$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer File: AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer (raw, json) Hash identifier: Xl0kjum/atHdSZ4ucxd/UGFYnUzl3p5KHMLdYz95r8Q= Subject key identifier: AF:AF:EC:BD:8D:8B:EB:5B:E4:14:03:DA:DC:4D:0F:7C:3A:8B:4B:8D Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1D29076D02620A6863E364E4EF3FFF480327F672 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 22:54:11 +0000 Certificate not after: Tue 26 Jan 2027 22:59:11 +0000 Subordinate resources: AS: 267758 IP: 45.170.102.0/23 IP: 2803:f3a0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:29:07:6d:02:62:0a:68:63:e3:64:e4:ef:3f:ff:48:03:27:f6:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 22:54:11 2026 GMT Not After : Jan 26 22:59:11 2027 GMT Subject: CN=AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:16:e1:4c:1a:dc:2e:d7:6f:66:2a:03:be: a8:c1:0d:e5:af:41:1e:85:16:7b:07:b1:8a:98:db: 89:8d:05:fe:31:3b:c0:62:5e:f1:9d:27:a3:a4:a6: 7a:b7:35:48:7f:92:fc:87:39:db:71:66:35:55:ad: 23:7e:df:bf:3d:36:0c:21:ae:a4:8c:a9:e1:2e:6a: 7b:37:b8:d9:b6:ad:6f:e2:1a:b6:a1:a8:84:48:06: 8e:42:78:21:ba:0a:46:d4:af:72:5c:6c:9b:73:0c: 54:d4:6c:28:b6:ec:44:15:8a:38:54:3b:3f:53:c3: e2:70:2b:39:86:79:c0:a8:9d:87:e6:23:3a:6e:f6: 75:15:db:4d:de:30:a8:58:6e:45:b1:d3:0f:7a:4c: fe:c2:19:93:4e:87:3b:1b:a7:d7:12:e2:e2:cb:9f: 6d:d7:89:2d:0c:93:be:65:d1:34:b8:63:76:e3:9d: dd:92:9d:b0:22:d2:1e:96:9b:6e:c7:df:9d:cf:21: cb:1f:76:f7:68:62:ea:0e:42:1d:7a:40:73:d5:97: 53:53:4f:5f:e2:33:c8:03:15:d4:e5:32:39:d7:7c: e1:6d:f1:e2:d4:9b:e4:e0:89:08:ca:a6:3f:b7:98: 4c:c7:30:2a:12:ce:29:98:87:42:30:d5:25:1d:c7: f9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:AF:EC:BD:8D:8B:EB:5B:E4:14:03:DA:DC:4D:0F:7C:3A:8B:4B:8D X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.170.102.0/23 IPv6: 2803:f3a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267758 Signature Algorithm: sha256WithRSAEncryption 5d:36:6d:d8:80:0b:c8:96:c7:d0:21:82:eb:e5:16:b1:7a:f3: cc:52:02:55:fd:45:de:70:79:3d:df:97:08:4d:3e:97:9d:9c: 68:8a:e9:3a:c9:f8:42:55:da:48:07:b7:ec:ca:13:de:40:d0: c1:e5:7e:d4:fa:4b:a3:5c:df:d1:e4:87:a1:f7:d5:46:89:d7: fb:3d:0e:b5:18:ca:69:db:42:3b:e3:9e:44:10:4d:b4:32:8f: 60:4d:0f:4e:f4:45:9c:9e:99:a0:5b:5e:c1:26:b1:91:0f:07: 52:73:2e:09:af:92:88:c5:f1:17:02:6d:92:9a:03:07:a9:cb: 84:36:12:80:68:cb:17:65:73:56:0b:19:aa:c8:11:e1:d9:dd: af:2b:01:48:07:36:b7:a8:02:71:d4:d9:3d:c6:b9:1d:e1:ce: 27:ce:41:7b:4d:17:d0:26:77:22:e8:eb:77:f0:a5:aa:e7:cd: e9:52:c2:d6:99:cc:9d:d5:97:99:50:25:53:76:5b:76:5f:b7: 8c:c6:ee:76:f9:e9:45:06:23:54:50:18:50:3a:a5:eb:dc:7d: df:82:f8:d4:db:01:29:01:93:12:05:93:40:ad:18:68:38:d1: 81:8b:f8:a3:b8:e1:b4:67:4b:3f:a0:f5:99:3c:d8:b8:41:34: 81:5d:fc:26 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUHSkHbQJiCmhj42Tk7z//SAMn9nIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMjU0MTFaFw0yNzAxMjYyMjU5MTFaMDMxMTAvBgNV BAMTKEFGQUZFQ0JEOEQ4QkVCNUJFNDE0MDNEQURDNEQwRjdDM0E4QjRCOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ShbhTBrcLtdvZioDvqjBDeWv QR6FFnsHsYqY24mNBf4xO8BiXvGdJ6Okpnq3NUh/kvyHOdtxZjVVrSN+3789Ngwh rqSMqeEuans3uNm2rW/iGrahqIRIBo5CeCG6CkbUr3JcbJtzDFTUbCi27EQVijhU Oz9Tw+JwKzmGecConYfmIzpu9nUV203eMKhYbkWx0w96TP7CGZNOhzsbp9cS4uLL n23XiS0Mk75l0TS4Y3bjnd2SnbAi0h6Wm27H353PIcsfdvdoYuoOQh16QHPVl1NT T1/iM8gDFdTlMjnXfOFt8eLUm+TgiQjKpj+3mEzHMCoSzimYh0Iw1SUdx/kfAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSvr+y9jYvrW+QU A9rcTQ98OotLjTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUVFNDI0MDA2RjUzN0YwRDdBQjM1QjNB NjdENDM4MTJFMEY3MTBENDA3OUIyRTRFRURDMzE0QjRDQjBBQzhEOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BRUU0MjQwMDZGNTM3RjBEN0FCMzVCM0E2N0Q0MzgxMkUwRjcxMEQ0MDc5 QjJFNEVFREMzMTRCNENCMEFDOEQ4LzAvQUZBRkVDQkQ4RDhCRUI1QkU0MTQwM0RB REM0RDBGN0MzQThCNEI4RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLapmMA0EAgAC MAcDBQAoA/OgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQV7jANBgkqhkiG9w0B AQsFAAOCAQEAXTZt2IALyJbH0CGC6+UWsXrzzFICVf1F3nB5Pd+XCE0+l52caIrp Osn4QlXaSAe37MoT3kDQweV+1PpLo1zf0eSHoffVRonX+z0OtRjKadtCO+OeRBBN tDKPYE0PTvRFnJ6ZoFtewSaxkQ8HUnMuCa+SiMXxFwJtkpoDB6nLhDYSgGjLF2Vz VgsZqsgR4dndrysBSAc2t6gCcdTZPca5HeHOJ85Be00X0CZ3Iujrd/ClqufN6VLC 1pnMndWXmVAlU3Zbdl+3jMbudvnpRQYjVFAYUDql69x934L41NsBKQGTEgWTQK0Y aDjRgYv4o7jhtGdLP6D1mTzYuEE0gV38Jg== -----END CERTIFICATE-----Generated at Thu Feb 19 01:34:37 2026 by rpki-client