$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C556AA3CC16346423FD48947E61ED84B443C6BD6.cer File: C556AA3CC16346423FD48947E61ED84B443C6BD6.cer (raw, json) Hash identifier: Kdzx9MRbjU6M0M44HljzojdktduEXR6BdaCkmxHFQqY= Subject key identifier: C5:56:AA:3C:C1:63:46:42:3F:D4:89:47:E6:1E:D8:4B:44:3C:6B:D6 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2E4D84FDE0E2296ED5321359321BE51C48BB09F7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/8E42CBA476FC29B5B2D6EFD2BD6FC7783B45E1DE3AF8CA0321FCB343A6CDF7B8/0/C556AA3CC16346423FD48947E61ED84B443C6BD6.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/8E42CBA476FC29B5B2D6EFD2BD6FC7783B45E1DE3AF8CA0321FCB343A6CDF7B8/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 00:53:53 +0000 Certificate not after: Wed 27 Jan 2027 00:58:53 +0000 Subordinate resources: AS: 266891 IP: 45.161.112.0/22 IP: 2803:66a0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:4d:84:fd:e0:e2:29:6e:d5:32:13:59:32:1b:e5:1c:48:bb:09:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 00:53:53 2026 GMT Not After : Jan 27 00:58:53 2027 GMT Subject: CN=C556AA3CC16346423FD48947E61ED84B443C6BD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:37:03:9c:90:92:40:be:57:7f:c7:c0:e0:64: e5:c5:dc:13:aa:ea:c2:6b:74:0b:73:8e:37:28:53: 0c:6a:0e:e9:29:96:ab:20:83:43:fb:aa:c1:7b:8b: 89:54:57:c5:4b:87:87:db:99:67:81:e0:cb:e5:aa: 73:dd:94:a0:8f:53:19:1c:60:86:b1:86:e0:d4:67: 3b:93:dd:a1:a2:a2:e7:96:d5:d0:0b:27:27:c6:7f: 54:8f:53:b0:cd:2e:c9:50:23:68:08:90:47:15:9e: 54:0f:2c:cd:4b:15:88:5a:ea:2a:89:c1:b3:af:52: f5:7b:be:47:61:ce:6a:d1:85:bc:e7:b0:9e:87:09: e5:f0:3f:82:5b:9e:32:d6:6f:e3:3f:55:62:e0:56: 64:10:98:47:2d:f5:b6:64:4d:94:89:a3:4b:11:60: 31:26:17:2a:74:37:5c:49:42:0d:87:ce:60:ea:bc: f9:f6:b6:69:15:9e:f6:c0:16:a3:e1:4d:ed:6d:f9: 27:8c:a5:5f:c4:7d:9f:b5:04:bd:93:d7:c3:0a:b3: c5:24:fc:0d:21:d1:49:1b:74:8c:51:ef:cd:f2:48: 6a:9c:c6:ba:97:b7:08:3f:15:bd:19:29:94:c6:57: aa:3e:4b:60:12:33:0a:6c:92:33:5f:91:bd:c7:6e: 26:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C5:56:AA:3C:C1:63:46:42:3F:D4:89:47:E6:1E:D8:4B:44:3C:6B:D6 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8E42CBA476FC29B5B2D6EFD2BD6FC7783B45E1DE3AF8CA0321FCB343A6CDF7B8/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8E42CBA476FC29B5B2D6EFD2BD6FC7783B45E1DE3AF8CA0321FCB343A6CDF7B8/0/C556AA3CC16346423FD48947E61ED84B443C6BD6.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.161.112.0/22 IPv6: 2803:66a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266891 Signature Algorithm: sha256WithRSAEncryption 2c:f9:b6:60:5b:63:fa:cc:f4:90:1d:62:60:b1:ef:af:8b:8b: ca:0d:71:6c:e1:30:1d:b8:f9:45:89:6c:21:b7:1d:ac:48:c1: 02:8a:e5:2d:f7:2e:a2:d1:28:43:fb:d0:76:1f:22:9f:15:ea: dd:a5:79:15:1f:78:35:4a:99:68:dc:f3:c5:f4:94:da:e4:7a: d8:ac:f0:56:02:4d:50:0c:63:6c:cd:76:38:23:7b:d2:79:53: 8e:da:75:e4:79:8a:f1:9d:5f:46:36:76:b3:78:89:53:7d:94: 56:c1:8b:e9:30:70:59:16:af:68:21:a1:36:50:b8:d4:e5:ff: 98:0a:c5:a3:39:fc:36:79:52:da:91:61:5c:f1:d4:ea:63:59: e5:a5:cb:e3:28:03:9b:07:1c:c1:b2:72:61:01:be:76:11:b0: 16:a4:d8:d8:97:09:7b:e9:23:ed:4e:78:34:3d:b9:c8:35:2c: 4e:b1:c9:f5:8b:fd:04:6c:d5:f0:f1:7f:cc:29:6d:68:54:12: 07:4e:79:c9:0e:c5:23:2a:b4:ea:47:ca:00:8b:f1:57:7c:f9: f3:fe:63:f0:e2:1a:2d:e2:ef:67:b6:87:73:2b:ce:1b:4d:c1: b0:0c:16:0a:3d:51:74:06:94:81:42:52:3d:10:46:a7:b1:96: a2:57:d5:b2 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIULk2E/eDiKW7VMhNZMhvlHEi7CfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwMDUzNTNaFw0yNzAxMjcwMDU4NTNaMDMxMTAvBgNV BAMTKEM1NTZBQTNDQzE2MzQ2NDIzRkQ0ODk0N0U2MUVEODRCNDQzQzZCRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCNwOckJJAvld/x8DgZOXF3BOq 6sJrdAtzjjcoUwxqDukplqsgg0P7qsF7i4lUV8VLh4fbmWeB4MvlqnPdlKCPUxkc YIaxhuDUZzuT3aGioueW1dALJyfGf1SPU7DNLslQI2gIkEcVnlQPLM1LFYha6iqJ wbOvUvV7vkdhzmrRhbznsJ6HCeXwP4JbnjLWb+M/VWLgVmQQmEct9bZkTZSJo0sR YDEmFyp0N1xJQg2HzmDqvPn2tmkVnvbAFqPhTe1t+SeMpV/EfZ+1BL2T18MKs8Uk /A0h0UkbdIxR783ySGqcxrqXtwg/Fb0ZKZTGV6o+S2ASMwpskjNfkb3HbiZDAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTFVqo8wWNGQj/U iUfmHthLRDxr1jAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOEU0MkNCQTQ3NkZDMjlCNUIyRDZFRkQy QkQ2RkM3NzgzQjQ1RTFERTNBRjhDQTAzMjFGQ0IzNDNBNkNERjdCOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84RTQyQ0JBNDc2RkMyOUI1QjJENkVGRDJCRDZGQzc3ODNCNDVFMURFM0FG OENBMDMyMUZDQjM0M0E2Q0RGN0I4LzAvQzU1NkFBM0NDMTYzNDY0MjNGRDQ4OTQ3 RTYxRUQ4NEI0NDNDNkJENi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLaFwMA0EAgAC MAcDBQAoA2agMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQSizANBgkqhkiG9w0B AQsFAAOCAQEALPm2YFtj+sz0kB1iYLHvr4uLyg1xbOEwHbj5RYlsIbcdrEjBAorl LfcuotEoQ/vQdh8inxXq3aV5FR94NUqZaNzzxfSU2uR62KzwVgJNUAxjbM12OCN7 0nlTjtp15HmK8Z1fRjZ2s3iJU32UVsGL6TBwWRavaCGhNlC41OX/mArFozn8NnlS 2pFhXPHU6mNZ5aXL4ygDmwccwbJyYQG+dhGwFqTY2JcJe+kj7U54ND25yDUsTrHJ 9Yv9BGzV8PF/zCltaFQSB055yQ7FIyq06kfKAIvxV3z58/5j8OIaLeLvZ7aHcyvO G03BsAwWCj1RdAaUgUJSPRBGp7GWolfVsg== -----END CERTIFICATE-----Generated at Thu Feb 19 03:14:45 2026 by rpki-client