$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.cer File: D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.cer (raw, json) Hash identifier: lHRLap8y5cgurfoFEMqD/4mXe/AMQvH43sZ04W+1jVg= Subject key identifier: D6:0A:F8:08:8C:FC:FC:3A:52:D3:18:D5:8C:9C:FD:12:1C:E6:F7:C7 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1E323EA65969089DACC227C3002D4F998FAEC0B2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/4FEBC9126C0E0A7E03F7E5536F8E59DB9AC30C0363C5512AD9E7F2D30483A16E/0/D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/4FEBC9126C0E0A7E03F7E5536F8E59DB9AC30C0363C5512AD9E7F2D30483A16E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:58:06 +0000 Certificate not after: Tue 26 Jan 2027 18:03:06 +0000 Subordinate resources: AS: 52246 IP: 190.99.88.0/22 IP: 2803:6690::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:32:3e:a6:59:69:08:9d:ac:c2:27:c3:00:2d:4f:99:8f:ae:c0:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:58:06 2026 GMT Not After : Jan 26 18:03:06 2027 GMT Subject: CN=D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:03:ec:b8:1f:15:dd:df:47:fb:17:0b:1e:8b: 84:2f:e1:17:ce:f2:e0:b2:9c:d4:ea:ab:7d:97:38: b3:cf:f5:0b:3d:b7:65:36:bc:ed:06:27:b0:41:33: 5f:50:7f:a3:82:db:24:87:00:23:f5:d5:06:1c:8f: 85:27:c2:2f:6e:8c:37:65:42:80:ce:4d:d7:79:4f: b6:f4:b1:ef:2c:bd:82:07:b0:37:07:9c:59:6d:8c: a9:bc:73:69:2b:f6:be:11:25:9c:9b:c1:62:5a:72: 6e:58:e3:03:17:ff:24:e3:94:d2:8f:dc:98:59:31: e9:74:29:c9:80:09:f9:fb:eb:01:6a:a1:25:ef:c5: 77:a0:73:1f:f0:b1:72:c9:43:39:46:85:a6:16:cf: da:5e:60:e6:52:8f:9c:44:eb:1f:d2:ad:d2:a8:bf: 64:17:5f:bd:98:41:5a:0c:b3:98:c6:90:f7:b6:98: 9c:36:55:be:b8:96:8e:8b:a6:2c:a4:74:ee:2e:76: 67:07:1c:e6:c0:08:8c:12:1b:ce:b5:71:68:4a:0f: 0a:40:1d:f4:9f:5f:be:af:17:f7:a6:04:f6:67:c7: d1:9e:ac:bf:ee:f3:3f:92:2d:c6:81:bc:92:28:c1: b7:1b:9b:63:2b:07:9d:ca:b5:c6:fd:e7:0d:7c:a0: 61:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:0A:F8:08:8C:FC:FC:3A:52:D3:18:D5:8C:9C:FD:12:1C:E6:F7:C7 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4FEBC9126C0E0A7E03F7E5536F8E59DB9AC30C0363C5512AD9E7F2D30483A16E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4FEBC9126C0E0A7E03F7E5536F8E59DB9AC30C0363C5512AD9E7F2D30483A16E/0/D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.99.88.0/22 IPv6: 2803:6690::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52246 Signature Algorithm: sha256WithRSAEncryption 0e:06:57:d7:9c:13:7a:ff:86:f0:67:00:e9:6c:60:59:4d:5b: 2a:19:04:01:aa:b9:ff:e2:94:4f:8f:a2:74:b4:b7:e2:5f:ad: 6f:ed:78:c1:f3:f4:c5:a3:b7:8b:9e:fa:69:34:20:32:81:ef: 51:8a:85:ad:a3:a5:9a:79:22:73:d0:7d:81:5c:b1:8d:36:de: 02:b8:5f:77:fa:af:9b:55:ad:f5:47:e3:77:ef:1d:c5:c1:5c: bb:a3:0d:d0:30:24:c9:59:88:6f:c8:8d:93:c3:08:3c:90:da: 7e:c9:bb:0c:81:3f:6b:23:34:43:c4:5f:e2:9d:c0:b4:06:b9: 98:cd:4a:9a:96:4b:f5:d5:73:be:84:4f:62:a9:6f:6c:98:ec: 5b:03:36:85:2c:b5:cf:b3:be:86:b3:99:e8:64:4c:a0:be:55: 8b:fc:a4:1b:e4:20:bb:1b:fb:46:a9:56:34:96:35:a8:4f:14: 60:24:d2:d3:74:b4:90:b3:6c:77:de:ec:31:fd:52:27:f0:14: 0a:b9:db:46:5a:62:4c:bc:c6:e0:8f:d7:10:ab:84:2b:3d:32: 19:55:6d:de:2f:3b:03:cf:0b:21:3c:61:3c:aa:d7:ca:a4:f6: 54:01:5c:53:67:c2:57:de:3c:1d:99:55:74:7b:7f:a6:59:e7: f6:2f:e6:c1 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUHjI+pllpCJ2swifDAC1PmY+uwLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzU4MDZaFw0yNzAxMjYxODAzMDZaMDMxMTAvBgNV BAMTKEQ2MEFGODA4OENGQ0ZDM0E1MkQzMThENThDOUNGRDEyMUNFNkY3QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMA+y4HxXd30f7Fwsei4Qv4RfO 8uCynNTqq32XOLPP9Qs9t2U2vO0GJ7BBM19Qf6OC2ySHACP11QYcj4Unwi9ujDdl QoDOTdd5T7b0se8svYIHsDcHnFltjKm8c2kr9r4RJZybwWJacm5Y4wMX/yTjlNKP 3JhZMel0KcmACfn76wFqoSXvxXegcx/wsXLJQzlGhaYWz9peYOZSj5xE6x/SrdKo v2QXX72YQVoMs5jGkPe2mJw2Vb64lo6LpiykdO4udmcHHObACIwSG861cWhKDwpA HfSfX76vF/emBPZnx9GerL/u8z+SLcaBvJIowbcbm2MrB53Ktcb95w18oGENAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTWCvgIjPz8OlLT GNWMnP0SHOb3xzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNEZFQkM5MTI2QzBFMEE3RTAzRjdFNTUz NkY4RTU5REI5QUMzMEMwMzYzQzU1MTJBRDlFN0YyRDMwNDgzQTE2RS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80RkVCQzkxMjZDMEUwQTdFMDNGN0U1NTM2RjhFNTlEQjlBQzMwQzAzNjND NTUxMkFEOUU3RjJEMzA0ODNBMTZFLzAvRDYwQUY4MDg4Q0ZDRkMzQTUyRDMxOEQ1 OEM5Q0ZEMTIxQ0U2RjdDNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCvmNYMA0EAgAC MAcDBQAoA2aQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMFjANBgkqhkiG9w0B AQsFAAOCAQEADgZX15wTev+G8GcA6WxgWU1bKhkEAaq5/+KUT4+idLS34l+tb+14 wfP0xaO3i576aTQgMoHvUYqFraOlmnkic9B9gVyxjTbeArhfd/qvm1Wt9Ufjd+8d xcFcu6MN0DAkyVmIb8iNk8MIPJDafsm7DIE/ayM0Q8Rf4p3AtAa5mM1KmpZL9dVz voRPYqlvbJjsWwM2hSy1z7O+hrOZ6GRMoL5Vi/ykG+Qguxv7RqlWNJY1qE8UYCTS 03S0kLNsd97sMf1SJ/AUCrnbRlpiTLzG4I/XEKuEKz0yGVVt3i87A88LITxhPKrX yqT2VAFcU2fCV948HZlVdHt/plnn9i/mwQ== -----END CERTIFICATE-----Generated at Thu Feb 19 04:20:53 2026 by rpki-client