$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.cer File: 91A405EDF63A9F2958C6B36662A6B3CEF476A89D.cer (raw, json) Hash identifier: q3YzmFYHwIvdRoyePsP+4tMsleX3yEKxOJj+LMWkknI= Subject key identifier: 91:A4:05:ED:F6:3A:9F:29:58:C6:B3:66:62:A6:B3:CE:F4:76:A8:9D Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 649C988F3E4EAC56848DCACF731DE8C07081F9F5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 16:23:38 +0000 Certificate not after: Wed 27 Jan 2027 16:28:38 +0000 Subordinate resources: AS: 264607 IP: 138.255.88.0/22 IP: 2801:1e8::/40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:9c:98:8f:3e:4e:ac:56:84:8d:ca:cf:73:1d:e8:c0:70:81:f9:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 16:23:38 2026 GMT Not After : Jan 27 16:28:38 2027 GMT Subject: CN=91A405EDF63A9F2958C6B36662A6B3CEF476A89D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7e:ed:00:f1:1f:4d:16:71:fc:de:4c:84:d8: 35:dc:86:49:e5:0e:8f:3f:f2:39:e9:22:8c:4f:8c: ff:01:14:30:c1:18:39:9f:db:36:2f:cb:2e:32:ed: bd:71:31:cb:0e:4a:31:84:f6:cd:f6:4f:67:01:2d: ac:62:70:5c:09:49:e5:95:02:13:0f:60:a6:9c:09: 39:e7:23:2f:45:29:31:6f:6c:44:a2:d1:0c:6c:8f: d5:78:26:6c:02:49:73:1b:2a:db:91:f8:c5:cb:e4: 5f:67:9b:c3:74:cc:ad:ac:8c:7d:49:e3:cc:86:94: ae:ec:f7:42:e7:6e:41:68:94:d7:9d:a5:ad:68:27: 8b:b9:9c:0d:dc:c7:14:57:e6:0c:ad:f6:c8:a4:bb: fa:89:84:e6:f1:dd:ce:7b:b3:f5:3f:68:22:07:cf: 2e:8d:8e:cb:26:af:6c:cb:bc:b4:d1:27:f9:ee:22: b2:bc:81:00:10:c5:56:7b:56:d6:13:29:61:e2:e1: a5:1f:ae:f7:81:ef:3e:d6:5e:ac:52:33:ae:40:81: 50:af:6e:26:6f:eb:b5:d2:5e:7a:fc:c6:86:c2:3b: 4e:3c:aa:de:03:ca:23:01:bc:88:d0:02:e0:28:e2: f4:83:4c:28:70:fa:77:b9:0a:6b:18:02:5a:38:ff: b7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 91:A4:05:ED:F6:3A:9F:29:58:C6:B3:66:62:A6:B3:CE:F4:76:A8:9D X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.255.88.0/22 IPv6: 2801:1e8::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264607 Signature Algorithm: sha256WithRSAEncryption 12:d4:a6:a4:4d:fa:60:83:23:31:f6:13:1d:25:91:a9:4f:a2: 42:b4:25:9c:f5:46:a0:e4:db:22:19:18:3e:ef:89:04:bc:4f: df:8a:bf:ef:e4:da:b1:1c:79:c1:be:d5:ae:ad:cd:e1:66:21: b9:70:ff:42:b3:f7:bf:6b:83:36:e0:f1:41:a3:a7:cc:a7:5a: a7:c5:bd:cb:0c:f1:b6:bc:3e:1b:24:9c:a8:61:93:ee:01:3d: 08:e2:ba:64:04:6f:0c:81:39:7c:e3:88:2f:e1:b7:ad:ee:df: 5a:1a:a5:69:44:9c:d0:de:2e:29:30:ed:42:ef:43:e5:24:7e: 02:19:73:84:23:5d:34:ac:8b:2b:c6:18:47:80:90:c6:c5:fd: b1:9a:5e:b0:2e:5c:f1:20:89:4d:fb:21:b6:d7:db:d1:3b:f6: 78:ff:04:1e:c8:e8:0f:60:9d:f2:bf:f3:57:76:d9:d6:58:b7: 10:de:0b:4d:c6:8e:7d:eb:2e:74:6c:08:dd:16:9d:c1:48:52: c3:9b:78:45:ec:87:5b:f1:71:b9:40:cf:cc:10:10:c4:ad:61: 70:8b:94:2c:8b:ab:a0:99:9c:1d:9c:21:95:85:7a:b6:af:a9: aa:41:9a:b9:00:bf:fb:d3:96:b0:3a:c1:aa:5a:e1:83:37:81: de:82:0f:ec -----BEGIN CERTIFICATE----- MIIGpjCCBY6gAwIBAgIUZJyYjz5OrFaEjcrPcx3owHCB+fUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNjIzMzhaFw0yNzAxMjcxNjI4MzhaMDMxMTAvBgNV BAMTKDkxQTQwNUVERjYzQTlGMjk1OEM2QjM2NjYyQTZCM0NFRjQ3NkE4OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAfu0A8R9NFnH83kyE2DXchknl Do8/8jnpIoxPjP8BFDDBGDmf2zYvyy4y7b1xMcsOSjGE9s32T2cBLaxicFwJSeWV AhMPYKacCTnnIy9FKTFvbESi0Qxsj9V4JmwCSXMbKtuR+MXL5F9nm8N0zK2sjH1J 48yGlK7s90LnbkFolNedpa1oJ4u5nA3cxxRX5gyt9siku/qJhObx3c57s/U/aCIH zy6Njssmr2zLvLTRJ/nuIrK8gQAQxVZ7VtYTKWHi4aUfrveB7z7WXqxSM65AgVCv biZv67XSXnr8xobCO048qt4DyiMBvIjQAuAo4vSDTChw+ne5CmsYAlo4/7erAgMB AAGjggOwMIIDrDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSRpAXt9jqfKVjG s2ZiprPO9HaonTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjVCQ0FGODY0OTBERTY5QTZCRDZDNDFE ODZBODRGMEM4QjBEQUNEOUM3NTg3RDk2NjNERTk4QTYwQTM2OEQxMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82NUJDQUY4NjQ5MERFNjlBNkJENkM0MUQ4NkE4NEYwQzhCMERBQ0Q5Qzc1 ODdEOTY2M0RFOThBNjBBMzY4RDEwLzAvOTFBNDA1RURGNjNBOUYyOTU4QzZCMzY2 NjJBNkIzQ0VGNDc2QTg5RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCiv9YMA4EAgAC MAgDBgAoAQHoADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECZ8wDQYJKoZIhvcN AQELBQADggEBABLUpqRN+mCDIzH2Ex0lkalPokK0JZz1RqDk2yIZGD7viQS8T9+K v+/k2rEcecG+1a6tzeFmIblw/0Kz979rgzbg8UGjp8ynWqfFvcsM8ba8PhsknKhh k+4BPQjiumQEbwyBOXzjiC/ht63u31oapWlEnNDeLikw7ULvQ+UkfgIZc4QjXTSs iyvGGEeAkMbF/bGaXrAuXPEgiU37IbbX29E79nj/BB7I6A9gnfK/81d22dZYtxDe C03Gjn3rLnRsCN0WncFIUsObeEXsh1vxcblAz8wQEMStYXCLlCyLq6CZnB2cIZWF eravqapBmrkAv/vTlrA6wapa4YM3gd6CD+w= -----END CERTIFICATE-----Generated at Thu Feb 19 04:42:47 2026 by rpki-client