$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer File: AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer (raw, json) Hash identifier: cPbGFPpDr2sc5JwEEviKkH+b5+Oxt3FjVLAhUL7yX6E= Subject key identifier: AC:7B:8B:A3:D0:5E:21:1C:F7:69:7D:C3:8D:BB:75:91:FC:D3:07:5A Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 55434ACE69C769EBD3291606485C6B74E7B5A20F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 04:00:57 +0000 Certificate not after: Wed 27 Jan 2027 04:05:57 +0000 Subordinate resources: AS: 264754 IP: 168.194.140.0/22 IP: 2803:3f40::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:43:4a:ce:69:c7:69:eb:d3:29:16:06:48:5c:6b:74:e7:b5:a2:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 04:00:57 2026 GMT Not After : Jan 27 04:05:57 2027 GMT Subject: CN=AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7b:01:e6:8a:19:70:fc:d2:7e:ef:fb:81:86: e4:ba:1c:7d:51:9f:25:e8:47:8a:01:91:43:4d:9d: d0:0f:d9:40:61:f7:78:2e:96:52:da:dd:96:5e:22: 53:89:4f:5e:b2:f9:65:6c:0b:ef:49:9b:7c:0b:13: 9a:67:53:9c:93:d6:3b:94:d0:50:80:36:48:ca:17: af:c5:00:cd:d4:25:27:93:e0:22:9b:f5:a2:ee:e3: 4c:d2:59:31:c5:78:09:dc:dc:3e:3b:a6:e1:63:8c: 39:31:2b:a6:4e:e0:43:3f:27:c8:d8:9a:ef:46:df: 14:7b:4a:45:05:1e:60:12:a3:96:66:4a:1d:d8:c3: 0f:ac:bf:28:34:45:a4:31:27:20:d1:60:3c:a1:73: c0:f4:7d:2b:f5:ab:68:8d:fc:a2:64:d3:84:56:df: b8:30:00:4b:aa:9d:9a:37:67:ed:9e:13:d9:25:c4: 02:b3:78:21:c8:27:71:39:86:f2:8d:a8:8c:9e:f8: f5:ea:64:09:de:1a:a0:2f:64:1a:b8:87:48:26:25: 27:73:c8:2a:1c:53:3d:41:28:7a:69:6a:1d:9e:0c: a5:cb:2a:7c:24:70:2a:0f:be:b7:a8:6a:f7:4c:53: 1f:d6:21:f1:77:99:3f:80:5a:da:3e:c7:a8:18:84: 11:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AC:7B:8B:A3:D0:5E:21:1C:F7:69:7D:C3:8D:BB:75:91:FC:D3:07:5A X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.194.140.0/22 IPv6: 2803:3f40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264754 Signature Algorithm: sha256WithRSAEncryption 4f:57:1e:73:09:dd:f2:2a:42:ab:93:13:a8:0d:72:94:d9:13: 84:fb:ab:27:27:89:06:e3:9f:5d:63:ad:24:6f:c9:71:6d:6a: 01:29:1b:18:dd:6d:4d:b6:ff:aa:43:b6:a7:d6:6a:2b:8b:18: 3b:a4:fe:45:96:70:b6:ec:52:b1:67:0e:18:6d:39:3d:dd:94: ab:87:5d:22:ab:b5:39:bb:a3:3c:2d:93:74:b9:db:54:b4:d5: 93:b4:36:79:1a:92:34:1f:8e:99:90:77:18:92:77:b1:36:bf: f4:4b:76:41:45:d0:41:2c:89:0c:e4:42:71:06:be:d0:62:b8: 8c:98:29:b6:b3:ac:af:fb:fa:e7:f4:a6:dc:7c:71:07:31:13: 91:e8:1b:50:20:c7:8f:00:c2:6a:30:c7:19:08:b9:3c:5a:b2: ee:73:1e:e7:9a:6b:58:b5:26:cd:14:a9:f1:a7:98:26:70:8d: a1:a9:2c:b9:56:b5:cb:1f:08:fc:35:6e:33:f7:e3:13:cd:9d: 97:67:b1:ad:aa:a6:5f:b3:1b:ca:aa:19:4f:38:fc:3e:1b:36: 95:f3:16:dd:02:98:d7:2a:eb:cf:24:27:6e:ce:ca:86:60:60: 31:76:b0:65:70:1a:94:26:51:47:ed:6b:e5:3b:42:d8:5d:a5: a4:9b:a0:12 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUVUNKzmnHaevTKRYGSFxrdOe1og8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNDAwNTdaFw0yNzAxMjcwNDA1NTdaMDMxMTAvBgNV BAMTKEFDN0I4QkEzRDA1RTIxMUNGNzY5N0RDMzhEQkI3NTkxRkNEMzA3NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMewHmihlw/NJ+7/uBhuS6HH1R nyXoR4oBkUNNndAP2UBh93gullLa3ZZeIlOJT16y+WVsC+9Jm3wLE5pnU5yT1juU 0FCANkjKF6/FAM3UJSeT4CKb9aLu40zSWTHFeAnc3D47puFjjDkxK6ZO4EM/J8jY mu9G3xR7SkUFHmASo5ZmSh3Yww+svyg0RaQxJyDRYDyhc8D0fSv1q2iN/KJk04RW 37gwAEuqnZo3Z+2eE9klxAKzeCHIJ3E5hvKNqIye+PXqZAneGqAvZBq4h0gmJSdz yCocUz1BKHppah2eDKXLKnwkcCoPvreoavdMUx/WIfF3mT+AWto+x6gYhBGTAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSse4uj0F4hHPdp fcONu3WR/NMHWjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzBDRTlBQTBCQzI5NzYwQTEzRjFDMUZC QURCQ0FBNTY0RDA5NDMxMkU3MDAyOURGRTZFMEQwQUZEQzg4NDA1Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DMENFOUFBMEJDMjk3NjBBMTNGMUMxRkJBREJDQUE1NjREMDk0MzEyRTcw MDI5REZFNkUwRDBBRkRDODg0MDVGLzAvQUM3QjhCQTNEMDVFMjExQ0Y3Njk3REMz OERCQjc1OTFGQ0QzMDc1QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqMKMMA0EAgAC MAcDBQAoAz9AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQKMjANBgkqhkiG9w0B AQsFAAOCAQEAT1cecwnd8ipCq5MTqA1ylNkThPurJyeJBuOfXWOtJG/JcW1qASkb GN1tTbb/qkO2p9ZqK4sYO6T+RZZwtuxSsWcOGG05Pd2Uq4ddIqu1ObujPC2TdLnb VLTVk7Q2eRqSNB+OmZB3GJJ3sTa/9Et2QUXQQSyJDORCcQa+0GK4jJgptrOsr/v6 5/Sm3HxxBzETkegbUCDHjwDCajDHGQi5PFqy7nMe55prWLUmzRSp8aeYJnCNoaks uVa1yx8I/DVuM/fjE82dl2exraqmX7MbyqoZTzj8Phs2lfMW3QKY1yrrzyQnbs7K hmBgMXawZXAalCZRR+1r5TtC2F2lpJugEg== -----END CERTIFICATE-----Generated at Thu Feb 19 03:14:12 2026 by rpki-client