$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer File: DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer (raw, json) Hash identifier: yixPyRS0YzVC4tLyKFFxdDGa6r9MhFSsLo+AiYnXQ1A= Subject key identifier: DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 52774ABFB19FE5300E005398E72FEBD4DFD45848 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:50:49 +0000 Certificate not after: Tue 26 Jan 2027 17:55:49 +0000 Subordinate resources: AS: 266696 IP: 45.228.232.0/24 IP: 2803:d20::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:77:4a:bf:b1:9f:e5:30:0e:00:53:98:e7:2f:eb:d4:df:d4:58:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:50:49 2026 GMT Not After : Jan 26 17:55:49 2027 GMT Subject: CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:17:d8:05:77:af:22:0b:b9:95:dd:32:0b:17: 30:e4:47:a2:e7:ff:9f:fb:a7:f0:14:2b:38:20:7e: 3c:5b:92:ee:ab:64:9b:78:86:f4:81:eb:7d:92:09: d0:57:2e:ff:d5:84:83:d0:9d:f8:c5:f8:45:d3:b8: 6d:3f:f5:85:1d:d7:28:57:97:1b:f0:c6:45:ce:45: d7:fb:6e:b7:fb:37:6c:8e:cf:23:b8:bc:b1:a8:8c: 9e:2f:aa:f1:57:01:79:21:f6:b4:fe:af:a1:91:fb: 5b:a8:f4:22:f4:9a:ca:74:11:f2:1d:30:7e:ce:9a: 73:af:fe:73:41:5e:3e:35:e7:f1:17:5e:8e:94:13: 05:49:a6:71:78:c2:52:ef:12:6c:7e:dd:e8:f7:d5: 5d:f3:f3:f4:23:4f:96:54:b7:d0:42:6c:84:73:f1: 9c:6a:f2:22:ad:c8:44:bf:46:7a:fc:0f:44:ad:e1: 78:59:d5:3e:78:2d:dd:80:55:fe:31:a8:28:2c:9c: e8:2c:15:41:ac:c9:6e:3e:59:30:51:cc:f3:10:e3: ea:f4:1b:09:45:2b:a3:7a:c6:fb:9e:38:f9:7a:fc: f7:54:b7:2e:be:26:61:ce:a9:c3:54:79:76:a1:a4: 32:21:46:4d:3f:1e:c9:fe:f4:f6:6f:48:8f:4a:28: c3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.228.232.0/24 IPv6: 2803:d20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266696 Signature Algorithm: sha256WithRSAEncryption 30:cc:fa:ad:c0:a9:d7:73:55:b6:f4:66:cc:ea:49:81:74:a3: 92:ee:87:f8:f2:20:67:b4:95:1a:0c:2e:9d:38:60:b5:36:de: d7:b8:5d:99:e4:18:4c:a2:79:9a:25:2b:f9:e6:e0:b4:e4:06: 7e:4b:d8:c1:a4:d9:8f:bf:66:7f:1a:b8:c2:16:28:d6:29:20: 2c:99:e2:e1:86:9f:33:64:34:3c:78:22:ca:d4:c6:e1:d2:01: 57:74:bd:1a:4f:0e:81:fb:9b:aa:32:0b:69:26:ee:9f:e1:94: d4:36:bb:94:bf:c7:e3:4e:4d:bc:3e:56:56:dd:da:82:f8:e0: e8:ff:c9:b0:05:a9:6f:48:38:cd:84:56:3f:48:50:0f:ad:d5: e2:4a:81:50:fa:10:63:c8:10:ed:32:59:18:08:a1:f0:21:a5: b5:4a:ad:f4:2a:3e:2e:22:9a:f5:8d:d1:5d:c1:54:89:a3:fe: 65:00:52:e6:6e:b1:ca:74:9c:15:d0:52:c7:26:5f:8c:bd:53: be:4e:6c:29:e6:38:fa:42:c2:50:9d:26:84:cd:40:53:f0:f9: 8e:05:2a:8a:89:7b:2d:ee:13:e1:26:39:52:95:d2:bb:0e:2f: ac:8b:09:38:da:ed:5b:0b:18:1b:7c:96:ca:37:f5:4c:c9:e3: f9:a0:34:33 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUUndKv7Gf5TAOAFOY5y/r1N/UWEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzUwNDlaFw0yNzAxMjYxNzU1NDlaMDMxMTAvBgNV BAMTKERFRkE1QzVBRkU2M0Y2QjAyQzNDMzMzOTlEMkMxOTJFMjREQ0Y3RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiF9gFd68iC7mV3TILFzDkR6Ln /5/7p/AUKzggfjxbku6rZJt4hvSB632SCdBXLv/VhIPQnfjF+EXTuG0/9YUd1yhX lxvwxkXORdf7brf7N2yOzyO4vLGojJ4vqvFXAXkh9rT+r6GR+1uo9CL0msp0EfId MH7OmnOv/nNBXj415/EXXo6UEwVJpnF4wlLvEmx+3ej31V3z8/QjT5ZUt9BCbIRz 8Zxq8iKtyES/Rnr8D0St4XhZ1T54Ld2AVf4xqCgsnOgsFUGsyW4+WTBRzPMQ4+r0 GwlFK6N6xvueOPl6/PdUty6+JmHOqcNUeXahpDIhRk0/Hsn+9PZvSI9KKMM1AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTe+lxa/mP2sCw8 MzmdLBkuJNz3+zAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDkzOUQ5QUJFQTY5MTU3MEE1RDgwNEMy MDMxNDlCMzBBREE4NzBERjlEMzY4RkUxNUM1M0U1OEIxQjRERTNGQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EOTM5RDlBQkVBNjkxNTcwQTVEODA0QzIwMzE0OUIzMEFEQTg3MERGOUQz NjhGRTE1QzUzRTU4QjFCNERFM0ZDLzAvREVGQTVDNUFGRTYzRjZCMDJDM0MzMzM5 OUQyQzE5MkUyNERDRjdGQi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALeToMA0EAgAC MAcDBQAoAw0gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQRyDANBgkqhkiG9w0B AQsFAAOCAQEAMMz6rcCp13NVtvRmzOpJgXSjku6H+PIgZ7SVGgwunThgtTbe17hd meQYTKJ5miUr+ebgtOQGfkvYwaTZj79mfxq4whYo1ikgLJni4YafM2Q0PHgiytTG 4dIBV3S9Gk8OgfubqjILaSbun+GU1Da7lL/H405NvD5WVt3agvjg6P/JsAWpb0g4 zYRWP0hQD63V4kqBUPoQY8gQ7TJZGAih8CGltUqt9Co+LiKa9Y3RXcFUiaP+ZQBS 5m6xynScFdBSxyZfjL1Tvk5sKeY4+kLCUJ0mhM1AU/D5jgUqiol7Le4T4SY5UpXS uw4vrIsJONrtWwsYG3yWyjf1TMnj+aA0Mw== -----END CERTIFICATE-----Generated at Thu Feb 19 00:15:57 2026 by rpki-client