$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer File: CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer (raw, json) Hash identifier: OlPa/ZjjTXST/++rU2jbUilMsPykckUCOcUs1+37XA8= Subject key identifier: CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 77470E480EE9F17CD4D19740D2D5C14AE9513B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 16:06:23 +0000 Certificate not after: Wed 27 Jan 2027 16:11:23 +0000 Subordinate resources: AS: 61497 IP: 138.99.136.0/22 IP: 2803:d040::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:47:0e:48:0e:e9:f1:7c:d4:d1:97:40:d2:d5:c1:4a:e9:51:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 16:06:23 2026 GMT Not After : Jan 27 16:11:23 2027 GMT Subject: CN=CED1302EBC484C7C69E637E45AEF6775D5E618A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:68:fd:bf:1d:11:2c:0c:ce:1d:67:ea:64:de: e5:8e:2d:e7:30:1e:10:08:4e:62:9e:e2:48:6d:bf: 3e:2b:d0:ee:7f:88:48:8a:6d:1d:81:32:5e:c4:c6: eb:ff:57:cf:fd:77:4d:17:68:20:0a:e8:b2:2d:06: 60:9a:2e:8e:ed:14:89:80:d2:ab:57:83:5b:07:dd: 64:85:db:c5:31:89:7c:1c:5c:7a:bc:88:5a:92:8b: b8:9f:80:3a:9e:2f:cc:e6:89:4d:bf:1f:80:b9:30: 3f:02:7a:f1:01:fb:8e:cf:1c:f2:7f:04:d1:fb:45: ac:86:1a:dc:64:a2:36:ac:63:0a:05:4f:0f:c1:ed: c8:19:8c:8d:06:8e:a4:f8:82:9d:35:d5:78:2f:0f: 59:d7:2a:1c:80:b8:02:47:d2:c4:38:dd:9b:de:1c: db:72:c7:c3:12:cf:70:9f:62:83:06:f8:64:e6:29: 8c:b4:61:9e:d6:88:51:12:96:06:4c:18:af:11:5e: b3:c8:9d:69:77:96:cc:52:7a:21:ee:e6:b1:c3:7d: 86:8c:90:5b:e0:b4:9d:1b:4d:b7:86:80:f6:cc:a3: f4:9a:e7:01:5a:41:c6:1f:a3:84:23:ba:f7:73:b7: 06:08:af:b0:1b:67:54:00:5a:21:c9:3d:77:bb:b3: 33:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.99.136.0/22 IPv6: 2803:d040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61497 Signature Algorithm: sha256WithRSAEncryption 89:a0:0e:f7:6e:2f:db:72:fc:96:97:48:26:ac:f1:a1:c1:60: ba:3a:c6:71:51:96:76:88:c7:e3:ec:4c:68:87:cf:06:2c:7c: 20:0e:f6:ab:e0:e3:24:fc:ed:ec:7b:a1:75:11:de:62:4e:d9: 97:45:bd:85:03:3d:89:83:41:43:77:8d:f1:36:1c:c8:60:42: b1:f6:75:17:9f:a9:a1:ff:8c:02:56:7a:45:bf:dd:38:d5:a8: f9:ac:d8:0e:4b:39:d0:e0:50:ef:7a:ec:c5:bd:63:4c:80:0a: df:81:b8:ab:8b:45:ad:5b:9f:02:a9:c5:e8:ec:42:d0:df:f6: 9d:60:93:18:6d:46:c6:85:a5:74:49:c2:95:d2:df:a0:58:c6: 5c:2f:0a:b2:6a:1e:35:1d:58:9d:50:1a:34:81:73:13:e5:70: 15:10:de:95:86:b2:74:68:e5:66:ad:35:a7:39:77:2c:4f:41: 37:34:fd:34:8b:78:51:b3:51:eb:22:b4:01:44:e8:b2:bf:b2: c7:52:25:33:c7:0c:ce:d1:9d:40:a8:e5:c2:57:53:72:6a:c8: 38:39:a2:0a:3d:0c:49:e5:f3:5d:c1:3d:e4:b3:09:cf:a8:29: 34:54:d5:56:33:c7:c7:f3:eb:ab:37:35:ad:cf:12:1a:e7:0e: 6f:74:29:f3 -----BEGIN CERTIFICATE----- MIIGpDCCBYygAwIBAgITd0cOSA7p8XzU0ZdA0tXBSulROzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhGMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2 MDU4Njc4MB4XDTI2MDEyODE2MDYyM1oXDTI3MDEyNzE2MTEyM1owMzExMC8GA1UE AxMoQ0VEMTMwMkVCQzQ4NEM3QzY5RTYzN0U0NUFFRjY3NzVENUU2MThBOTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIdo/b8dESwMzh1n6mTe5Y4t5zAe EAhOYp7iSG2/PivQ7n+ISIptHYEyXsTG6/9Xz/13TRdoIArosi0GYJouju0UiYDS q1eDWwfdZIXbxTGJfBxceryIWpKLuJ+AOp4vzOaJTb8fgLkwPwJ68QH7js8c8n8E 0ftFrIYa3GSiNqxjCgVPD8HtyBmMjQaOpPiCnTXVeC8PWdcqHIC4AkfSxDjdm94c 23LHwxLPcJ9igwb4ZOYpjLRhntaIURKWBkwYrxFes8idaXeWzFJ6Ie7mscN9hoyQ W+C0nRtNt4aA9syj9JrnAVpBxh+jhCO693O3BgivsBtnVABaIck9d7uzMwECAwEA AaOCA68wggOrMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFM7RMC68SEx8aeY3 5FrvZ3XV5hipMB8GA1UdIwQYMBaAFPJaG32Pet+UwN6+j+rBw7zWBYZ4MA4GA1Ud DwEB/wQEAwIBBjCBsAYDVR0fBIGoMIGlMIGioIGfoIGchoGZcnN5bmM6Ly9yZXBv c2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3 MDlBQzBEMjU1Q0YyNzlDNDc3MTZEMkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8w L0YyNUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY3JsMIG5 BggrBgEFBQcBAQSBrDCBqTCBpgYIKwYBBQUHMAKGgZlyc3luYzovL3JlcG9zaXRv cnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9FNUFBMUIyQzY5MEQzNEREM0E0MkUw QzAyNjhDMzIxOEVEMTU4RTE1RDI5RkNCRDBCQUI2NkI0Nzg2RDYzMkU2LzAvRjI1 QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNENjA1ODY3OC5jZXIwggFxBggr BgEFBQcBCwSCAWMwggFfMHkGCCsGAQUFBzAFhm1yc3luYzovL3JlcG9zaXRvcnku bGFjbmljLm5ldC9ycGtpL2xhY25pYy83NjQyOUQzRkM0ODk4QzQzRkQwQzg5RTkw NUFDQUU4M0Q1NTNENDUyMTcxMDZBOEUwREIwNDA4OEVFNEZGMTFELzAvMIGmBggr BgEFBQcwCoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj bmljLzc2NDI5RDNGQzQ4OThDNDNGRDBDODlFOTA1QUNBRTgzRDU1M0Q0NTIxNzEw NkE4RTBEQjA0MDg4RUU0RkYxMUQvMC9DRUQxMzAyRUJDNDg0QzdDNjlFNjM3RTQ1 QUVGNjc3NUQ1RTYxOEE5Lm1mdDA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxh Y25pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKKY4gwDQQCAAIw BwMFACgD0EAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPA5MA0GCSqGSIb3DQEB CwUAA4IBAQCJoA73bi/bcvyWl0gmrPGhwWC6OsZxUZZ2iMfj7Exoh88GLHwgDvar 4OMk/O3se6F1Ed5iTtmXRb2FAz2Jg0FDd43xNhzIYEKx9nUXn6mh/4wCVnpFv904 1aj5rNgOSznQ4FDveuzFvWNMgArfgbiri0WtW58CqcXo7ELQ3/adYJMYbUbGhaV0 ScKV0t+gWMZcLwqyah41HVidUBo0gXMT5XAVEN6VhrJ0aOVmrTWnOXcsT0E3NP00 i3hRs1HrIrQBROiyv7LHUiUzxwzO0Z1AqOXCV1Nyasg4OaIKPQxJ5fNdwT3kswnP qCk0VNVWM8fH8+urNzWtzxIa5w5vdCnz -----END CERTIFICATE-----Generated at Thu Feb 19 01:16:02 2026 by rpki-client