$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.cer File: D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.cer (raw, json) Hash identifier: FmUz/bxwpLJV+Oue8IGanrks/1bseoBQeshZa4OnU+c= Subject key identifier: D6:6B:84:79:A4:BF:E4:E7:C3:D4:0B:FB:86:26:BE:9E:87:84:05:D1 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 8851E8B55A7AFE39B252A8099A08BF59CD689F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/05EA1E1B1EBC88335304FDE0BA38FBB2E72D47BEC2B95E350CBCBDC5D87D6781/0/D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/05EA1E1B1EBC88335304FDE0BA38FBB2E72D47BEC2B95E350CBCBDC5D87D6781/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 22:24:48 +0000 Certificate not after: Tue 26 Jan 2027 22:29:48 +0000 Subordinate resources: AS: 272115 IP: 2801:171::/44 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88:51:e8:b5:5a:7a:fe:39:b2:52:a8:09:9a:08:bf:59:cd:68:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 22:24:48 2026 GMT Not After : Jan 26 22:29:48 2027 GMT Subject: CN=D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:5e:aa:00:04:1b:3e:ec:69:b7:16:84:b8: 7f:5f:45:a3:76:56:13:4e:f4:43:d9:4f:11:aa:55: 4e:75:f2:3e:c3:ec:14:03:a8:e0:e2:db:42:da:60: 66:7a:e0:9c:65:7c:bd:77:aa:5d:cb:7b:b7:23:82: 5f:c9:da:c5:cf:63:88:81:47:7c:fd:8c:f9:e8:48: 6f:38:c6:e4:c6:a1:08:ed:33:19:40:9a:b3:37:f9: e1:fc:10:dd:90:65:4f:40:54:66:8f:ae:72:e0:e8: 56:06:02:e5:ae:40:a3:7b:4a:08:7e:e7:27:ed:96: 66:7d:68:cc:75:ff:68:b3:5a:5b:c4:a6:b2:fb:31: ef:bf:36:ef:61:8e:ee:11:78:d5:bb:e5:60:72:33: b4:90:0a:4c:29:46:42:c8:c8:9c:0a:ea:e9:dc:01: 13:30:2a:4e:4d:c0:a3:78:24:82:40:71:76:4c:34: ab:aa:20:41:ff:11:61:32:a3:14:34:7e:f9:6e:75: a9:ad:de:9f:21:b4:52:05:2f:4b:07:ef:47:62:59: d3:bd:8e:83:f0:48:51:62:bd:1a:5d:59:b1:4d:65: 70:0a:55:b1:0b:14:e1:72:5c:41:32:b4:5b:1d:d5: 0e:07:32:0e:e2:0b:1f:f1:f2:6a:5b:21:ce:4f:c1: 85:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:6B:84:79:A4:BF:E4:E7:C3:D4:0B:FB:86:26:BE:9E:87:84:05:D1 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/05EA1E1B1EBC88335304FDE0BA38FBB2E72D47BEC2B95E350CBCBDC5D87D6781/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/05EA1E1B1EBC88335304FDE0BA38FBB2E72D47BEC2B95E350CBCBDC5D87D6781/0/D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2801:171::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272115 Signature Algorithm: sha256WithRSAEncryption 73:9b:82:5a:d7:e6:e4:56:e4:1f:c9:b3:df:e1:8d:9e:82:00: 26:bd:5d:e7:d2:39:79:8a:69:2e:84:b2:0e:06:21:be:f9:0f: a7:85:36:da:11:dc:71:ea:05:a4:4e:68:85:c7:59:70:f5:93: 28:6c:19:a9:0a:ef:6e:75:e8:2d:ca:88:42:4e:66:cd:c9:10: fa:c5:c9:c0:81:77:06:0f:cd:6b:cc:48:34:d5:a0:dd:c8:ea: 63:00:89:27:17:b8:75:4e:e4:8e:f2:7d:25:cf:96:db:62:1c: 2c:93:42:b8:b1:c6:d1:ab:79:4f:2a:f4:cb:a1:4f:79:5f:96: fd:6c:c7:20:c5:66:7d:c2:a5:83:d5:02:c0:8f:e1:b3:33:1b: d9:7b:bd:eb:ad:49:91:89:86:85:83:ec:b3:db:89:05:5c:44: 1a:5b:94:45:32:5f:90:7e:b7:19:0c:4b:66:43:ab:5c:c0:03: 97:53:76:f8:5b:e3:16:1a:0f:3e:f8:1f:2a:1c:c7:88:57:81: 8f:73:82:93:c2:ab:5a:14:26:8a:64:78:05:69:76:94:c6:e8: ba:49:2c:fb:6f:49:75:32:b5:63:00:b8:6f:56:2e:dd:1a:eb: 3f:da:53:8d:8f:78:8f:1c:a0:78:45:e5:68:72:fa:b4:10:47: c1:f7:d7:91 -----BEGIN CERTIFICATE----- MIIGmTCCBYGgAwIBAgIUAIhR6LVaev45slKoCZoIv1nNaJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMjI0NDhaFw0yNzAxMjYyMjI5NDhaMDMxMTAvBgNV BAMTKEQ2NkI4NDc5QTRCRkU0RTdDM0Q0MEJGQjg2MjZCRTlFODc4NDA1RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5VV6qAAQbPuxptxaEuH9fRaN2 VhNO9EPZTxGqVU518j7D7BQDqODi20LaYGZ64JxlfL13ql3Le7cjgl/J2sXPY4iB R3z9jPnoSG84xuTGoQjtMxlAmrM3+eH8EN2QZU9AVGaPrnLg6FYGAuWuQKN7Sgh+ 5yftlmZ9aMx1/2izWlvEprL7Me+/Nu9hju4ReNW75WByM7SQCkwpRkLIyJwK6unc ARMwKk5NwKN4JIJAcXZMNKuqIEH/EWEyoxQ0fvludamt3p8htFIFL0sH70diWdO9 joPwSFFivRpdWbFNZXAKVbELFOFyXEEytFsd1Q4HMg7iCx/x8mpbIc5PwYV3AgMB AAGjggOjMIIDnzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTWa4R5pL/k58PU C/uGJr6eh4QF0TAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDVFQTFFMUIxRUJDODgzMzUzMDRGREUw QkEzOEZCQjJFNzJENDdCRUMyQjk1RTM1MENCQ0JEQzVEODdENjc4MS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wNUVBMUUxQjFFQkM4ODMzNTMwNEZERTBCQTM4RkJCMkU3MkQ0N0JFQzJC OTVFMzUwQ0JDQkRDNUQ4N0Q2NzgxLzAvRDY2Qjg0NzlBNEJGRTRFN0MzRDQwQkZC ODYyNkJFOUU4Nzg0MDVEMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAEBcQAAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwQm8zANBgkqhkiG9w0BAQsFAAOCAQEAc5uC Wtfm5FbkH8mz3+GNnoIAJr1d59I5eYppLoSyDgYhvvkPp4U22hHcceoFpE5ohcdZ cPWTKGwZqQrvbnXoLcqIQk5mzckQ+sXJwIF3Bg/Na8xINNWg3cjqYwCJJxe4dU7k jvJ9Jc+W22IcLJNCuLHG0at5Tyr0y6FPeV+W/WzHIMVmfcKlg9UCwI/hszMb2Xu9 661JkYmGhYPss9uJBVxEGluURTJfkH63GQxLZkOrXMADl1N2+FvjFhoPPvgfKhzH iFeBj3OCk8KrWhQmimR4BWl2lMboukks+29JdTK1YwC4b1Yu3RrrP9pTjY94jxyg eEXlaHL6tBBHwffXkQ== -----END CERTIFICATE-----Generated at Thu Feb 19 04:21:52 2026 by rpki-client