$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.cer File: C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.cer (raw, json) Hash identifier: dNMADkhgZwxh1Q5XeTjGgGf+tldih/SQ6ChCotchxA4= Subject key identifier: C3:B8:E2:97:B1:CF:DA:FE:3E:21:4D:9F:DC:13:80:26:04:06:DB:97 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3583ABEE0859A0A53645B78B3D0CAC5077F19994 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 15:29:23 +0000 Certificate not after: Wed 27 Jan 2027 15:34:23 +0000 Subordinate resources: AS: 263775 IP: 45.238.8.0/22 IP: 138.121.100.0/22 IP: 2803:2440::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:83:ab:ee:08:59:a0:a5:36:45:b7:8b:3d:0c:ac:50:77:f1:99:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 15:29:23 2026 GMT Not After : Jan 27 15:34:23 2027 GMT Subject: CN=C3B8E297B1CFDAFE3E214D9FDC1380260406DB97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:28:35:1e:2d:ec:bb:5a:d3:6e:85:b1:7c:7a: 32:70:62:5e:d9:c7:ff:25:eb:50:35:d2:c6:0f:2f: 15:6c:58:72:ff:be:5a:16:6a:70:08:a2:d3:5a:d4: 23:e2:78:31:b2:4f:fe:d5:67:cd:81:4d:13:6c:d2: 07:b8:24:5b:93:65:61:ef:e3:93:11:ba:57:63:b1: 3f:83:f6:3a:f1:2b:de:cb:24:a1:0d:24:8e:a6:cf: 14:b1:a6:6d:52:99:83:3a:e7:77:9c:9d:71:43:35: d4:8b:91:54:0b:04:ab:53:5e:12:8a:34:fc:b5:f1: 75:b1:52:22:65:e9:fc:dc:2a:51:24:43:d6:e4:20: 06:1a:a4:41:c1:a1:21:e8:04:fd:a8:6a:bf:36:26: 78:d1:80:f2:02:53:c2:57:f7:3f:01:28:71:c6:c4: 3f:d1:4b:e0:6d:47:3f:df:44:87:71:9f:57:2f:99: 10:3a:6f:58:3e:2b:45:0a:53:27:d1:c1:86:ff:b3: 19:56:08:40:1f:4a:b5:82:4a:0a:48:a8:4d:af:d4: 8e:bb:37:ec:a3:12:50:16:da:66:0a:9e:b3:a2:5d: cd:6d:a8:29:4b:e9:7f:c9:8a:73:b5:6a:48:a6:76: fb:7e:c6:e4:79:89:d6:e3:11:49:43:75:2d:a5:76: 63:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C3:B8:E2:97:B1:CF:DA:FE:3E:21:4D:9F:DC:13:80:26:04:06:DB:97 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.238.8.0/22 138.121.100.0/22 IPv6: 2803:2440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263775 Signature Algorithm: sha256WithRSAEncryption 53:c7:db:58:37:fd:61:77:cd:e5:67:01:17:ad:b8:a1:8a:88: fb:b5:20:56:d1:08:6f:66:cd:34:bf:87:c6:b1:f7:0f:c3:ff: 3a:ad:67:e5:12:58:68:c0:8d:54:a5:66:67:46:09:00:d7:bf: 27:6c:21:2f:58:ac:c0:37:0a:2e:7d:25:5c:2c:69:ed:79:9c: 29:cb:5e:44:86:c3:8d:5f:54:f5:81:8f:50:65:92:c7:dc:09: 02:4a:6d:ac:48:b5:e2:7f:9b:4a:5c:09:55:05:d4:67:5b:f2: 93:55:8f:c3:5e:32:e2:6c:ff:0f:8e:74:bf:57:c1:5a:74:7b: 7a:94:be:d3:8c:9f:80:29:c4:0a:ee:a0:e2:0a:b4:70:43:02: 91:db:07:be:b0:70:c0:96:ec:56:be:dd:e8:ce:e8:dd:b2:d6: 31:c0:3a:f6:4a:bc:3e:fb:a8:06:3c:b1:f1:21:3d:28:cd:be: 4a:c7:62:7b:1f:13:de:12:83:7d:c9:29:86:28:b6:b3:fa:76: 84:58:5b:f8:e4:b1:2b:78:4b:37:e9:74:a6:38:e1:a8:67:1e: f0:96:fa:92:19:08:2a:aa:ce:a1:93:aa:fb:f6:f8:e7:fd:1b: 54:83:a9:08:97:d1:55:a8:fd:f9:3c:8f:52:df:84:29:42:3b: 71:8a:3d:6e -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUNYOr7ghZoKU2RbeLPQysUHfxmZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNTI5MjNaFw0yNzAxMjcxNTM0MjNaMDMxMTAvBgNV BAMTKEMzQjhFMjk3QjFDRkRBRkUzRTIxNEQ5RkRDMTM4MDI2MDQwNkRCOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBKDUeLey7WtNuhbF8ejJwYl7Z x/8l61A10sYPLxVsWHL/vloWanAIotNa1CPieDGyT/7VZ82BTRNs0ge4JFuTZWHv 45MRuldjsT+D9jrxK97LJKENJI6mzxSxpm1SmYM653ecnXFDNdSLkVQLBKtTXhKK NPy18XWxUiJl6fzcKlEkQ9bkIAYapEHBoSHoBP2oar82JnjRgPICU8JX9z8BKHHG xD/RS+BtRz/fRIdxn1cvmRA6b1g+K0UKUyfRwYb/sxlWCEAfSrWCSgpIqE2v1I67 N+yjElAW2mYKnrOiXc1tqClL6X/JinO1akimdvt+xuR5idbjEUlDdS2ldmMtAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTDuOKXsc/a/j4h TZ/cE4AmBAbblzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQ0U3Njc3RjlDMDVFMzdGRjRDMDU3MEUx NzA3RTQwNTQ0MkI0MkM0MzcyMzYzM0Y3RTMwOTFDRDg4QkMyRUU1RC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DRTc2NzdGOUMwNUUzN0ZGNEMwNTcwRTE3MDdFNDA1NDQyQjQyQzQzNzIz NjMzRjdFMzA5MUNEODhCQzJFRTVELzAvQzNCOEUyOTdCMUNGREFGRTNFMjE0RDlG REMxMzgwMjYwNDA2REI5Ny5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLe4IAwQCinlk MA0EAgACMAcDBQAoAyRAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQGXzANBgkq hkiG9w0BAQsFAAOCAQEAU8fbWDf9YXfN5WcBF624oYqI+7UgVtEIb2bNNL+HxrH3 D8P/Oq1n5RJYaMCNVKVmZ0YJANe/J2whL1iswDcKLn0lXCxp7XmcKcteRIbDjV9U 9YGPUGWSx9wJAkptrEi14n+bSlwJVQXUZ1vyk1WPw14y4mz/D450v1fBWnR7epS+ 04yfgCnECu6g4gq0cEMCkdsHvrBwwJbsVr7d6M7o3bLWMcA69kq8PvuoBjyx8SE9 KM2+Ssdiex8T3hKDfckphii2s/p2hFhb+OSxK3hLN+l0pjjhqGce8Jb6khkIKqrO oZOq+/b45/0bVIOpCJfRVaj9+TyPUt+EKUI7cYo9bg== -----END CERTIFICATE-----Generated at Thu Feb 19 00:11:53 2026 by rpki-client