$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98AB850008F15375E57FFE47589A85AE20920744.cer File: 98AB850008F15375E57FFE47589A85AE20920744.cer (raw, json) Hash identifier: NNXA/6qm3QkepvXhh7MTsm40AG2BAks4fFln52hRmpU= Subject key identifier: 98:AB:85:00:08:F1:53:75:E5:7F:FE:47:58:9A:85:AE:20:92:07:44 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 670D69AFE516A9E3BD9C41B22BD8B8DA85B993E6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6E9B3F4DA35DDEA002E9043DDE2CB828D1C64A2E82B1A0DE898993BF1BE60D21/0/98AB850008F15375E57FFE47589A85AE20920744.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6E9B3F4DA35DDEA002E9043DDE2CB828D1C64A2E82B1A0DE898993BF1BE60D21/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 00:10:39 +0000 Certificate not after: Thu 28 Jan 2027 00:15:39 +0000 Subordinate resources: AS: 262156 IP: 200.3.120.0/21 IP: 2801:0:220::/44 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Feb 2026 22:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:0d:69:af:e5:16:a9:e3:bd:9c:41:b2:2b:d8:b8:da:85:b9:93:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 29 00:10:39 2026 GMT Not After : Jan 28 00:15:39 2027 GMT Subject: CN=98AB850008F15375E57FFE47589A85AE20920744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4c:80:a2:e4:7c:9b:a9:2b:90:2b:f8:2f:01: 87:2b:fe:86:9f:6c:66:cc:c8:53:86:56:85:bf:47: 23:57:ef:2b:1a:07:f4:03:00:8d:b9:61:59:5e:19: d8:7a:14:2a:5a:b3:00:75:a0:6c:b7:f8:c5:d0:9c: a3:3d:8f:f5:2f:fb:a2:f0:8a:af:24:39:35:a1:76: 9f:04:48:30:10:43:c2:95:d7:47:86:b7:60:14:82: e3:6a:29:7b:36:dc:a7:92:59:54:6d:8e:b7:88:66: 48:7f:ef:52:62:0b:e9:e8:44:d4:e1:00:10:e1:85: 5e:38:6f:1b:56:fc:9c:a8:0b:16:a4:54:4b:ed:d5: 27:1b:dc:74:d8:5d:d4:25:49:1c:ee:3e:d6:10:b5: a9:cf:78:22:b3:8b:a6:9e:2e:1c:ee:3e:df:c3:db: b8:ea:b1:c9:fc:c3:af:f5:8c:30:09:0e:ab:5a:27: 36:f1:42:a1:99:67:61:ad:36:df:64:71:81:0a:f8: 95:45:8f:5f:f7:ff:e7:42:56:e0:79:32:f3:26:23: cc:3d:83:ea:c1:d2:57:5c:28:41:b9:f3:63:f5:f9: 91:6a:be:56:33:15:ce:06:24:3f:df:8b:4e:44:e9: 9f:e2:15:7f:a7:e0:8b:66:b4:c9:00:55:5b:ff:e4: fc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:AB:85:00:08:F1:53:75:E5:7F:FE:47:58:9A:85:AE:20:92:07:44 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6E9B3F4DA35DDEA002E9043DDE2CB828D1C64A2E82B1A0DE898993BF1BE60D21/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6E9B3F4DA35DDEA002E9043DDE2CB828D1C64A2E82B1A0DE898993BF1BE60D21/0/98AB850008F15375E57FFE47589A85AE20920744.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.3.120.0/21 IPv6: 2801:0:220::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262156 Signature Algorithm: sha256WithRSAEncryption 35:9b:c9:10:41:e8:bd:3e:9c:41:6a:76:30:8d:6c:c7:7d:9a: 70:32:bd:0f:51:7e:b7:65:a5:55:e2:a9:97:23:ab:c9:75:4a: 93:8a:33:6d:4e:e2:be:2b:21:6d:ed:1e:02:45:6d:91:54:b3: 13:e2:0d:6e:a9:8f:46:95:8a:5c:f6:7c:b2:c2:ff:08:44:d1: 59:be:7c:5f:18:f8:be:5a:38:91:8e:bd:b8:45:d2:1b:90:4b: 57:c0:7e:1b:87:6e:3d:7a:61:85:b7:68:ba:ad:c4:d2:4a:aa: 7c:21:df:df:ec:8a:4f:54:e3:4f:b5:d0:19:d5:38:16:1c:c9: 21:5c:d2:37:91:e0:9a:6b:9e:06:b2:15:c0:e2:95:f0:3a:c9: 1e:cf:6b:4f:c0:31:ee:a9:c2:52:c1:d4:7e:4a:76:e5:16:0b: 76:34:44:aa:b7:1c:f6:92:9b:ad:52:d0:3c:d3:ee:70:80:a8: 75:00:05:87:03:0f:bd:bb:5e:89:b5:a5:76:34:8b:9a:d9:9f: 11:15:cc:b5:a0:f6:5d:8c:50:65:a1:f2:3c:9b:d4:b1:a1:f9: 58:ed:e1:f8:cb:ab:1c:f0:24:22:61:2b:a0:30:3a:a3:1d:a8: bb:33:a9:d3:58:bb:da:ce:e2:69:af:00:e7:4b:ee:f8:5e:a9: 9a:41:32:e7 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUZw1pr+UWqeO9nEGyK9i42oW5k+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjkwMDEwMzlaFw0yNzAxMjgwMDE1MzlaMDMxMTAvBgNV BAMTKDk4QUI4NTAwMDhGMTUzNzVFNTdGRkU0NzU4OUE4NUFFMjA5MjA3NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzTICi5HybqSuQK/gvAYcr/oaf bGbMyFOGVoW/RyNX7ysaB/QDAI25YVleGdh6FCpaswB1oGy3+MXQnKM9j/Uv+6Lw iq8kOTWhdp8ESDAQQ8KV10eGt2AUguNqKXs23KeSWVRtjreIZkh/71JiC+noRNTh ABDhhV44bxtW/JyoCxakVEvt1Scb3HTYXdQlSRzuPtYQtanPeCKzi6aeLhzuPt/D 27jqscn8w6/1jDAJDqtaJzbxQqGZZ2GtNt9kcYEK+JVFj1/3/+dCVuB5MvMmI8w9 g+rB0ldcKEG582P1+ZFqvlYzFc4GJD/fi05E6Z/iFX+n4ItmtMkAVVv/5PyzAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSYq4UACPFTdeV/ /kdYmoWuIJIHRDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNkU5QjNGNERBMzVEREVBMDAyRTkwNDNE REUyQ0I4MjhEMUM2NEEyRTgyQjFBMERFODk4OTkzQkYxQkU2MEQyMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82RTlCM0Y0REEzNURERUEwMDJFOTA0M0RERTJDQjgyOEQxQzY0QTJFODJC MUEwREU4OTg5OTNCRjFCRTYwRDIxLzAvOThBQjg1MDAwOEYxNTM3NUU1N0ZGRTQ3 NTg5QTg1QUUyMDkyMDc0NC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDyAN4MA8EAgAC MAkDBwQoAQAAAiAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAAMMA0GCSqGSIb3 DQEBCwUAA4IBAQA1m8kQQei9PpxBanYwjWzHfZpwMr0PUX63ZaVV4qmXI6vJdUqT ijNtTuK+KyFt7R4CRW2RVLMT4g1uqY9GlYpc9nyywv8IRNFZvnxfGPi+WjiRjr24 RdIbkEtXwH4bh249emGFt2i6rcTSSqp8Id/f7IpPVONPtdAZ1TgWHMkhXNI3keCa a54GshXA4pXwOskez2tPwDHuqcJSwdR+SnblFgt2NESqtxz2kputUtA80+5wgKh1 AAWHAw+9u16JtaV2NIua2Z8RFcy1oPZdjFBlofI8m9SxoflY7eH4y6sc8CQiYSug MDqjHai7M6nTWLvazuJprwDnS+74XqmaQTLn -----END CERTIFICATE-----Generated at Wed Feb 18 22:51:39 2026 by rpki-client