$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.cer File: 975BBA86138B6A2DC834A2B1778C6E08EBF42F28.cer (raw, json) Hash identifier: Fk3XvITjKfBMlc+ihZgTX3FTZ+fMu4Z6qxXoIn3W3Fs= Subject key identifier: 97:5B:BA:86:13:8B:6A:2D:C8:34:A2:B1:77:8C:6E:08:EB:F4:2F:28 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 593A71D2D6A9975BE646115F3A4F54F2AE80B9D5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 23:00:50 +0000 Certificate not after: Tue 26 Jan 2027 23:05:50 +0000 Subordinate resources: IP: 190.112.192.0/22 IP: 190.112.200.0/22 IP: 200.35.152.0/22 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Feb 2026 22:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:3a:71:d2:d6:a9:97:5b:e6:46:11:5f:3a:4f:54:f2:ae:80:b9:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 23:00:50 2026 GMT Not After : Jan 26 23:05:50 2027 GMT Subject: CN=975BBA86138B6A2DC834A2B1778C6E08EBF42F28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:52:c6:32:5a:9c:ce:fe:0c:43:96:cd:30:79: ff:dd:de:40:af:65:a7:b5:95:d7:e0:91:ae:0a:49: 25:4d:e6:2a:a7:25:3c:2e:63:fc:b5:a2:15:d3:2a: e4:b8:c5:69:a4:95:9f:18:b9:87:9a:70:df:fe:40: 6e:1c:e1:cd:53:53:b8:10:f6:bb:85:11:90:91:b4: 4a:0d:5f:b6:b7:c0:10:5e:dc:4b:eb:1f:b8:a2:72: f0:b1:dd:35:c1:fa:9a:e8:f3:9c:38:54:5d:69:d3: aa:20:00:7b:25:a9:95:22:eb:3e:ab:fc:c8:80:75: 9b:e6:3d:35:1d:0b:94:2c:69:dd:3e:19:e3:97:f3: 18:09:dc:58:ce:54:65:92:72:5a:5e:3c:0e:b5:1d: 63:4d:f4:9c:f9:0c:1e:25:8a:fc:29:73:11:29:80: 00:db:29:b2:ef:0c:04:11:c9:8d:2f:ff:7c:01:bb: 90:69:50:96:08:ae:46:dd:cb:fb:7d:58:e8:07:5a: 69:b5:82:41:c4:7a:3f:70:d4:f7:a6:f5:fa:73:26: d7:7a:48:d6:a6:a1:ff:2e:e0:ae:7e:3b:b6:3a:d4: 7f:31:4e:2a:78:5b:ae:d2:d1:59:9b:87:92:57:f3: 2c:4a:fb:c6:2d:7a:4b:36:55:ec:83:8b:5f:c0:13: c5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 97:5B:BA:86:13:8B:6A:2D:C8:34:A2:B1:77:8C:6E:08:EB:F4:2F:28 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/975BBA86138B6A2DC834A2B1778C6E08EBF42F28.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.112.192.0/22 190.112.200.0/22 200.35.152.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:2f:2b:94:c5:4f:0d:33:7f:d0:f0:50:2c:8b:24:b7:2a:90: ad:bb:9e:ed:63:b5:0d:16:53:10:33:03:66:ee:43:0b:86:b9: 78:ae:7a:6d:90:5d:4c:44:e3:3f:b6:7f:de:a4:a8:93:6b:6d: 8e:ed:01:b7:bc:18:60:9c:e1:eb:79:dc:08:7c:a5:32:98:da: 3a:ca:9e:01:36:8e:8c:c9:4c:2d:ef:d7:6d:00:0f:1f:93:d6: 3f:06:ef:72:64:91:71:c4:50:1f:62:34:e3:bc:7e:7c:cf:63: 03:bc:65:3e:f0:96:41:b6:7d:15:76:ab:2c:d3:94:7f:51:1f: e2:00:a2:13:b3:bd:39:77:3b:77:92:b3:c3:85:6c:b5:1d:9a: 8a:dc:80:74:6d:f0:5c:3e:aa:cf:62:41:d8:23:d0:32:ab:73: 65:2b:d3:98:bc:96:cd:f8:0b:c1:5d:f8:b9:d6:84:17:f6:f2: 6f:28:6c:ab:ea:45:45:f9:ee:4a:11:4e:f6:ac:fd:6e:3c:93: 7a:0a:83:d2:96:12:8b:52:b3:70:2c:b0:54:11:22:82:fc:28: 6e:87:83:1e:ca:73:f0:1f:1e:5b:15:45:90:8f:c4:d7:50:15: 79:28:9f:7f:17:c8:fd:d6:fb:51:aa:9d:8a:25:2f:bc:ca:8a: 97:44:cc:af -----BEGIN CERTIFICATE----- MIIGhjCCBW6gAwIBAgIUWTpx0tapl1vmRhFfOk9U8q6AudUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMzAwNTBaFw0yNzAxMjYyMzA1NTBaMDMxMTAvBgNV BAMTKDk3NUJCQTg2MTM4QjZBMkRDODM0QTJCMTc3OEM2RTA4RUJGNDJGMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOUsYyWpzO/gxDls0wef/d3kCv Zae1ldfgka4KSSVN5iqnJTwuY/y1ohXTKuS4xWmklZ8YuYeacN/+QG4c4c1TU7gQ 9ruFEZCRtEoNX7a3wBBe3EvrH7iicvCx3TXB+pro85w4VF1p06ogAHslqZUi6z6r /MiAdZvmPTUdC5Qsad0+GeOX8xgJ3FjOVGWSclpePA61HWNN9Jz5DB4livwpcxEp gADbKbLvDAQRyY0v/3wBu5BpUJYIrkbdy/t9WOgHWmm1gkHEej9w1Pem9fpzJtd6 SNamof8u4K5+O7Y61H8xTip4W67S0Vmbh5JX8yxK+8Yteks2VeyDi1/AE8X7AgMB AAGjggOQMIIDjDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXW7qGE4tqLcg0 orF3jG4I6/QvKDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDVGREY2NEI2MTdGQ0UwRTQ1MTVFQkZB ODBFNDFEOEY2QkY1RDhDRkU3OEYyQkVBM0E3QzkzRTQzRjBFNUQ0MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wNUZERjY0QjYxN0ZDRTBFNDUxNUVCRkE4MEU0MUQ4RjZCRjVEOENGRTc4 RjJCRUEzQTdDOTNFNDNGMEU1RDQwLzAvOTc1QkJBODYxMzhCNkEyREM4MzRBMkIx Nzc4QzZFMDhFQkY0MkYyOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCvnDAAwQCvnDI AwQCyCOYMA0GCSqGSIb3DQEBCwUAA4IBAQBaLyuUxU8NM3/Q8FAsiyS3KpCtu57t Y7UNFlMQMwNm7kMLhrl4rnptkF1MROM/tn/epKiTa22O7QG3vBhgnOHredwIfKUy mNo6yp4BNo6MyUwt79dtAA8fk9Y/Bu9yZJFxxFAfYjTjvH58z2MDvGU+8JZBtn0V dqss05R/UR/iAKITs705dzt3krPDhWy1HZqK3IB0bfBcPqrPYkHYI9Ayq3NlK9OY vJbN+AvBXfi51oQX9vJvKGyr6kVF+e5KEU72rP1uPJN6CoPSlhKLUrNwLLBUESKC /Chuh4MeynPwHx5bFUWQj8TXUBV5KJ9/F8j91vtRqp2KJS+8yoqXRMyv -----END CERTIFICATE-----Generated at Wed Feb 18 23:05:25 2026 by rpki-client