$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.cer File: DDF12A57816F6E182AFB03FDFA87723268AC1CAF.cer (raw, json) Hash identifier: EV0Zjz6mnCJPfmKsz9xfHDOYYQnXuT+bfxMgT/iNt+o= Subject key identifier: DD:F1:2A:57:81:6F:6E:18:2A:FB:03:FD:FA:87:72:32:68:AC:1C:AF Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 3180D703163B5D4A8C4DA5DC7D89A3D00B89D189 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:50:42 +0000 Certificate not after: Tue 26 Jan 2027 17:55:42 +0000 Subordinate resources: AS: 263691 IP: 198.49.128.0/22 IP: 2803:3e80::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:80:d7:03:16:3b:5d:4a:8c:4d:a5:dc:7d:89:a3:d0:0b:89:d1:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:50:42 2026 GMT Not After : Jan 26 17:55:42 2027 GMT Subject: CN=DDF12A57816F6E182AFB03FDFA87723268AC1CAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b2:01:b5:56:8c:e2:ca:d3:89:6d:e1:5d:10: 5c:24:99:28:df:27:5c:df:23:fb:3b:67:5b:1a:1f: 4d:a2:46:04:6d:e2:5c:9d:e0:53:39:ec:28:7e:df: 09:df:0f:d3:39:fe:b1:1b:17:9d:d0:77:77:e6:08: 6b:71:cd:2c:3d:a2:26:fb:c8:fd:35:0b:31:6a:c7: f1:7b:c2:8f:cf:ed:a5:5b:17:5b:5b:fb:b9:7a:87: cf:e7:60:58:b7:70:8b:a0:27:57:d6:00:fb:6b:dc: 7a:cd:69:f1:47:29:10:c4:89:9a:3f:95:53:d1:5c: a1:3a:92:f0:10:1b:62:b9:77:3b:c7:f5:9d:69:d4: c8:8e:00:4c:56:ff:f5:d6:cc:2a:ce:4c:79:dd:83: d9:a7:11:e6:0b:ab:4f:b9:53:ae:b3:c2:7e:b2:40: 54:83:c6:13:0b:07:1b:b0:c5:99:71:c6:79:ab:64: 3a:d3:ed:50:f8:f6:1a:83:10:67:00:41:80:6e:4e: 96:2d:d9:1b:7a:75:f3:ae:3c:26:72:87:1b:dd:06: aa:f3:5c:b4:4f:94:40:b2:08:98:98:8b:b0:3b:0b: bd:de:f3:f6:e9:6a:c7:44:de:dc:bd:91:25:2d:64: 1c:1a:10:ca:71:ba:98:cc:24:55:22:61:ed:be:03: 06:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DD:F1:2A:57:81:6F:6E:18:2A:FB:03:FD:FA:87:72:32:68:AC:1C:AF X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B1A7116A6FB9E1DBDB3B927DE54932152091E741381694F035B6B51176288AC3/0/DDF12A57816F6E182AFB03FDFA87723268AC1CAF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.49.128.0/22 IPv6: 2803:3e80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263691 Signature Algorithm: sha256WithRSAEncryption 17:6e:ec:7a:d7:1e:ba:12:7d:87:bb:2f:0c:4c:cd:d8:42:cc: 8f:de:59:9a:25:85:8c:b9:51:e8:c0:24:a6:47:ff:26:b6:ca: e5:53:5f:74:fb:15:5a:76:75:dd:38:43:be:f3:eb:c9:8a:34: 59:db:63:4c:b9:0e:ba:90:76:ac:77:17:1d:c4:9a:14:2b:00: 08:ff:4f:bd:88:6d:b3:60:16:26:07:75:a4:d1:b1:ed:1f:93: d6:d4:7a:55:67:0b:4c:0d:ac:17:e9:b8:6c:b7:d2:da:cc:23: fe:f0:d7:10:db:46:17:0d:35:14:65:39:30:72:0a:07:90:75: e6:9f:2e:41:7b:c2:0e:f8:f9:8a:1a:f3:13:42:e0:45:7d:4a: f7:67:52:7b:7f:d4:90:57:ec:c7:42:a4:38:3c:e7:79:98:1a: 47:7c:f7:a6:70:1b:39:09:fb:cb:3c:b6:9c:44:d2:eb:f0:dd: a7:74:8b:14:75:1d:0d:53:c8:71:ef:92:59:8e:50:81:20:a6: 4c:4c:e3:8e:c5:fd:d6:e9:37:dc:8b:b7:97:4e:38:45:b3:98: eb:82:86:24:9f:d6:d8:2a:7d:9d:46:3d:f3:40:14:bc:49:f6: 10:56:05:ac:c2:c8:8f:73:d8:74:85:8a:d1:32:1e:52:4b:0e: 7a:00:a4:fe -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUMYDXAxY7XUqMTaXcfYmj0AuJ0YkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzUwNDJaFw0yNzAxMjYxNzU1NDJaMDMxMTAvBgNV BAMTKERERjEyQTU3ODE2RjZFMTgyQUZCMDNGREZBODc3MjMyNjhBQzFDQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWsgG1VoziytOJbeFdEFwkmSjf J1zfI/s7Z1saH02iRgRt4lyd4FM57Ch+3wnfD9M5/rEbF53Qd3fmCGtxzSw9oib7 yP01CzFqx/F7wo/P7aVbF1tb+7l6h8/nYFi3cIugJ1fWAPtr3HrNafFHKRDEiZo/ lVPRXKE6kvAQG2K5dzvH9Z1p1MiOAExW//XWzCrOTHndg9mnEeYLq0+5U66zwn6y QFSDxhMLBxuwxZlxxnmrZDrT7VD49hqDEGcAQYBuTpYt2Rt6dfOuPCZyhxvdBqrz XLRPlECyCJiYi7A7C73e8/bpasdE3ty9kSUtZBwaEMpxupjMJFUiYe2+AwZvAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTd8SpXgW9uGCr7 A/36h3IyaKwcrzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjFBNzExNkE2RkI5RTFEQkRCM0I5MjdE RTU0OTMyMTUyMDkxRTc0MTM4MTY5NEYwMzVCNkI1MTE3NjI4OEFDMy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CMUE3MTE2QTZGQjlFMURCREIzQjkyN0RFNTQ5MzIxNTIwOTFFNzQxMzgx Njk0RjAzNUI2QjUxMTc2Mjg4QUMzLzAvRERGMTJBNTc4MTZGNkUxODJBRkIwM0ZE RkE4NzcyMzI2OEFDMUNBRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCxjGAMA0EAgAC MAcDBQAoAz6AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQGCzANBgkqhkiG9w0B AQsFAAOCAQEAF27setceuhJ9h7svDEzN2ELMj95ZmiWFjLlR6MAkpkf/JrbK5VNf dPsVWnZ13ThDvvPryYo0WdtjTLkOupB2rHcXHcSaFCsACP9PvYhts2AWJgd1pNGx 7R+T1tR6VWcLTA2sF+m4bLfS2swj/vDXENtGFw01FGU5MHIKB5B15p8uQXvCDvj5 ihrzE0LgRX1K92dSe3/UkFfsx0KkODzneZgaR3z3pnAbOQn7yzy2nETS6/Ddp3SL FHUdDVPIce+SWY5QgSCmTEzjjsX91uk33Iu3l044RbOY64KGJJ/W2Cp9nUY980AU vEn2EFYFrMLIj3PYdIWK0TIeUksOegCk/g== -----END CERTIFICATE-----Generated at Thu Feb 19 07:19:01 2026 by rpki-client