$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA31E8AD07ACB0D12007DCE39E0F54D13D470890.cer File: DA31E8AD07ACB0D12007DCE39E0F54D13D470890.cer (raw, json) Hash identifier: TbK8Y/eY9Ep4WXyaayt5hdgezn8UnZ9Sg+zRzx6oyMg= Subject key identifier: DA:31:E8:AD:07:AC:B0:D1:20:07:DC:E3:9E:0F:54:D1:3D:47:08:90 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 596FF564F880569DCB2B2972E8F3669D27EB5B07 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/3A3D4CF1C0BF2F5C7DBD49B6B076EA5439A612D757262EAB9EEEF4301695074C/0/DA31E8AD07ACB0D12007DCE39E0F54D13D470890.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/3A3D4CF1C0BF2F5C7DBD49B6B076EA5439A612D757262EAB9EEEF4301695074C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:50:53 +0000 Certificate not after: Tue 26 Jan 2027 17:55:53 +0000 Subordinate resources: AS: 266882 IP: 201.148.232.0/22 IP: 2803:5580::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:6f:f5:64:f8:80:56:9d:cb:2b:29:72:e8:f3:66:9d:27:eb:5b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:50:53 2026 GMT Not After : Jan 26 17:55:53 2027 GMT Subject: CN=DA31E8AD07ACB0D12007DCE39E0F54D13D470890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2e:ac:5d:ac:de:78:08:ad:e3:47:aa:bb:a1: 78:03:66:d9:7b:9d:a3:5b:0d:c3:ab:ee:8d:8b:5f: ce:74:5b:ec:cb:4e:67:4c:af:b7:cb:3b:66:08:86: e0:a8:e3:a8:b1:6f:4a:a5:3d:f2:b3:b5:93:39:36: 8f:02:b9:d5:78:34:72:4e:38:8d:b2:cd:2d:8c:fe: ac:22:e4:fd:d5:10:12:6e:04:60:fd:47:ed:b0:9d: ec:1d:1a:47:7b:f2:e4:3c:43:e7:bf:a9:1f:b7:a3: 75:3d:7b:08:11:2e:a6:a9:24:29:e7:bc:4f:e8:29: 1d:51:08:cb:4a:1c:d3:ba:19:7f:6b:54:dd:82:ee: 00:18:4c:1b:b0:74:56:f3:96:bd:49:06:f6:67:f3: df:37:73:6f:3b:9a:99:e8:ed:91:9e:33:88:61:31: 03:0b:20:51:24:32:b4:48:bd:74:72:43:71:2a:4d: 29:72:42:75:b8:83:64:d9:f7:9a:7b:38:01:fd:26: f2:2f:d7:31:76:9b:06:d1:2e:ba:7e:5f:90:07:c5: b2:ef:b9:b7:3e:d7:40:c6:e9:00:42:43:89:b6:c2: 6b:8c:cf:5b:88:d1:68:e0:73:e3:a6:bb:56:7e:16: 03:ac:d1:9c:71:aa:87:69:27:cb:a3:69:4b:44:a8: 6e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DA:31:E8:AD:07:AC:B0:D1:20:07:DC:E3:9E:0F:54:D1:3D:47:08:90 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3A3D4CF1C0BF2F5C7DBD49B6B076EA5439A612D757262EAB9EEEF4301695074C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3A3D4CF1C0BF2F5C7DBD49B6B076EA5439A612D757262EAB9EEEF4301695074C/0/DA31E8AD07ACB0D12007DCE39E0F54D13D470890.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.148.232.0/22 IPv6: 2803:5580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266882 Signature Algorithm: sha256WithRSAEncryption 4c:22:78:f8:59:84:fd:00:aa:24:2d:a8:71:ac:8e:2a:51:ab: 2f:51:ed:a6:2b:eb:01:64:1c:43:89:1c:50:a4:25:d8:55:d3: 0d:73:20:86:83:74:70:88:a3:cb:39:4a:84:6b:48:e7:d1:b7: 5b:12:a2:38:79:d5:e5:98:b0:59:ac:a6:b1:9e:d9:bf:33:17: 8b:61:81:cf:90:b1:1a:09:97:12:84:ba:fa:a5:9c:6c:21:99: 81:e2:5e:03:40:e5:25:a8:34:ab:a6:ec:9a:5f:2e:6a:69:38: 18:11:a8:c4:e9:fc:6e:39:4b:6b:8c:4a:bd:1d:6a:c0:28:2a: bc:35:db:a2:33:54:6b:17:c2:bb:55:05:73:f8:ba:47:b9:c6: a6:fc:fc:b5:80:c9:ea:59:88:0f:83:5c:a3:50:34:9d:56:79: 16:30:ad:f6:78:65:22:2c:79:24:92:00:90:f8:cc:38:a7:84: b7:52:b2:da:56:bd:67:8b:f3:01:70:3f:bd:6a:af:be:5a:48: 47:af:25:40:e8:3b:c3:43:9a:a4:c3:a3:5a:be:d4:fa:2a:48: 43:95:f1:08:51:ae:82:f4:26:8b:40:bd:25:9f:08:6c:56:05: 39:85:65:13:ed:19:6d:e3:ed:fc:c2:d5:bd:85:e1:28:1b:8a: 22:cd:a8:62 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUWW/1ZPiAVp3LKyly6PNmnSfrWwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzUwNTNaFw0yNzAxMjYxNzU1NTNaMDMxMTAvBgNV BAMTKERBMzFFOEFEMDdBQ0IwRDEyMDA3RENFMzlFMEY1NEQxM0Q0NzA4OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXLqxdrN54CK3jR6q7oXgDZtl7 naNbDcOr7o2LX850W+zLTmdMr7fLO2YIhuCo46ixb0qlPfKztZM5No8CudV4NHJO OI2yzS2M/qwi5P3VEBJuBGD9R+2wnewdGkd78uQ8Q+e/qR+3o3U9ewgRLqapJCnn vE/oKR1RCMtKHNO6GX9rVN2C7gAYTBuwdFbzlr1JBvZn8983c287mpno7ZGeM4hh MQMLIFEkMrRIvXRyQ3EqTSlyQnW4g2TZ95p7OAH9JvIv1zF2mwbRLrp+X5AHxbLv ubc+10DG6QBCQ4m2wmuMz1uI0Wjgc+Omu1Z+FgOs0ZxxqodpJ8ujaUtEqG6VAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTaMeitB6yw0SAH 3OOeD1TRPUcIkDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM0EzRDRDRjFDMEJGMkY1QzdEQkQ0OUI2 QjA3NkVBNTQzOUE2MTJENzU3MjYyRUFCOUVFRUY0MzAxNjk1MDc0Qy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zQTNENENGMUMwQkYyRjVDN0RCRDQ5QjZCMDc2RUE1NDM5QTYxMkQ3NTcy NjJFQUI5RUVFRjQzMDE2OTUwNzRDLzAvREEzMUU4QUQwN0FDQjBEMTIwMDdEQ0Uz OUUwRjU0RDEzRDQ3MDg5MC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCyZToMA0EAgAC MAcDBQAoA1WAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQSgjANBgkqhkiG9w0B AQsFAAOCAQEATCJ4+FmE/QCqJC2ocayOKlGrL1HtpivrAWQcQ4kcUKQl2FXTDXMg hoN0cIijyzlKhGtI59G3WxKiOHnV5ZiwWaymsZ7ZvzMXi2GBz5CxGgmXEoS6+qWc bCGZgeJeA0DlJag0q6bsml8uamk4GBGoxOn8bjlLa4xKvR1qwCgqvDXbojNUaxfC u1UFc/i6R7nGpvz8tYDJ6lmID4Nco1A0nVZ5FjCt9nhlIix5JJIAkPjMOKeEt1Ky 2la9Z4vzAXA/vWqvvlpIR68lQOg7w0OapMOjWr7U+ipIQ5XxCFGugvQmi0C9JZ8I bFYFOYVlE+0ZbePt/MLVvYXhKBuKIs2oYg== -----END CERTIFICATE-----Generated at Thu Feb 19 01:39:04 2026 by rpki-client