$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFC95BAC1123D189B92EBD678C7CCE09083397C2.cer File: EFC95BAC1123D189B92EBD678C7CCE09083397C2.cer (raw, json) Hash identifier: qcMj2eyMT6Kd1PUigyn4S/+IT4YYeASKu3XNvqefg7o= Subject key identifier: EF:C9:5B:AC:11:23:D1:89:B9:2E:BD:67:8C:7C:CE:09:08:33:97:C2 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2DF37FCE2DF6B1640E67380C53E328ABF49D14B2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E364B8F7767B6DAAF449C86EDED6726CAC89C8714F55C3851E646559A81B4E19/0/EFC95BAC1123D189B92EBD678C7CCE09083397C2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E364B8F7767B6DAAF449C86EDED6726CAC89C8714F55C3851E646559A81B4E19/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:50:53 +0000 Certificate not after: Tue 26 Jan 2027 17:55:53 +0000 Subordinate resources: AS: 267748 IP: 167.250.196.0/23 IP: 2803:23a0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:f3:7f:ce:2d:f6:b1:64:0e:67:38:0c:53:e3:28:ab:f4:9d:14:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:50:53 2026 GMT Not After : Jan 26 17:55:53 2027 GMT Subject: CN=EFC95BAC1123D189B92EBD678C7CCE09083397C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:09:b8:45:5b:52:7e:e2:d3:0f:08:51:8d:c6: d3:42:3c:ab:5f:62:fc:cb:a7:44:a0:64:e7:a7:30: 3b:52:2c:5d:a1:95:5a:14:30:62:a9:69:c2:3f:66: e2:23:db:30:33:00:40:f7:14:0d:14:d0:a6:83:ce: 65:a2:c6:98:38:e1:43:73:77:56:7d:a1:2e:90:0d: e9:04:23:5e:66:d2:12:ef:dd:20:5a:e0:0a:22:bd: b0:21:71:c3:8e:bf:a4:e5:2e:05:2c:15:4a:f5:da: 8e:06:de:e9:15:f0:2c:73:be:97:dc:b4:3b:f0:3a: fd:14:a6:ad:0c:21:7c:1b:1f:36:92:22:eb:73:53: 28:85:a8:76:08:d7:b8:eb:ee:e1:76:12:6c:d7:05: 68:63:e3:e8:cb:aa:d1:3e:43:49:ec:b2:64:df:b3: bf:4c:b9:14:b5:26:51:80:15:3a:e2:72:e3:26:8a: b1:c9:e2:97:b2:6a:97:0c:79:e2:0b:d0:44:b0:72: a7:13:75:0d:c3:17:d7:b6:2a:24:18:0f:a0:b1:2e: 17:a2:c8:15:04:0a:54:32:b1:39:e3:d3:cf:2d:13: 14:6d:47:d0:a6:7d:e1:14:44:8a:28:11:d8:d4:b1: ad:e5:be:16:4d:9d:c6:b3:2d:a5:65:d3:13:30:6b: bf:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EF:C9:5B:AC:11:23:D1:89:B9:2E:BD:67:8C:7C:CE:09:08:33:97:C2 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E364B8F7767B6DAAF449C86EDED6726CAC89C8714F55C3851E646559A81B4E19/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E364B8F7767B6DAAF449C86EDED6726CAC89C8714F55C3851E646559A81B4E19/0/EFC95BAC1123D189B92EBD678C7CCE09083397C2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.250.196.0/23 IPv6: 2803:23a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267748 Signature Algorithm: sha256WithRSAEncryption 46:75:05:15:03:08:dd:a4:05:f8:d4:54:36:6a:cc:ac:84:b0: 9c:c1:ee:54:dc:03:be:6f:f4:61:85:77:27:74:b5:ec:76:ec: e3:c6:ec:a1:e3:d2:8b:79:b8:8f:e9:b5:e3:00:24:32:18:c1: 27:30:bd:19:8d:b4:57:2f:47:c5:d1:2a:43:4e:8d:15:d2:c9: b1:67:65:0d:b6:46:ec:d0:9c:92:a6:64:24:f0:f1:22:9f:c2: 2d:8b:35:a3:9c:98:ba:3b:0b:8f:bf:7d:44:53:09:de:54:41: a8:90:c8:a7:4b:7e:07:7a:e2:17:64:95:10:aa:cb:aa:03:35: a2:e5:ff:5b:34:7e:37:ce:38:a1:17:83:eb:1c:98:40:c5:d0: 11:38:c2:15:d3:a7:6d:ea:da:b9:f2:e0:ca:3e:8a:52:3c:0a: 94:84:a6:5d:0f:88:2b:38:f9:e9:11:43:1a:ac:62:5a:fa:7c: 91:d2:78:18:d3:f7:2c:1e:61:0b:ed:95:ca:78:b4:9c:f9:d9: b8:33:d8:b9:98:a0:63:10:29:ff:67:52:75:fa:8a:ff:b3:94: d8:a1:f2:ac:fe:cd:f4:2c:d7:89:93:04:e6:f2:d2:86:a8:c1: b0:6f:9b:2a:b8:f5:18:fd:60:b2:0c:2d:85:98:63:f4:ac:2a: cd:ad:c6:98 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIULfN/zi32sWQOZzgMU+Moq/SdFLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzUwNTNaFw0yNzAxMjYxNzU1NTNaMDMxMTAvBgNV BAMTKEVGQzk1QkFDMTEyM0QxODlCOTJFQkQ2NzhDN0NDRTA5MDgzMzk3QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkCbhFW1J+4tMPCFGNxtNCPKtf YvzLp0SgZOenMDtSLF2hlVoUMGKpacI/ZuIj2zAzAED3FA0U0KaDzmWixpg44UNz d1Z9oS6QDekEI15m0hLv3SBa4AoivbAhccOOv6TlLgUsFUr12o4G3ukV8Cxzvpfc tDvwOv0Upq0MIXwbHzaSIutzUyiFqHYI17jr7uF2EmzXBWhj4+jLqtE+Q0nssmTf s79MuRS1JlGAFTricuMmirHJ4peyapcMeeIL0ESwcqcTdQ3DF9e2KiQYD6CxLhei yBUEClQysTnj088tExRtR9CmfeEURIooEdjUsa3lvhZNncazLaVl0xMwa7+hAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTvyVusESPRibku vWeMfM4JCDOXwjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTM2NEI4Rjc3NjdCNkRBQUY0NDlDODZF REVENjcyNkNBQzg5Qzg3MTRGNTVDMzg1MUU2NDY1NTlBODFCNEUxOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FMzY0QjhGNzc2N0I2REFBRjQ0OUM4NkVERUQ2NzI2Q0FDODlDODcxNEY1 NUMzODUxRTY0NjU1OUE4MUI0RTE5LzAvRUZDOTVCQUMxMTIzRDE4OUI5MkVCRDY3 OEM3Q0NFMDkwODMzOTdDMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBp/rEMA0EAgAC MAcDBQAoAyOgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQV5DANBgkqhkiG9w0B AQsFAAOCAQEARnUFFQMI3aQF+NRUNmrMrISwnMHuVNwDvm/0YYV3J3S17Hbs48bs oePSi3m4j+m14wAkMhjBJzC9GY20Vy9HxdEqQ06NFdLJsWdlDbZG7NCckqZkJPDx Ip/CLYs1o5yYujsLj799RFMJ3lRBqJDIp0t+B3riF2SVEKrLqgM1ouX/WzR+N844 oReD6xyYQMXQETjCFdOnberaufLgyj6KUjwKlISmXQ+IKzj56RFDGqxiWvp8kdJ4 GNP3LB5hC+2Vyni0nPnZuDPYuZigYxAp/2dSdfqK/7OU2KHyrP7N9CzXiZME5vLS hqjBsG+bKrj1GP1gsgwthZhj9Kwqza3GmA== -----END CERTIFICATE-----Generated at Thu Feb 19 07:18:18 2026 by rpki-client