$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.cer File: D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.cer (raw, json) Hash identifier: 97ozKaZD5f8R/pxCnCJY9Dr1J3IEZ1dsAapoTTPNi5o= Subject key identifier: D6:24:E8:0C:8C:B9:C3:5D:4D:B5:ED:41:AB:AA:3B:7F:47:1A:CC:E4 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3B74DFADB64A24A7E3C48E814E4C769D29DBD985 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:50:51 +0000 Certificate not after: Tue 26 Jan 2027 17:55:51 +0000 Subordinate resources: AS: 263809 IP: 143.208.44.0/22 IP: 2803:5240::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:74:df:ad:b6:4a:24:a7:e3:c4:8e:81:4e:4c:76:9d:29:db:d9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:50:51 2026 GMT Not After : Jan 26 17:55:51 2027 GMT Subject: CN=D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f0:03:9e:99:3f:8e:0d:2b:b0:87:d8:95:e5: 13:74:8b:b0:08:b6:e0:6a:3d:08:44:12:ab:22:1b: 73:3d:02:ce:ed:cc:80:e8:9f:e1:30:16:82:a8:11: 18:bd:bc:2e:4c:c0:f3:65:48:f1:f5:19:0a:93:57: 10:c2:63:b3:cc:3b:24:c5:4b:ef:a5:e0:70:c1:15: 79:c0:99:7c:7a:01:06:2a:e2:4a:36:54:3d:56:da: 24:e7:83:68:76:4a:f1:79:cf:07:10:4d:3b:9b:3b: 38:bc:50:6e:f1:e8:f1:e2:94:e2:95:80:fe:07:0b: c8:fb:44:24:c0:6f:85:f4:9a:7e:7d:60:46:97:16: 02:3a:c7:b4:b6:fe:96:04:42:7a:d1:58:12:2c:c3: 1f:79:62:5e:0d:a0:eb:a5:ec:eb:34:82:da:1e:9a: f8:10:63:f4:de:05:c5:73:1d:30:d9:c7:b8:05:07: f7:7f:8b:9f:eb:f3:72:dc:e2:6b:fa:f5:e7:54:f4: db:fa:3f:e6:6e:3c:33:87:21:e5:82:65:41:1d:72: 91:20:2b:2f:48:f5:27:66:cd:af:9e:14:90:63:7d: 91:85:a6:41:47:7a:73:aa:b7:f6:8e:1f:3c:08:bb: 82:96:a1:51:ae:67:0a:3a:98:c9:59:09:6e:03:46: 87:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:24:E8:0C:8C:B9:C3:5D:4D:B5:ED:41:AB:AA:3B:7F:47:1A:CC:E4 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.208.44.0/22 IPv6: 2803:5240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263809 Signature Algorithm: sha256WithRSAEncryption 27:2f:e3:c7:48:44:81:bd:86:a6:86:fe:03:72:55:61:b5:8b: 61:10:78:87:1b:1f:61:e9:3c:1a:e1:b8:66:4c:c4:f3:86:27: e7:62:cb:04:7d:ab:fd:fe:9d:05:0e:56:32:fa:73:3e:c2:13: d0:38:f9:02:e7:42:e1:dc:26:ff:c3:81:00:a0:fd:67:c5:ec: df:32:81:9d:9a:72:ee:e5:a9:cf:04:86:8b:50:bb:48:ce:35: a1:72:a5:ec:57:fa:a5:44:b2:ad:ba:4f:3f:08:b2:ad:38:1d: 83:5b:3e:ac:35:7f:d8:88:db:3e:a0:41:aa:c9:67:69:2b:e5: 25:a6:b0:53:c0:b5:7d:24:1b:5f:32:27:64:2e:6e:82:92:99: ec:c0:55:10:cc:90:a0:a3:ff:69:d9:25:89:72:7c:fa:52:15: e9:77:e1:7c:50:74:2f:db:c0:ff:51:77:09:4a:54:44:2e:dc: 08:f3:ed:8a:db:61:ab:80:6c:1b:0b:40:cc:83:8e:f4:24:87: 2f:df:ce:c1:fa:2a:3d:06:02:f7:d2:60:9d:b4:d4:94:8f:85: 0a:63:53:6b:5a:33:61:16:ef:e7:37:a2:b7:9a:e4:db:9c:ad: 30:9e:e1:85:32:9e:89:6d:51:c1:02:df:28:6a:6b:c5:27:de: 7f:13:26:e3 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUO3TfrbZKJKfjxI6BTkx2nSnb2YUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzUwNTFaFw0yNzAxMjYxNzU1NTFaMDMxMTAvBgNV BAMTKEQ2MjRFODBDOENCOUMzNUQ0REI1RUQ0MUFCQUEzQjdGNDcxQUNDRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/8AOemT+ODSuwh9iV5RN0i7AI tuBqPQhEEqsiG3M9As7tzIDon+EwFoKoERi9vC5MwPNlSPH1GQqTVxDCY7PMOyTF S++l4HDBFXnAmXx6AQYq4ko2VD1W2iTng2h2SvF5zwcQTTubOzi8UG7x6PHilOKV gP4HC8j7RCTAb4X0mn59YEaXFgI6x7S2/pYEQnrRWBIswx95Yl4NoOul7Os0gtoe mvgQY/TeBcVzHTDZx7gFB/d/i5/r83Lc4mv69edU9Nv6P+ZuPDOHIeWCZUEdcpEg Ky9I9Sdmza+eFJBjfZGFpkFHenOqt/aOHzwIu4KWoVGuZwo6mMlZCW4DRoeTAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTWJOgMjLnDXU21 7UGrqjt/RxrM5DAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDYwNDA0ODQ4OURGOEI0MEVGMzdFRTI2 REEzNjIzRTU0REJENTFEMkI5RUFGQTg1NzRBQzgxQ0FGQjFCMjQxMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENjA0MDQ4NDg5REY4QjQwRUYzN0VFMjZEQTM2MjNFNTREQkQ1MUQyQjlF QUZBODU3NEFDODFDQUZCMUIyNDExLzAvRDYyNEU4MEM4Q0I5QzM1RDREQjVFRDQx QUJBQTNCN0Y0NzFBQ0NFNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCj9AsMA0EAgAC MAcDBQAoA1JAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQGgTANBgkqhkiG9w0B AQsFAAOCAQEAJy/jx0hEgb2Gpob+A3JVYbWLYRB4hxsfYek8GuG4ZkzE84Yn52LL BH2r/f6dBQ5WMvpzPsIT0Dj5AudC4dwm/8OBAKD9Z8Xs3zKBnZpy7uWpzwSGi1C7 SM41oXKl7Ff6pUSyrbpPPwiyrTgdg1s+rDV/2IjbPqBBqslnaSvlJaawU8C1fSQb XzInZC5ugpKZ7MBVEMyQoKP/adkliXJ8+lIV6XfhfFB0L9vA/1F3CUpURC7cCPPt itthq4BsGwtAzIOO9CSHL9/OwfoqPQYC99JgnbTUlI+FCmNTa1ozYRbv5zeit5rk 25ytMJ7hhTKeiW1RwQLfKGprxSfefxMm4w== -----END CERTIFICATE-----Generated at Thu Feb 19 00:10:56 2026 by rpki-client