$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer File: D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer (raw, json) Hash identifier: zfrrtN/H0NdM88D+/2P6VIptFBDWta1H6NH60fheJxg= Subject key identifier: D5:A8:98:17:0F:B3:A0:74:1F:C2:D3:24:96:5B:61:B3:68:DB:0A:4E Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 56170DF8D58D4486321657A88F90B048E4188C7E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 19:22:33 +0000 Certificate not after: Tue 26 Jan 2027 19:27:33 +0000 Subordinate resources: AS: 265774 IP: 164.163.216.0/22 IP: 2803:f7c0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:17:0d:f8:d5:8d:44:86:32:16:57:a8:8f:90:b0:48:e4:18:8c:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 19:22:33 2026 GMT Not After : Jan 26 19:27:33 2027 GMT Subject: CN=D5A898170FB3A0741FC2D324965B61B368DB0A4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ae:6f:55:3b:00:d8:18:b9:14:88:c9:66:f9: a5:60:a6:2f:81:ca:28:7d:ae:1d:6b:07:b4:d2:33: 5f:b7:8a:4f:a1:71:fd:cd:af:8f:81:f7:b6:c0:9b: c1:34:14:96:53:b6:9a:2d:a2:30:fc:1c:18:0e:89: 4a:d1:c3:38:69:96:0d:75:9b:09:df:bf:79:f1:37: a2:90:a6:56:a3:9a:ab:da:58:27:55:fc:de:7a:d5: d4:07:e4:94:d4:ee:f4:5b:9e:91:82:db:8f:c9:2e: e7:20:a3:e7:fb:21:41:e7:c5:3c:44:da:a9:b0:7d: 63:87:fc:fb:d1:e4:66:4b:ba:cc:4c:42:70:5e:72: 66:0a:e3:b1:10:da:af:94:75:c2:84:84:77:7e:3b: 8c:28:bb:89:7d:b1:01:d2:33:fd:c7:c8:3f:bd:84: ba:65:2f:19:95:01:63:39:6f:d8:b5:5f:39:d3:cb: 63:27:f6:3e:08:59:c8:57:11:60:41:26:7e:ff:fb: cd:9d:1b:d4:0b:1c:91:8f:d5:11:de:98:19:ee:06: 89:56:46:97:d2:dc:ff:8f:91:bb:74:6e:0f:6a:18: b6:99:2a:71:79:56:bd:ca:91:7e:b1:00:3d:eb:33: ed:8d:59:0b:7b:c1:62:b7:b2:3e:7c:5d:e7:0a:45: 7c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:A8:98:17:0F:B3:A0:74:1F:C2:D3:24:96:5B:61:B3:68:DB:0A:4E X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.163.216.0/22 IPv6: 2803:f7c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265774 Signature Algorithm: sha256WithRSAEncryption 28:cb:38:c6:ac:1b:c2:43:51:17:23:f8:9d:0d:22:39:fb:ac: 72:56:3c:05:05:3b:65:aa:17:a8:bb:d5:d0:f4:66:25:5a:75: 2b:02:68:e4:be:42:7e:cf:a3:8e:ef:6b:6d:48:87:4a:c2:bc: f7:14:2b:24:15:40:35:c2:e5:f7:9c:96:2c:3b:ab:f7:21:4f: c4:a5:51:10:a8:a0:a6:d9:50:a8:9a:4c:a5:96:cc:f9:f9:17: d0:82:22:68:df:09:90:d8:0a:45:56:77:38:fa:7a:30:d3:1d: f7:92:47:5d:e8:69:12:c7:45:81:fb:cd:c2:11:71:9e:c2:7c: 77:6e:81:84:dd:ab:cb:2f:9c:f7:54:99:e1:b5:e8:ee:4c:15: 20:7d:60:5b:10:38:a2:ed:9b:2d:2a:45:36:17:52:31:a8:f2: e6:d5:d2:dc:3e:af:c5:cf:51:39:34:49:7e:9e:a5:c2:37:25: e1:88:75:11:95:26:98:92:78:f5:b3:a5:ce:d9:65:f9:fa:a1: 74:5c:86:41:bc:f5:50:6c:44:aa:67:29:bd:a2:88:49:e6:58: c1:c0:46:75:33:d1:66:af:5e:b2:df:98:c3:38:2c:13:2d:f6: 47:78:a7:a9:1f:53:94:bd:32:75:08:91:25:25:69:c2:a0:ca: fa:96:e3:bb -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUVhcN+NWNRIYyFleoj5CwSOQYjH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxOTIyMzNaFw0yNzAxMjYxOTI3MzNaMDMxMTAvBgNV BAMTKEQ1QTg5ODE3MEZCM0EwNzQxRkMyRDMyNDk2NUI2MUIzNjhEQjBBNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTrm9VOwDYGLkUiMlm+aVgpi+B yih9rh1rB7TSM1+3ik+hcf3Nr4+B97bAm8E0FJZTtpotojD8HBgOiUrRwzhplg11 mwnfv3nxN6KQplajmqvaWCdV/N561dQH5JTU7vRbnpGC24/JLucgo+f7IUHnxTxE 2qmwfWOH/PvR5GZLusxMQnBecmYK47EQ2q+UdcKEhHd+O4wou4l9sQHSM/3HyD+9 hLplLxmVAWM5b9i1XznTy2Mn9j4IWchXEWBBJn7/+82dG9QLHJGP1RHemBnuBolW RpfS3P+Pkbt0bg9qGLaZKnF5Vr3KkX6xAD3rM+2NWQt7wWK3sj58XecKRXyfAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTVqJgXD7OgdB/C 0ySWW2GzaNsKTjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjhEMEZBNDkxQ0MyQTIwQzQ5NEVGN0M1 NDdDNTg2QkM1QTEwMUYwRTk1QzBCNjg1MTNEMDU4MDg0QjZBMTMwOC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GOEQwRkE0OTFDQzJBMjBDNDk0RUY3QzU0N0M1ODZCQzVBMTAxRjBFOTVD MEI2ODUxM0QwNTgwODRCNkExMzA4LzAvRDVBODk4MTcwRkIzQTA3NDFGQzJEMzI0 OTY1QjYxQjM2OERCMEE0RS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCpKPYMA0EAgAC MAcDBQAoA/fAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQOLjANBgkqhkiG9w0B AQsFAAOCAQEAKMs4xqwbwkNRFyP4nQ0iOfusclY8BQU7ZaoXqLvV0PRmJVp1KwJo 5L5Cfs+jju9rbUiHSsK89xQrJBVANcLl95yWLDur9yFPxKVREKigptlQqJpMpZbM +fkX0IIiaN8JkNgKRVZ3OPp6MNMd95JHXehpEsdFgfvNwhFxnsJ8d26BhN2ryy+c 91SZ4bXo7kwVIH1gWxA4ou2bLSpFNhdSMajy5tXS3D6vxc9ROTRJfp6lwjcl4Yh1 EZUmmJJ49bOlztll+fqhdFyGQbz1UGxEqmcpvaKISeZYwcBGdTPRZq9est+Ywzgs Ey32R3inqR9TlL0ydQiRJSVpwqDK+pbjuw== -----END CERTIFICATE-----Generated at Thu Feb 19 03:14:06 2026 by rpki-client