$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer File: A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer (raw, json) Hash identifier: D/V6CPV7OESedK6QiKe109VTzJvzK9vYah1e86bNdQY= Subject key identifier: A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4B6F167ECB858CDEF7DC8AC72A54D306FDE4A3D0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 23:23:38 +0000 Certificate not after: Tue 26 Jan 2027 23:28:38 +0000 Subordinate resources: AS: 3640 IP: 158.97.0.0/16 IP: 192.84.12.0/24 IP: 2801:c4:f0::/44 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:6f:16:7e:cb:85:8c:de:f7:dc:8a:c7:2a:54:d3:06:fd:e4:a3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 23:23:38 2026 GMT Not After : Jan 26 23:28:38 2027 GMT Subject: CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:80:bc:fb:ef:fd:2c:2a:af:be:c0:19:5a:95: b2:e5:35:88:d1:93:5c:34:db:77:5e:7d:d1:c4:b6: b6:25:56:db:7e:cf:85:b3:f6:a3:7e:86:57:6d:0e: ac:ea:6f:48:89:e7:79:2c:fe:b2:fb:6d:db:53:51: ce:9a:12:59:d6:6c:85:ae:a2:9a:52:0c:4d:ce:36: 32:94:a9:45:84:c5:c0:28:19:3c:2c:38:db:1c:a1: 8f:ab:7b:53:08:58:e9:61:91:e2:e8:2f:ff:c1:cd: 3b:c5:79:49:7d:98:b8:e2:d0:6e:d4:43:ab:8c:40: 6a:d9:7a:2c:fc:6a:7b:37:53:f2:ab:6a:ad:28:3a: 1e:65:7f:4d:63:12:ab:3e:df:5c:01:26:65:f9:94: 26:7e:82:3c:5d:ed:88:47:22:ed:91:20:eb:77:39: 30:30:fb:5d:21:d2:9e:f9:f0:96:ac:de:45:4f:c4: c0:d6:55:35:41:25:c9:ea:ee:32:af:73:96:d9:31: 96:97:bc:ca:cb:92:2b:ee:9a:65:28:ab:06:98:a7: 39:b7:b5:95:0e:de:96:dc:51:ca:d9:5a:3f:ea:55: e8:da:42:7a:7f:fc:5c:6c:f4:b3:c8:5d:23:c3:dc: f3:9a:77:43:98:1b:56:72:e9:f8:98:85:6e:a8:51: c4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.97.0.0/16 192.84.12.0/24 IPv6: 2801:c4:f0::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3640 Signature Algorithm: sha256WithRSAEncryption 38:ba:db:92:fd:37:d7:46:cf:67:81:46:79:5d:52:a2:ba:85: d3:9d:9a:6f:b7:cf:04:58:84:d7:24:1a:21:a3:38:a8:98:c3: af:15:62:3b:df:a8:b7:84:db:fb:32:b5:b6:79:bd:31:eb:52: 45:79:25:f6:bf:36:a9:9c:a1:9a:87:79:0a:fe:56:c8:80:67: af:89:94:1b:02:a4:47:48:b8:27:dc:03:17:29:d6:cf:0c:df: eb:c9:8b:40:e5:6a:06:20:d2:39:dc:56:0a:32:e1:23:0f:f4: 35:d8:dd:d2:0e:b8:a9:7b:d2:af:28:41:1c:4c:54:fe:f3:d2: 41:f8:d4:1b:43:53:41:a1:06:8a:32:26:d1:0a:71:8e:20:ec: 4f:c3:49:af:90:8b:90:76:35:4e:27:c6:a5:db:be:4c:f7:c9: f0:bf:7f:c0:58:fb:b5:7a:25:7f:8c:61:b8:60:ec:11:10:f9: a6:db:5e:6c:10:dc:a8:95:dd:07:4d:b4:bd:a5:79:a4:4e:ce: b2:3d:4f:c2:a0:cf:39:57:6c:2f:17:f9:3e:5b:58:9d:a2:3f: e6:26:e6:31:84:6a:fd:9b:b6:0d:35:4d:f1:8f:e2:58:23:15: f1:b0:ee:bf:83:c5:5c:63:9e:89:e1:85:14:ce:50:f1:de:9e: e2:d9:8f:95 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUS28WfsuFjN733IrHKlTTBv3ko9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMzIzMzhaFw0yNzAxMjYyMzI4MzhaMDMxMTAvBgNV BAMTKEE0M0YxQjZDQ0Q4RUM0QzA1RDZEOUMyOThEQ0U4MjFBMkQ0NDQ0MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVgLz77/0sKq++wBlalbLlNYjR k1w023defdHEtrYlVtt+z4Wz9qN+hldtDqzqb0iJ53ks/rL7bdtTUc6aElnWbIWu oppSDE3ONjKUqUWExcAoGTwsONscoY+re1MIWOlhkeLoL//BzTvFeUl9mLji0G7U Q6uMQGrZeiz8ans3U/Kraq0oOh5lf01jEqs+31wBJmX5lCZ+gjxd7YhHIu2RIOt3 OTAw+10h0p758Jas3kVPxMDWVTVBJcnq7jKvc5bZMZaXvMrLkivummUoqwaYpzm3 tZUO3pbcUcrZWj/qVejaQnp//Fxs9LPIXSPD3POad0OYG1Zy6fiYhW6oUcTHAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSkPxtszY7EwF1t nCmNzoIaLUREGTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjA1NDc4QzlDNTE1Mzg1RTk0RjgyRTNB QjM4NTQzQTc4QkM0N0NERUM2RTUwNUEyOTFGQkJENjAyNERCMjMzNS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GMDU0NzhDOUM1MTUzODVFOTRGODJFM0FCMzg1NDNBNzhCQzQ3Q0RFQzZF NTA1QTI5MUZCQkQ2MDI0REIyMzM1LzAvQTQzRjFCNkNDRDhFQzRDMDVENkQ5QzI5 OERDRTgyMUEyRDQ0NDQxOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDARBAIAATALAwMAnmEDBADAVAww DwQCAAIwCQMHBCgBAMQA8DAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIOODANBgkq hkiG9w0BAQsFAAOCAQEAOLrbkv0310bPZ4FGeV1SorqF052ab7fPBFiE1yQaIaM4 qJjDrxViO9+ot4Tb+zK1tnm9MetSRXkl9r82qZyhmod5Cv5WyIBnr4mUGwKkR0i4 J9wDFynWzwzf68mLQOVqBiDSOdxWCjLhIw/0Ndjd0g64qXvSryhBHExU/vPSQfjU G0NTQaEGijIm0QpxjiDsT8NJr5CLkHY1TifGpdu+TPfJ8L9/wFj7tXolf4xhuGDs ERD5pttebBDcqJXdB020vaV5pE7Osj1PwqDPOVdsLxf5PltYnaI/5ibmMYRq/Zu2 DTVN8Y/iWCMV8bDuv4PFXGOeieGFFM5Q8d6e4tmPlQ== -----END CERTIFICATE-----Generated at Thu Feb 19 01:16:04 2026 by rpki-client