$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer File: 8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.cer (raw, json) Hash identifier: vU+aXX0I1/0mBvG/TAeyNWXrUGXV3Pke5Ro4Jw9lokY= Subject key identifier: 8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0C08DC3F62E7FE29F06D794E21AA2955CF8B4A65 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 18:04:08 +0000 Certificate not after: Tue 26 Jan 2027 18:09:08 +0000 Subordinate resources: AS: 28067 IP: 64.28.128.0/20 IP: 2801:0:40::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Feb 2026 22:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:08:dc:3f:62:e7:fe:29:f0:6d:79:4e:21:aa:29:55:cf:8b:4a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 18:04:08 2026 GMT Not After : Jan 26 18:09:08 2027 GMT Subject: CN=8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b1:19:7c:a1:ca:a0:49:0c:58:21:16:22:96: cf:0a:48:73:74:88:b6:55:7e:e3:42:cd:1a:b3:f9: 2c:db:c7:87:68:9d:ca:7a:de:23:e0:e6:6d:71:ce: 2a:a7:39:9f:f2:db:43:85:29:03:22:94:1f:84:d7: 36:09:5a:ae:79:f7:65:75:5e:57:94:f7:c4:00:39: 2b:0f:1f:51:c6:e1:51:56:f6:a3:8e:f2:3d:94:24: ea:83:84:8f:af:50:54:fe:ec:7f:98:f7:6c:17:fe: af:3e:bb:33:a4:e2:30:55:7d:af:fe:cc:79:2e:7a: 73:f7:c0:35:22:78:ed:68:63:66:38:da:1e:86:55: d2:e8:17:0f:64:c8:98:cf:87:84:b3:94:f4:75:61: 84:a2:26:d0:7b:19:d7:cd:2d:1f:c9:cd:62:46:7b: e4:3a:ab:8c:6c:a4:21:f2:69:0e:07:54:b5:a5:47: e3:2a:05:20:b6:8f:9e:3a:ea:a3:0c:15:1e:f7:0a: 37:56:d8:a6:9d:7b:8b:4e:34:71:2b:74:85:23:7d: 0d:fd:1c:d6:f4:48:dd:d2:9e:7d:02:fe:1c:29:3c: a3:41:e8:a2:ed:a6:ed:ae:c7:55:2c:b8:8c:8b:76: ba:5d:9a:61:af:67:1b:dd:dd:3b:90:3c:22:51:2a: 2f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8F:CB:3D:AE:D8:FB:3A:82:F6:BD:E9:5F:BC:5A:C3:B7:9C:CE:FD:30 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/199149CA43EC64A0473D2BC1CF13F8E17F3B1E19CB42E246891B0DF0EDCC5862/0/8FCB3DAED8FB3A82F6BDE95FBC5AC3B79CCEFD30.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.28.128.0/20 IPv6: 2801:0:40::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28067 Signature Algorithm: sha256WithRSAEncryption 62:67:7e:0f:0e:a1:27:4a:bd:5a:3f:79:d8:14:5e:0b:4d:f0: 70:b6:1c:95:b4:20:32:d0:b0:f3:2f:72:a4:81:db:bb:85:8e: 73:ca:a7:1d:8d:69:ee:65:c9:9b:b0:d3:bc:e3:23:4a:1e:bd: ce:94:fd:d5:ed:87:ae:14:e4:92:d8:bc:7c:dc:c3:a2:b1:79: 08:21:5f:bc:48:ff:fd:35:d5:7c:2f:ec:c7:11:1a:4c:63:27: a8:a2:03:ec:03:ad:27:6e:a0:0a:87:d7:24:97:13:17:44:d8: 1b:5d:ec:48:4f:a4:9c:e4:36:f6:65:37:16:9f:32:d0:06:af: 99:43:14:40:79:54:7a:32:57:8e:b2:8d:08:75:45:60:d8:3f: 0a:f5:e2:db:2b:c7:ef:c7:a8:fb:1b:db:20:c7:b0:a8:10:7a: ba:ca:b0:be:95:99:6b:3a:5c:54:4c:52:01:d2:44:65:c9:c0: 3d:75:6f:42:e5:1a:b1:89:b5:b6:96:38:33:99:d0:fd:e8:55: a2:1d:d1:25:53:66:1e:13:dd:6e:c6:97:64:af:fb:92:db:f8: f6:d5:b2:0c:29:9c:a2:b9:7b:28:9e:72:f3:3e:51:eb:4d:1a: c6:4c:1a:cd:13:45:eb:c0:4b:24:8d:96:49:61:98:e9:75:0b: f4:1b:7d:f8 -----BEGIN CERTIFICATE----- MIIGpjCCBY6gAwIBAgIUDAjcP2Ln/inwbXlOIaopVc+LSmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxODA0MDhaFw0yNzAxMjYxODA5MDhaMDMxMTAvBgNV BAMTKDhGQ0IzREFFRDhGQjNBODJGNkJERTk1RkJDNUFDM0I3OUNDRUZEMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAsRl8ocqgSQxYIRYils8KSHN0 iLZVfuNCzRqz+Szbx4doncp63iPg5m1xziqnOZ/y20OFKQMilB+E1zYJWq5592V1 XleU98QAOSsPH1HG4VFW9qOO8j2UJOqDhI+vUFT+7H+Y92wX/q8+uzOk4jBVfa/+ zHkuenP3wDUieO1oY2Y42h6GVdLoFw9kyJjPh4SzlPR1YYSiJtB7GdfNLR/JzWJG e+Q6q4xspCHyaQ4HVLWlR+MqBSC2j5466qMMFR73CjdW2Kade4tONHErdIUjfQ39 HNb0SN3Snn0C/hwpPKNB6KLtpu2ux1UsuIyLdrpdmmGvZxvd3TuQPCJRKi8VAgMB AAGjggOwMIIDrDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSPyz2u2Ps6gva9 6V+8WsO3nM79MDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTk5MTQ5Q0E0M0VDNjRBMDQ3M0QyQkMx Q0YxM0Y4RTE3RjNCMUUxOUNCNDJFMjQ2ODkxQjBERjBFRENDNTg2Mi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xOTkxNDlDQTQzRUM2NEEwNDczRDJCQzFDRjEzRjhFMTdGM0IxRTE5Q0I0 MkUyNDY4OTFCMERGMEVEQ0M1ODYyLzAvOEZDQjNEQUVEOEZCM0E4MkY2QkRFOTVG QkM1QUMzQjc5Q0NFRkQzMC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQEQByAMA8EAgAC MAkDBwAoAQAAAEAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICbaMwDQYJKoZIhvcN AQELBQADggEBAGJnfg8OoSdKvVo/edgUXgtN8HC2HJW0IDLQsPMvcqSB27uFjnPK px2Nae5lyZuw07zjI0oevc6U/dXth64U5JLYvHzcw6KxeQghX7xI//011Xwv7McR GkxjJ6iiA+wDrSduoAqH1ySXExdE2Btd7EhPpJzkNvZlNxafMtAGr5lDFEB5VHoy V46yjQh1RWDYPwr14tsrx+/HqPsb2yDHsKgQerrKsL6VmWs6XFRMUgHSRGXJwD11 b0LlGrGJtbaWODOZ0P3oVaId0SVTZh4T3W7Gl2Sv+5Lb+PbVsgwpnKK5eyiecvM+ UetNGsZMGs0TRevASySNlklhmOl1C/Qbffg= -----END CERTIFICATE-----Generated at Wed Feb 18 22:48:23 2026 by rpki-client