$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.cer File: A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.cer (raw, json) Hash identifier: qR+OoF0+yPlMcIIbcwB7gkvlfpMJ0CsBD86zSCaO748= Subject key identifier: A1:DE:78:60:58:F6:42:AD:7E:C9:BD:0E:15:4D:6B:F9:E2:E1:87:F5 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1BFDFE5F1B9C513675AB70A940453A98A10D44EB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 06:04:08 +0000 Certificate not after: Wed 27 Jan 2027 06:09:08 +0000 Subordinate resources: AS: 52424 IP: 200.61.248.0/22 IP: 2801:1c0::/39 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:fd:fe:5f:1b:9c:51:36:75:ab:70:a9:40:45:3a:98:a1:0d:44:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 06:04:08 2026 GMT Not After : Jan 27 06:09:08 2027 GMT Subject: CN=A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fd:27:04:d5:11:a4:e2:96:f9:c0:df:1e:8e: 1e:41:cc:2c:df:9a:00:3b:14:66:80:66:b7:63:d7: b7:3f:61:4d:e0:8d:85:29:07:6f:b0:91:81:ca:d3: 9a:10:92:c4:ce:1a:14:6b:70:49:02:f0:86:b0:4f: 94:80:44:fb:3a:47:21:e1:42:7e:d6:4c:ea:54:bd: c3:b7:0f:96:df:41:9b:e4:88:0c:e2:c5:34:04:62: c1:c9:62:ac:8c:d6:e5:8e:28:77:4e:39:a1:fc:ba: b1:cc:8b:73:66:58:14:09:5c:0b:08:cf:12:c3:89: 87:8a:2a:49:18:43:be:65:76:f7:0a:ee:b5:94:b6: f1:08:41:a5:e8:6a:ac:8c:e7:a8:88:ba:e4:cb:c7: d1:b7:ab:f1:51:cf:39:42:94:fe:59:7a:7d:f7:4e: 5f:86:f0:91:66:6a:a9:24:d5:97:48:f6:87:b1:a2: a1:30:1b:70:f3:27:a0:ee:b2:ab:16:77:d4:9e:84: 3f:e6:cf:d1:13:96:65:36:f8:8d:87:a9:57:4c:b9: 5f:b1:28:b2:3d:64:ca:da:e7:09:be:c1:78:fd:53: 7e:de:b6:ef:b1:fb:72:ea:8f:6a:6d:04:f3:02:97: c1:12:24:3f:eb:ad:75:20:d4:89:21:a8:29:ae:af: 9c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A1:DE:78:60:58:F6:42:AD:7E:C9:BD:0E:15:4D:6B:F9:E2:E1:87:F5 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/348FD3A8D91FF9721B29593786923BC63FDCB54B5E65F249590B1DD45A7297C6/0/A1DE786058F642AD7EC9BD0E154D6BF9E2E187F5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.61.248.0/22 IPv6: 2801:1c0::/39 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52424 Signature Algorithm: sha256WithRSAEncryption 08:15:0d:d7:44:29:c0:14:b1:cf:af:06:3b:82:45:bb:7d:09: 01:21:35:c3:e2:f3:ab:52:d1:1f:98:5a:47:20:1c:9a:2c:bc: de:8f:75:97:65:b1:86:1c:17:cc:b3:38:75:9e:8b:fc:ad:98: 85:d8:49:01:41:a9:da:f1:47:f0:fe:d7:94:67:f6:76:4f:12: c3:a6:b4:11:ad:38:f2:68:6a:5e:74:53:96:23:d2:cd:77:a9: 8d:06:14:97:cf:e2:06:f7:ee:c8:9b:32:60:46:9f:10:c6:a8: 48:01:70:7c:2c:9c:c7:18:c3:ca:22:cf:41:ce:3b:d9:f0:23: da:ad:32:87:93:e9:9e:09:a4:da:00:dc:18:ad:0c:f6:77:a1: cf:45:59:c0:59:97:02:ae:26:64:d4:96:54:61:2b:fa:47:ae: 5b:2d:6c:4a:a0:17:1d:7b:64:a9:ac:d6:e4:38:54:db:46:b7: af:57:f4:99:a1:3c:a9:5d:ea:36:0a:79:12:d3:fe:3c:73:ef: d6:8d:cf:da:d2:62:3d:97:28:c0:2d:47:52:d6:90:aa:c5:66: 3a:b8:f1:82:e3:ff:65:23:02:02:b8:18:46:f4:50:f6:fc:18: 7d:13:96:1f:2b:d8:92:b0:f6:84:c2:42:6d:43:bf:36:cf:24: 44:81:92:c0 -----BEGIN CERTIFICATE----- MIIGpjCCBY6gAwIBAgIUG/3+XxucUTZ1q3CpQEU6mKENROswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNjA0MDhaFw0yNzAxMjcwNjA5MDhaMDMxMTAvBgNV BAMTKEExREU3ODYwNThGNjQyQUQ3RUM5QkQwRTE1NEQ2QkY5RTJFMTg3RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/ScE1RGk4pb5wN8ejh5BzCzf mgA7FGaAZrdj17c/YU3gjYUpB2+wkYHK05oQksTOGhRrcEkC8IawT5SARPs6RyHh Qn7WTOpUvcO3D5bfQZvkiAzixTQEYsHJYqyM1uWOKHdOOaH8urHMi3NmWBQJXAsI zxLDiYeKKkkYQ75ldvcK7rWUtvEIQaXoaqyM56iIuuTLx9G3q/FRzzlClP5Zen33 Tl+G8JFmaqkk1ZdI9oexoqEwG3DzJ6DusqsWd9SehD/mz9ETlmU2+I2HqVdMuV+x KLI9ZMra5wm+wXj9U37etu+x+3Lqj2ptBPMCl8ESJD/rrXUg1IkhqCmur5wHAgMB AAGjggOwMIIDrDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSh3nhgWPZCrX7J vQ4VTWv54uGH9TAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzQ4RkQzQThEOTFGRjk3MjFCMjk1OTM3 ODY5MjNCQzYzRkRDQjU0QjVFNjVGMjQ5NTkwQjFERDQ1QTcyOTdDNi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zNDhGRDNBOEQ5MUZGOTcyMUIyOTU5Mzc4NjkyM0JDNjNGRENCNTRCNUU2 NUYyNDk1OTBCMURENDVBNzI5N0M2LzAvQTFERTc4NjA1OEY2NDJBRDdFQzlCRDBF MTU0RDZCRjlFMkUxODdGNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCyD34MA4EAgAC MAgDBgEoAQHAADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAzMgwDQYJKoZIhvcN AQELBQADggEBAAgVDddEKcAUsc+vBjuCRbt9CQEhNcPi86tS0R+YWkcgHJosvN6P dZdlsYYcF8yzOHWei/ytmIXYSQFBqdrxR/D+15Rn9nZPEsOmtBGtOPJoal50U5Yj 0s13qY0GFJfP4gb37sibMmBGnxDGqEgBcHwsnMcYw8oiz0HOO9nwI9qtMoeT6Z4J pNoA3BitDPZ3oc9FWcBZlwKuJmTUllRhK/pHrlstbEqgFx17ZKms1uQ4VNtGt69X 9JmhPKld6jYKeRLT/jxz79aNz9rSYj2XKMAtR1LWkKrFZjq48YLj/2UjAgK4GEb0 UPb8GH0Tlh8r2JKw9oTCQm1DvzbPJESBksA= -----END CERTIFICATE-----Generated at Thu Feb 19 05:53:23 2026 by rpki-client