$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.cer File: EBDDE091CD51F6714942A5267FBC4B80AFB4E022.cer (raw, json) Hash identifier: SoORVkF+M8yjMTTsaEY0UmK1bcR7IlsTrwOmBxahjJc= Subject key identifier: EB:DD:E0:91:CD:51:F6:71:49:42:A5:26:7F:BC:4B:80:AF:B4:E0:22 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 0AB2CB8F435BAC768A5FF8630EC25F7E7F1289E5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:50:52 +0000 Certificate not after: Tue 26 Jan 2027 17:55:52 +0000 Subordinate resources: AS: 265688 IP: 138.117.84.0/22 IP: 2803:1840::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Feb 2026 22:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b2:cb:8f:43:5b:ac:76:8a:5f:f8:63:0e:c2:5f:7e:7f:12:89:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:50:52 2026 GMT Not After : Jan 26 17:55:52 2027 GMT Subject: CN=EBDDE091CD51F6714942A5267FBC4B80AFB4E022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:03:a8:c4:64:ed:bd:44:41:6e:4e:24:74:a8: 2c:c0:14:bd:ed:c0:62:f3:5d:56:f0:7c:bb:0d:b4: c0:b9:a3:da:8a:6c:7d:70:dc:01:78:c3:39:39:62: dc:02:8b:d8:4f:20:49:b5:0a:f1:e0:fa:99:a1:92: 9e:ce:02:42:00:29:c3:c8:82:42:42:59:48:48:f3: 88:03:79:6a:0e:2b:dd:55:1f:9c:0a:f4:f3:2b:fe: 2e:6b:3f:96:d7:b1:b2:13:d4:de:69:21:24:e3:af: 08:da:07:d0:09:e4:03:03:a2:06:f9:a5:c4:b3:90: bd:6f:92:fe:ca:19:ed:62:a9:41:3d:ea:97:10:2f: b2:f9:11:44:29:3d:4a:8c:31:de:a4:d5:e1:cf:1e: fa:6a:0d:11:bb:55:87:3a:4c:da:fc:47:02:b3:22: 4e:0c:74:55:69:b7:ce:d0:30:4d:64:37:47:7e:3d: c9:26:39:7a:40:20:5f:0c:67:0f:a3:43:30:19:2f: ac:a2:6c:31:90:14:5a:da:86:82:68:e1:0b:df:7e: 10:02:e6:99:81:30:fa:2b:fb:ce:07:c2:17:33:94: 00:cd:30:bb:09:08:ea:27:8b:f4:d2:8b:1a:ae:32: 70:2c:a7:41:b7:56:b4:ca:36:91:b6:72:66:92:d2: 86:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:DD:E0:91:CD:51:F6:71:49:42:A5:26:7F:BC:4B:80:AF:B4:E0:22 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.117.84.0/22 IPv6: 2803:1840::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265688 Signature Algorithm: sha256WithRSAEncryption 5d:5e:9c:b3:32:ff:e1:fb:27:67:28:51:de:98:e3:41:18:8b: 57:e4:8a:2f:e6:9b:12:da:57:7e:3b:e8:fd:d6:05:aa:c3:c4: f2:ae:13:56:6a:f0:e3:1b:c7:4b:23:3b:96:82:34:8d:d3:00: a7:9c:60:9d:07:d3:7c:f3:6f:59:1a:62:99:30:f8:d3:fc:f8: c8:4c:6a:d0:bb:74:a6:93:83:c4:cb:3a:12:c2:7d:20:d6:3b: a0:68:b6:e4:ac:a7:9a:77:68:0a:dd:20:b8:d2:ea:09:58:5b: 01:6c:d0:22:f8:4d:86:9d:35:3d:aa:94:89:46:dd:03:68:4b: aa:2d:01:b5:54:56:d1:f0:9a:d5:87:33:ae:b6:ca:cd:02:8d: 93:ed:fb:b8:91:68:12:36:f8:7a:d5:3c:63:d5:65:f8:55:d1: 87:d5:2b:d8:48:19:af:46:5d:3b:d0:e7:a5:e8:40:9b:40:04: e3:9b:a9:8f:62:01:86:ed:91:1a:ae:cc:6b:e1:99:a1:6a:1e: 3d:6b:ef:7b:ff:cd:c6:7a:40:07:19:03:a3:24:fd:c3:f8:18: e5:8d:d9:b1:af:dd:b8:1e:db:81:96:d9:42:1f:d7:f1:2b:f7: 42:fe:b1:d4:64:78:e4:09:4c:87:e8:44:fe:0b:ea:c8:35:70: 54:bb:31:3d -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUCrLLj0NbrHaKX/hjDsJffn8SieUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzUwNTJaFw0yNzAxMjYxNzU1NTJaMDMxMTAvBgNV BAMTKEVCRERFMDkxQ0Q1MUY2NzE0OTQyQTUyNjdGQkM0QjgwQUZCNEUwMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChA6jEZO29REFuTiR0qCzAFL3t wGLzXVbwfLsNtMC5o9qKbH1w3AF4wzk5YtwCi9hPIEm1CvHg+pmhkp7OAkIAKcPI gkJCWUhI84gDeWoOK91VH5wK9PMr/i5rP5bXsbIT1N5pISTjrwjaB9AJ5AMDogb5 pcSzkL1vkv7KGe1iqUE96pcQL7L5EUQpPUqMMd6k1eHPHvpqDRG7VYc6TNr8RwKz Ik4MdFVpt87QME1kN0d+PckmOXpAIF8MZw+jQzAZL6yibDGQFFrahoJo4QvffhAC 5pmBMPor+84HwhczlADNMLsJCOoni/TSixquMnAsp0G3VrTKNpG2cmaS0obPAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTr3eCRzVH2cUlC pSZ/vEuAr7TgIjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzEwRjg0NzQzNzA2MjUzQTlFOTE5QkZD NzE0QzRENkREQzRFNzNENUREMjdDRDU1REEyN0FEQ0RCODYyQTE1Qy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DMTBGODQ3NDM3MDYyNTNBOUU5MTlCRkM3MTRDNEQ2RERDNEU3M0Q1REQy N0NENTVEQTI3QURDREI4NjJBMTVDLzAvRUJEREUwOTFDRDUxRjY3MTQ5NDJBNTI2 N0ZCQzRCODBBRkI0RTAyMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCinVUMA0EAgAC MAcDBQAoAxhAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQN2DANBgkqhkiG9w0B AQsFAAOCAQEAXV6cszL/4fsnZyhR3pjjQRiLV+SKL+abEtpXfjvo/dYFqsPE8q4T Vmrw4xvHSyM7loI0jdMAp5xgnQfTfPNvWRpimTD40/z4yExq0Lt0ppODxMs6EsJ9 INY7oGi25KynmndoCt0guNLqCVhbAWzQIvhNhp01PaqUiUbdA2hLqi0BtVRW0fCa 1YczrrbKzQKNk+37uJFoEjb4etU8Y9Vl+FXRh9Ur2EgZr0ZdO9DnpehAm0AE45up j2IBhu2RGq7Ma+GZoWoePWvve//NxnpABxkDoyT9w/gY5Y3Zsa/duB7bgZbZQh/X 8Sv3Qv6x1GR45AlMh+hE/gvqyDVwVLsxPQ== -----END CERTIFICATE-----Generated at Wed Feb 18 23:56:29 2026 by rpki-client