$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer File: CD721CE88C796E837A067F6BF32EA1016FA71013.cer (raw, json) Hash identifier: lOCF5MJXjey7xlpwqv6NooxYWbE9HO58SHeoTUMdCdU= Subject key identifier: CD:72:1C:E8:8C:79:6E:83:7A:06:7F:6B:F3:2E:A1:01:6F:A7:10:13 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 7B08B2D130B1C5E908E6C092C4A0AAFB5726370F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 20:16:41 +0000 Certificate not after: Tue 26 Jan 2027 20:21:41 +0000 Subordinate resources: AS: 271780 IP: 45.233.4.0/22 IP: 2801:174::/44 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Feb 2026 22:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:08:b2:d1:30:b1:c5:e9:08:e6:c0:92:c4:a0:aa:fb:57:26:37:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 20:16:41 2026 GMT Not After : Jan 26 20:21:41 2027 GMT Subject: CN=CD721CE88C796E837A067F6BF32EA1016FA71013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:79:c8:73:c7:99:aa:39:d7:83:2c:63:85:db: 94:ef:55:e6:57:d3:37:bc:12:88:15:26:15:a9:22: 30:6b:4a:ee:61:fa:d2:60:81:aa:26:a0:98:a0:a6: 7f:6d:be:1c:fd:85:be:4b:43:dc:22:2d:96:1c:19: ce:49:51:de:ef:b2:d9:e2:14:67:d8:03:b7:22:cb: 8d:98:3a:ef:7c:c9:df:cb:18:3c:ae:e1:d5:eb:4c: cf:08:2e:15:10:e0:34:5c:48:26:32:d7:86:08:ba: c2:dd:5b:ef:72:07:c2:17:08:bc:13:1a:08:df:23: ea:e0:2b:32:d2:bc:52:aa:84:ec:47:6e:94:5d:aa: 87:db:fc:ad:30:de:54:02:dc:44:71:32:2f:59:82: ac:fe:4b:71:5d:aa:54:a7:bb:16:6d:3d:ac:76:01: 75:55:e0:0f:cd:03:34:db:94:77:47:5a:64:06:5f: 99:6f:01:f1:4f:81:a2:12:d0:56:ef:e3:ba:77:da: 5b:77:25:d1:5f:9c:d7:35:a5:07:2f:b2:a1:6a:73: 13:5d:dd:76:60:de:44:b0:0e:4e:9b:e3:ec:f0:70: 7c:0b:8a:8e:59:42:82:3e:ec:1c:c2:b4:bb:bc:dd: d9:2d:5f:87:08:1b:7c:f1:cd:e8:80:21:e2:29:fe: 41:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:72:1C:E8:8C:79:6E:83:7A:06:7F:6B:F3:2E:A1:01:6F:A7:10:13 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.233.4.0/22 IPv6: 2801:174::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271780 Signature Algorithm: sha256WithRSAEncryption 3f:23:fd:9b:6d:3f:69:a1:72:57:71:0b:47:d4:a0:2c:fb:57: be:74:11:58:dc:fb:0f:30:62:76:50:76:86:61:42:ba:c8:ce: ba:27:2c:87:ae:3b:6e:c4:d6:60:bd:be:68:07:77:46:95:7f: 86:94:09:cb:89:17:1f:60:a9:aa:8a:5f:dd:fe:a6:3a:2f:35: 62:67:70:86:b2:ab:bb:f7:b2:3c:bd:0d:8e:58:2c:59:4f:87: 6e:32:c4:7e:c4:db:d4:2a:86:8c:a5:5e:15:26:6d:d7:57:0a: b3:64:7d:6f:48:44:5e:18:8b:42:12:0d:7c:d0:0a:a0:cb:76: f4:12:8d:59:95:f7:4f:1b:68:44:a0:44:36:87:a0:4e:d7:5b: e0:fd:7b:59:aa:a0:a3:be:02:63:e9:84:b4:f2:95:3e:e3:c6: 70:ac:fa:14:ba:f5:9d:36:91:b1:8e:17:d8:98:d2:6b:6b:dc: 7a:ec:cf:20:9b:39:72:5d:47:75:a7:22:5b:5f:e2:09:a3:a2: bc:9d:f5:69:8b:6b:6f:de:a6:10:58:1d:08:6f:80:5b:4a:59: b7:a5:e1:f2:7a:3c:f8:a8:d2:97:0b:18:66:67:dd:37:ed:bc: 50:a5:83:e7:02:68:d9:bd:4e:57:9f:5e:d8:04:d0:67:b3:07: d3:c4:f9:62 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUewiy0TCxxekI5sCSxKCq+1cmNw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMDE2NDFaFw0yNzAxMjYyMDIxNDFaMDMxMTAvBgNV BAMTKENENzIxQ0U4OEM3OTZFODM3QTA2N0Y2QkYzMkVBMTAxNkZBNzEwMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwechzx5mqOdeDLGOF25TvVeZX 0ze8EogVJhWpIjBrSu5h+tJggaomoJigpn9tvhz9hb5LQ9wiLZYcGc5JUd7vstni FGfYA7ciy42YOu98yd/LGDyu4dXrTM8ILhUQ4DRcSCYy14YIusLdW+9yB8IXCLwT GgjfI+rgKzLSvFKqhOxHbpRdqofb/K0w3lQC3ERxMi9Zgqz+S3FdqlSnuxZtPax2 AXVV4A/NAzTblHdHWmQGX5lvAfFPgaIS0Fbv47p32lt3JdFfnNc1pQcvsqFqcxNd 3XZg3kSwDk6b4+zwcHwLio5ZQoI+7BzCtLu83dktX4cIG3zxzeiAIeIp/kE/AgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTNchzojHlug3oG f2vzLqEBb6cQEzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjQ4N0FGMkE0MERGRTRBMTE0NUVDMzE4 MjM0NDdGMDA0RUMxNDg5Q0JCMENCNjQzQkVBMTlGOTI0NTE2Mjg4Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GNDg3QUYyQTQwREZFNEExMTQ1RUMzMTgyMzQ0N0YwMDRFQzE0ODlDQkIw Q0I2NDNCRUExOUY5MjQ1MTYyODg3LzAvQ0Q3MjFDRTg4Qzc5NkU4MzdBMDY3RjZC RjMyRUExMDE2RkE3MTAxMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLekEMA8EAgAC MAkDBwQoAQF0AAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCWkMA0GCSqGSIb3 DQEBCwUAA4IBAQA/I/2bbT9poXJXcQtH1KAs+1e+dBFY3PsPMGJ2UHaGYUK6yM66 JyyHrjtuxNZgvb5oB3dGlX+GlAnLiRcfYKmqil/d/qY6LzViZ3CGsqu797I8vQ2O WCxZT4duMsR+xNvUKoaMpV4VJm3XVwqzZH1vSEReGItCEg180Aqgy3b0Eo1ZlfdP G2hEoEQ2h6BO11vg/XtZqqCjvgJj6YS08pU+48ZwrPoUuvWdNpGxjhfYmNJra9x6 7M8gmzlyXUd1pyJbX+IJo6K8nfVpi2tv3qYQWB0Ib4BbSlm3peHyejz4qNKXCxhm Z9037bxQpYPnAmjZvU5Xn17YBNBnswfTxPli -----END CERTIFICATE-----Generated at Wed Feb 18 22:30:52 2026 by rpki-client