$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer File: BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer (raw, json) Hash identifier: QogcKvblm8QMmxtqeYzXiBc7S/qQqCucAa632eAQSVw= Subject key identifier: BD:63:89:EB:93:45:07:1F:30:B2:39:38:BA:AD:DE:36:AD:D7:AE:34 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 72DC08389DCCEC33431E2A4314F40D4637EA699E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 07:41:04 +0000 Certificate not after: Wed 27 Jan 2027 07:46:04 +0000 Subordinate resources: AS: 263725 IP: 138.0.228.0/22 IP: 168.228.192.0/22 IP: 2803:7780::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:dc:08:38:9d:cc:ec:33:43:1e:2a:43:14:f4:0d:46:37:ea:69:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 07:41:04 2026 GMT Not After : Jan 27 07:46:04 2027 GMT Subject: CN=BD6389EB9345071F30B23938BAADDE36ADD7AE34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:25:f3:58:76:77:5f:69:0c:2a:b9:2f:8d:42: eb:a5:66:2d:4b:56:fb:4d:81:1d:b0:e9:35:c2:cd: 5a:55:6a:9f:e5:58:bf:c4:9b:7a:42:72:74:c1:25: 17:0b:56:24:2e:3d:e9:68:2e:3c:39:9b:ec:4b:ec: 55:66:43:b8:d5:73:84:8e:e9:08:81:78:ac:5e:78: 39:35:d0:8a:59:40:9d:9f:89:e3:35:6e:27:55:60: 83:a0:0c:16:19:0a:af:b0:bc:88:21:d7:30:6b:2f: f8:4f:be:9a:fa:06:63:78:0d:0f:27:af:62:60:01: 16:ea:93:0f:20:af:41:79:b4:64:69:ff:92:3c:f0: 1b:ca:7f:cd:05:f5:ed:f6:76:df:74:5a:86:a7:61: 73:da:57:c9:d6:a5:05:72:85:ad:6f:2a:d5:f8:6d: 98:41:63:64:94:09:8a:a7:d8:bc:e4:8b:96:7c:48: 07:5b:42:c4:72:6f:55:5e:78:11:7b:48:39:70:1f: d9:47:98:c6:ef:43:4e:b6:32:ee:3d:3c:f1:7c:4a: b6:a8:3e:c9:bf:d0:f9:42:fb:25:da:8f:bf:26:83: 31:9b:5d:80:cf:3b:c3:2e:bb:04:1d:59:ba:9d:dd: d9:ff:c5:93:e0:ed:4c:b0:26:cb:ad:a4:6c:ff:7b: 61:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:63:89:EB:93:45:07:1F:30:B2:39:38:BA:AD:DE:36:AD:D7:AE:34 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.228.0/22 168.228.192.0/22 IPv6: 2803:7780::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263725 Signature Algorithm: sha256WithRSAEncryption 88:9f:97:9c:a4:a0:9a:e3:09:37:95:a1:97:f3:81:e2:51:0c: 95:5f:1d:ac:ce:84:93:ff:2c:a2:8b:3d:d2:f8:b9:f7:c2:05: 07:eb:3a:92:83:38:1e:a1:35:48:72:2b:5d:ac:5b:ba:85:b8: 76:02:5e:92:f9:e1:68:cc:15:32:d2:6e:8a:9e:29:7c:f0:71: 5c:1e:fc:b8:cc:2d:f4:7b:5c:d5:35:19:0f:80:de:47:82:da: 3b:fa:51:f9:63:2d:77:54:39:38:9d:1e:9f:a7:99:43:05:83: ee:88:f5:a2:54:e7:a9:dc:88:b6:ba:03:f3:0b:50:67:c0:23: 26:fb:b4:98:93:2a:e2:c0:4b:01:8e:24:c3:f7:5b:05:20:e5: de:55:e5:f3:14:ec:b7:77:0d:bc:1e:bf:64:15:1f:52:95:14: 97:2b:6d:62:ba:d0:0c:b1:0b:99:e1:da:10:22:e6:75:b0:3b: 97:7b:31:63:32:a4:a3:02:ab:0b:89:fb:f9:f0:28:ca:07:ea: 1e:0f:f7:75:04:35:6c:c0:e4:5c:14:ea:05:ee:ff:ad:87:ef: 96:50:03:a3:e2:84:fc:f0:53:ba:00:39:2b:a6:d6:e1:a5:c3: 11:2c:4e:83:50:30:5b:27:88:aa:1c:cc:4c:ec:82:b4:b2:d6: a3:9f:fb:0e -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUctwIOJ3M7DNDHipDFPQNRjfqaZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNzQxMDRaFw0yNzAxMjcwNzQ2MDRaMDMxMTAvBgNV BAMTKEJENjM4OUVCOTM0NTA3MUYzMEIyMzkzOEJBQURERTM2QUREN0FFMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOJfNYdndfaQwquS+NQuulZi1L VvtNgR2w6TXCzVpVap/lWL/Em3pCcnTBJRcLViQuPeloLjw5m+xL7FVmQ7jVc4SO 6QiBeKxeeDk10IpZQJ2fieM1bidVYIOgDBYZCq+wvIgh1zBrL/hPvpr6BmN4DQ8n r2JgARbqkw8gr0F5tGRp/5I88BvKf80F9e32dt90WoanYXPaV8nWpQVyha1vKtX4 bZhBY2SUCYqn2Lzki5Z8SAdbQsRyb1VeeBF7SDlwH9lHmMbvQ062Mu49PPF8Srao Psm/0PlC+yXaj78mgzGbXYDPO8MuuwQdWbqd3dn/xZPg7UywJsutpGz/e2FtAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS9Y4nrk0UHHzCy OTi6rd42rdeuNDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUI5NEJDNzQwNkRFQkFFOUM3QTUyNzdE NEYwRUU3OTNENEQzMUREMTA1MTMxRURBQjQ3NDQwODdDMDQ3NkM3RC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BQjk0QkM3NDA2REVCQUU5QzdBNTI3N0Q0RjBFRTc5M0Q0RDMxREQxMDUx MzFFREFCNDc0NDA4N0MwNDc2QzdELzAvQkQ2Mzg5RUI5MzQ1MDcxRjMwQjIzOTM4 QkFBRERFMzZBREQ3QUUzNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCigDkAwQCqOTA MA0EAgACMAcDBQAoA3eAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQGLTANBgkq hkiG9w0BAQsFAAOCAQEAiJ+XnKSgmuMJN5Whl/OB4lEMlV8drM6Ek/8soos90vi5 98IFB+s6koM4HqE1SHIrXaxbuoW4dgJekvnhaMwVMtJuip4pfPBxXB78uMwt9Htc 1TUZD4DeR4LaO/pR+WMtd1Q5OJ0en6eZQwWD7oj1olTnqdyItroD8wtQZ8AjJvu0 mJMq4sBLAY4kw/dbBSDl3lXl8xTst3cNvB6/ZBUfUpUUlyttYrrQDLELmeHaECLm dbA7l3sxYzKkowKrC4n7+fAoygfqHg/3dQQ1bMDkXBTqBe7/rYfvllADo+KE/PBT ugA5K6bW4aXDESxOg1AwWyeIqhzMTOyCtLLWo5/7Dg== -----END CERTIFICATE-----Generated at Thu Feb 19 00:12:27 2026 by rpki-client