$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer File: CD0CE589373B27C7377B95716717C42DB8B1FF08.cer (raw, json) Hash identifier: uSdyjkqw8abLkVBlFrbiQDQZaB1MyfiFNAyqJuiFY9U= Subject key identifier: CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4E79C220140FB48AF5B53DA3FD10D92DEFC3524D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 06:02:17 +0000 Certificate not after: Wed 27 Jan 2027 06:07:17 +0000 Subordinate resources: IP: 45.167.12.0/22 IP: 2806:311::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:79:c2:20:14:0f:b4:8a:f5:b5:3d:a3:fd:10:d9:2d:ef:c3:52:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 06:02:17 2026 GMT Not After : Jan 27 06:07:17 2027 GMT Subject: CN=CD0CE589373B27C7377B95716717C42DB8B1FF08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e4:bc:a0:12:a5:9c:73:6f:8a:ab:13:5d:a5: 1e:d1:d2:a5:45:1c:1b:1d:e2:35:87:ac:92:62:3a: 36:07:fa:81:95:98:c8:64:02:7e:1a:fd:3e:64:ed: 5a:75:11:3d:22:d4:c6:3e:d1:82:c5:c7:11:58:87: a7:10:33:2a:d6:4a:62:b7:9b:99:52:15:89:94:0f: 84:af:d5:50:24:dc:b5:5d:86:86:a9:3d:5c:5b:bc: 6c:ee:28:4e:0b:e6:4e:ce:c8:6d:7a:04:44:cb:2f: 55:16:07:0a:23:37:22:4c:62:d1:a3:66:9f:a2:82: ec:01:a7:5f:09:f1:ca:5a:49:4e:d0:eb:f4:d2:df: 73:6e:55:de:56:fc:90:18:f8:fe:ba:cb:57:f1:31: 80:d4:f0:05:7a:8e:ab:e4:1a:3f:76:28:2a:11:03: 59:3b:1d:92:c3:cc:27:bd:8e:37:db:c9:7c:1c:ea: e7:fe:25:55:5c:ca:34:48:d7:a8:b8:49:2c:36:ee: 65:b0:57:9f:65:95:49:de:a2:a8:68:f7:06:04:b1: 2a:8c:07:be:fd:17:24:de:6e:cc:68:ca:75:51:10: e8:2a:1a:a4:d7:6d:4b:b4:12:a2:cc:35:a4:08:57: fa:df:1d:18:6c:42:91:a3:db:ec:7c:7e:48:9e:50: 46:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.167.12.0/22 IPv6: 2806:311::/32 Signature Algorithm: sha256WithRSAEncryption 31:aa:d3:9f:a5:90:a8:11:33:fd:4f:45:2b:73:bd:e8:34:cb: f6:1f:8c:a3:75:05:0f:9d:37:57:03:94:16:a6:ef:0d:1b:7b: a4:f3:62:4f:00:8f:83:21:0a:f8:ca:00:97:d8:76:b3:b5:2c: 65:53:e3:e4:48:23:22:0b:73:71:d4:26:25:98:a6:67:cb:cf: 3f:48:78:c8:48:3c:97:0e:45:a8:d5:ad:4c:df:bd:45:85:d9: 6a:4c:59:10:2c:5d:4e:16:c3:33:f8:d3:ab:58:7f:08:30:53: cc:9e:d7:1f:e1:42:f3:99:8c:b1:64:e1:df:af:7b:69:cb:db: 21:73:f0:70:aa:d6:ae:bb:83:c2:bf:7f:eb:fc:46:7b:f1:68: da:e0:17:5a:0d:13:69:43:ec:7e:bc:20:a5:8d:74:1a:b5:9a: f8:41:a1:55:9a:08:e1:59:38:81:23:03:39:6e:8b:76:18:30: 89:a4:56:a4:b8:23:0d:67:8d:20:5f:32:14:b6:8a:fc:4d:17: 0e:35:90:1b:0b:73:06:7d:10:8b:31:44:d9:2e:d5:83:0f:1d: f9:a6:e1:6e:99:28:10:e9:f1:bf:7e:8a:32:4a:87:bf:68:2e: 74:bb:01:84:4b:d8:68:81:65:d0:1c:60:0e:c4:5f:d8:59:9d: 1d:98:8e:13 -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgIUTnnCIBQPtIr1tT2j/RDZLe/DUk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgwNjAyMTdaFw0yNzAxMjcwNjA3MTdaMDMxMTAvBgNV BAMTKENEMENFNTg5MzczQjI3QzczNzdCOTU3MTY3MTdDNDJEQjhCMUZGMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt5LygEqWcc2+KqxNdpR7R0qVF HBsd4jWHrJJiOjYH+oGVmMhkAn4a/T5k7Vp1ET0i1MY+0YLFxxFYh6cQMyrWSmK3 m5lSFYmUD4Sv1VAk3LVdhoapPVxbvGzuKE4L5k7OyG16BETLL1UWBwojNyJMYtGj Zp+iguwBp18J8cpaSU7Q6/TS33NuVd5W/JAY+P66y1fxMYDU8AV6jqvkGj92KCoR A1k7HZLDzCe9jjfbyXwc6uf+JVVcyjRI16i4SSw27mWwV59llUneoqho9wYEsSqM B779FyTebsxoynVREOgqGqTXbUu0EqLMNaQIV/rfHRhsQpGj2+x8fkieUEYhAgMB AAGjggOTMIIDjzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTNDOWJNzsnxzd7 lXFnF8QtuLH/CDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzQ5RjA5RDA3NzdDRDI2MEIyOERCQkYx Q0E1NzdCQkYxQTU5OEI4NTRGN0QzREJBM0EwOTRFOEI2NTQwNTFGMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DNDlGMDlEMDc3N0NEMjYwQjI4REJCRjFDQTU3N0JCRjFBNTk4Qjg1NEY3 RDNEQkEzQTA5NEU4QjY1NDA1MUYyLzAvQ0QwQ0U1ODkzNzNCMjdDNzM3N0I5NTcx NjcxN0M0MkRCOEIxRkYwOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLacMMA0EAgAC MAcDBQAoBgMRMA0GCSqGSIb3DQEBCwUAA4IBAQAxqtOfpZCoETP9T0Urc73oNMv2 H4yjdQUPnTdXA5QWpu8NG3uk82JPAI+DIQr4ygCX2HaztSxlU+PkSCMiC3Nx1CYl mKZny88/SHjISDyXDkWo1a1M371FhdlqTFkQLF1OFsMz+NOrWH8IMFPMntcf4ULz mYyxZOHfr3tpy9shc/Bwqtauu4PCv3/r/EZ78Wja4BdaDRNpQ+x+vCCljXQatZr4 QaFVmgjhWTiBIwM5bot2GDCJpFakuCMNZ40gXzIUtor8TRcONZAbC3MGfRCLMUTZ LtWDDx35puFumSgQ6fG/fooySoe/aC50uwGES9hogWXQHGAOxF/YWZ0dmI4T -----END CERTIFICATE-----Generated at Thu Feb 19 00:11:39 2026 by rpki-client