87:B1:61 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 229C960AFE7D7C630855F330541CD8C8216DCC2A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/31BAABC28A4645130EE0A52EF5FBD2390D0A138AA5353DEA5840AB3313CD749F/0/820671988E907632A2724A1AD953CE30FC87B161.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/31BAABC28A4645130EE0A52EF5FBD2390D0A138AA5353DEA5840AB3313CD749F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 23:39:56 +0000 Certificate not after: Wed 27 Jan 2027 23:44:56 +0000 Subordinate resources: AS: 265623 IP: 201.46.92.0/22 IP: 2806:3a4::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:9c:96:0a:fe:7d:7c:63:08:55:f3:30:54:1c:d8:c8:21:6d:cc:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 23:39:56 2026 GMT Not After : Jan 27 23:44:56 2027 GMT Subject: CN=820671988E907632A2724A1AD953CE30FC87B161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bc:0e:dd:a4:da:23:3e:a8:7c:be:1b:8c:74: dd:21:84:ad:13:62:38:a1:b1:e9:e9:29:3e:4e:78: aa:8e:13:c3:cc:02:8f:38:48:e0:fe:5c:37:35:31: 1a:35:67:a0:90:ae:a0:9d:15:48:df:5c:ad:4a:ea: 80:7e:22:1a:9d:03:56:75:1d:97:1f:99:1f:54:ba: 7f:c4:5b:2f:b4:2c:b1:02:e3:f8:d5:e6:75:3d:e4: 23:90:0d:42:4f:a2:31:13:b3:64:12:ad:a1:03:95: 5b:f8:2e:96:5f:a2:51:69:a6:83:89:99:78:86:2b: 34:80:04:d8:4e:4d:49:57:65:90:07:94:81:5f:24: b2:70:3c:e5:ec:db:2d:a1:60:ae:fb:41:23:75:bb: 5f:78:5f:ba:a1:85:a1:fb:7a:99:34:ef:e4:91:b7: 8a:09:cc:b5:95:00:2b:de:71:e4:b7:85:51:e6:97: 7b:42:4d:01:2c:0f:7a:23:98:8b:f7:0b:93:45:36: 91:3e:8f:4d:42:65:6a:57:14:ff:2f:a2:4c:90:f3: 87:e6:1b:88:a0:ce:33:65:3f:c5:ba:4a:07:91:8b: 08:42:c6:aa:30:b6:b4:2b:71:8e:74:c5:2c:ce:f7: ef:85:e7:11:ca:0b:0e:be:ec:05:a0:74:84:2b:49: 56:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 82:06:71:98:8E:90:76:32:A2:72:4A:1A:D9:53:CE:30:FC:87:B1:61 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/31BAABC28A4645130EE0A52EF5FBD2390D0A138AA5353DEA5840AB3313CD749F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/31BAABC28A4645130EE0A52EF5FBD2390D0A138AA5353DEA5840AB3313CD749F/0/820671988E907632A2724A1AD953CE30FC87B161.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.46.92.0/22 IPv6: 2806:3a4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265623 Signature Algorithm: sha256WithRSAEncryption 59:85:4c:43:0e:3b:4c:b1:8f:32:14:6f:32:b3:57:91:51:14: 78:a7:a0:f3:a0:bf:4a:a4:21:f6:ff:42:9e:fb:80:6d:e1:ba: bf:d7:b5:09:61:66:7b:aa:03:10:71:2c:8f:f2:c9:ff:aa:fa: f3:f5:47:0a:85:e2:a5:4c:13:f2:72:85:44:0d:3b:da:bc:4d: d7:87:b4:77:ae:9d:d9:35:90:99:35:91:17:03:ff:f7:06:8d: 70:0d:00:6c:2f:3f:83:c4:86:c9:4e:5f:29:28:35:ea:27:5e: 63:48:92:c8:27:b4:a1:a1:39:b0:83:32:f0:85:1b:c5:70:df: 62:15:3d:4f:7d:66:39:fa:4e:5f:27:e8:d0:d8:85:f7:ba:a7: f4:ad:e4:f4:13:ad:f2:7a:ab:ad:90:8d:92:81:4f:aa:48:f5: aa:9a:6f:7c:09:41:49:1c:82:44:98:cd:f4:a3:6d:3f:e8:6f: a5:13:29:07:67:b2:5a:d2:20:13:30:bc:82:ab:65:1f:bc:83: 49:71:78:27:ba:61:60:ea:a1:45:6a:02:d3:35:e6:22:75:9a: 0e:f4:35:ee:24:d2:dc:35:d5:90:8a:05:8c:ac:01:03:e3:f1: 75:57:16:26:c1:ab:38:25:ae:4f:eb:7e:af:89:6c:e8:ed:ed: e8:c5:4d:0e -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUIpyWCv59fGMIVfMwVBzYyCFtzCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgyMzM5NTZaFw0yNzAxMjcyMzQ0NTZaMDMxMTAvBgNV BAMTKDgyMDY3MTk4OEU5MDc2MzJBMjcyNEExQUQ5NTNDRTMwRkM4N0IxNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTvA7dpNojPqh8vhuMdN0hhK0T YjihsenpKT5OeKqOE8PMAo84SOD+XDc1MRo1Z6CQrqCdFUjfXK1K6oB+IhqdA1Z1 HZcfmR9Uun/EWy+0LLEC4/jV5nU95COQDUJPojETs2QSraEDlVv4LpZfolFppoOJ mXiGKzSABNhOTUlXZZAHlIFfJLJwPOXs2y2hYK77QSN1u194X7qhhaH7epk07+SR t4oJzLWVACveceS3hVHml3tCTQEsD3ojmIv3C5NFNpE+j01CZWpXFP8vokyQ84fm G4igzjNlP8W6SgeRiwhCxqowtrQrcY50xSzO9++F5xHKCw6+7AWgdIQrSVaRAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSCBnGYjpB2MqJy ShrZU84w/IexYTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzFCQUFCQzI4QTQ2NDUxMzBFRTBBNTJF RjVGQkQyMzkwRDBBMTM4QUE1MzUzREVBNTg0MEFCMzMxM0NENzQ5Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zMUJBQUJDMjhBNDY0NTEzMEVFMEE1MkVGNUZCRDIzOTBEMEExMzhBQTUz NTNERUE1ODQwQUIzMzEzQ0Q3NDlGLzAvODIwNjcxOTg4RTkwNzYzMkEyNzI0QTFB RDk1M0NFMzBGQzg3QjE2MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCyS5cMA0EAgAC MAcDBQAoBgOkMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQNlzANBgkqhkiG9w0B AQsFAAOCAQEAWYVMQw47TLGPMhRvMrNXkVEUeKeg86C/SqQh9v9CnvuAbeG6v9e1 CWFme6oDEHEsj/LJ/6r68/VHCoXipUwT8nKFRA072rxN14e0d66d2TWQmTWRFwP/ 9waNcA0AbC8/g8SGyU5fKSg16ideY0iSyCe0oaE5sIMy8IUbxXDfYhU9T31mOfpO Xyfo0NiF97qn9K3k9BOt8nqrrZCNkoFPqkj1qppvfAlBSRyCRJjN9KNtP+hvpRMp B2eyWtIgEzC8gqtlH7yDSXF4J7phYOqhRWoC0zXmInWaDvQ17iTS3DXVkIoFjKwB A+PxdVcWJsGrOCWuT+t+r4ls6O3t6MVNDg== -----END CERTIFICATE-----Generated at Thu Feb 19 07:19:42 2026 by rpki-client