$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5.cer File: FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5.cer (raw, json) Hash identifier: xMIAioFF8dBO2CgwxMT4CUMOzVFdIVloKXKMx0570xA= Subject key identifier: FB:F6:06:BE:5C:E9:E7:6D:39:4A:0A:FA:C9:A4:DC:3E:DE:56:75:A5 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2F73FE905E171A71FBAD0064E628AAC08A1A9D11 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 22:28:54 +0000 Certificate not after: Tue 26 Jan 2027 22:33:54 +0000 Subordinate resources: AS: 23007 IP: 190.168.0.0/17 IP: 2800:a008::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Feb 2026 23:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:73:fe:90:5e:17:1a:71:fb:ad:00:64:e6:28:aa:c0:8a:1a:9d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 22:28:54 2026 GMT Not After : Jan 26 22:33:54 2027 GMT Subject: CN=FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fd:ef:c3:96:95:d0:00:c3:93:1d:15:45:a9: 9e:d2:a1:93:35:d9:08:9a:3f:f7:5d:f2:a0:19:72: 37:21:db:68:19:06:be:c5:b9:6b:3b:af:c9:6f:82: 9e:f8:3e:6a:76:85:db:66:2b:37:42:ed:28:bd:5d: 29:3d:91:36:63:fb:6f:f9:64:82:14:bb:e6:02:3b: 32:fc:ac:43:a3:47:41:d7:75:21:a9:43:ab:24:ea: 81:f5:a1:d8:a1:8d:e5:1b:f0:54:e9:cb:e2:f3:7e: e5:cd:0c:2c:fe:69:78:60:d8:12:0c:7c:33:f2:3a: 55:b5:bb:f1:50:45:fb:ab:ad:02:be:67:be:b5:ed: fd:83:4e:76:d1:1e:e8:02:05:d9:9c:24:83:3c:1f: 43:85:67:61:66:d6:c0:50:dc:d1:95:cb:4d:44:c2: a5:63:65:29:45:8e:0c:fa:bc:a7:c6:99:a0:d5:64: a4:46:27:ef:da:61:88:64:3b:08:21:58:91:77:a1: a3:94:a3:92:f7:12:2f:99:6c:c6:13:04:16:8a:cc: 94:5e:1f:40:4f:2a:44:8f:f6:c1:47:c1:79:8c:de: 69:81:23:15:06:5d:4f:ea:32:48:97:61:97:56:30: be:a5:82:32:07:75:f7:4e:09:2d:4d:8f:73:8a:88: c8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:F6:06:BE:5C:E9:E7:6D:39:4A:0A:FA:C9:A4:DC:3E:DE:56:75:A5 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.168.0.0/17 IPv6: 2800:a008::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23007 Signature Algorithm: sha256WithRSAEncryption 6d:44:34:b3:78:d1:e9:19:85:b8:9a:b3:25:26:74:01:4d:ec: 43:06:23:f2:5d:6d:f5:da:6f:be:32:6b:ea:36:a8:7a:50:76: f9:17:93:d3:b4:6a:94:0b:42:5b:67:e2:8c:fb:7d:e0:c8:d5: c8:47:2f:ff:e5:d7:cf:5c:f7:eb:18:3d:9b:49:cf:7e:bf:72: 9a:24:7c:fe:15:5e:da:18:62:dc:29:2c:3f:ae:54:30:d0:f7: b2:91:15:6a:f7:00:b3:62:01:41:fe:b3:45:ac:90:9a:2d:12: 2c:5a:a1:42:d1:36:4d:64:f4:85:50:fd:5a:4c:ee:8c:35:b4: 9d:3a:87:f9:93:7d:1d:ae:56:ce:74:a8:7f:17:af:a4:80:24: 71:93:5b:20:ea:22:55:f4:49:30:59:ad:f4:81:40:1a:ca:2a: 37:83:2e:a4:dd:b9:42:f0:c0:bd:e2:6e:83:b9:54:1b:f6:08: a8:fc:0b:51:d2:04:98:c3:a6:75:14:cc:9f:8f:87:4b:83:8c: ee:fb:2b:74:e5:d3:54:fd:f5:40:e7:72:a3:a2:37:73:20:e3: bc:5a:5a:60:a9:25:ed:60:a0:23:4a:d1:e2:45:c3:09:2d:5b: 74:2e:2a:50:1b:cd:ec:68:c6:2f:39:e6:89:dd:a2:91:5a:f2: c6:a7:8d:84 -----BEGIN CERTIFICATE----- MIIGpDCCBYygAwIBAgIUL3P+kF4XGnH7rQBk5iiqwIoanREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMjI4NTRaFw0yNzAxMjYyMjMzNTRaMDMxMTAvBgNV BAMTKEZCRjYwNkJFNUNFOUU3NkQzOTRBMEFGQUM5QTREQzNFREU1Njc1QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV/e/DlpXQAMOTHRVFqZ7SoZM1 2QiaP/dd8qAZcjch22gZBr7FuWs7r8lvgp74Pmp2hdtmKzdC7Si9XSk9kTZj+2/5 ZIIUu+YCOzL8rEOjR0HXdSGpQ6sk6oH1odihjeUb8FTpy+LzfuXNDCz+aXhg2BIM fDPyOlW1u/FQRfurrQK+Z7617f2DTnbRHugCBdmcJIM8H0OFZ2Fm1sBQ3NGVy01E wqVjZSlFjgz6vKfGmaDVZKRGJ+/aYYhkOwghWJF3oaOUo5L3Ei+ZbMYTBBaKzJRe H0BPKkSP9sFHwXmM3mmBIxUGXU/qMkiXYZdWML6lgjIHdfdOCS1Nj3OKiMjJAgMB AAGjggOuMIIDqjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT79ga+XOnnbTlK CvrJpNw+3lZ1pTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTE2REIwRjgyQUY4RDg2N0E3OEVDNUMw REUwMjlCOTcxQkJCMjQ3RTI3RTU0N0MyRjM3RUY1MzI4MjdCMkI1MS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xMTZEQjBGODJBRjhEODY3QTc4RUM1QzBERTAyOUI5NzFCQkIyNDdFMjdF NTQ3QzJGMzdFRjUzMjgyN0IyQjUxLzAvRkJGNjA2QkU1Q0U5RTc2RDM5NEEwQUZB QzlBNERDM0VERTU2NzVBNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQHvqgAMA0EAgAC MAcDBQAoAKAIMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlnfMA0GCSqGSIb3DQEB CwUAA4IBAQBtRDSzeNHpGYW4mrMlJnQBTexDBiPyXW312m++MmvqNqh6UHb5F5PT tGqUC0JbZ+KM+33gyNXIRy//5dfPXPfrGD2bSc9+v3KaJHz+FV7aGGLcKSw/rlQw 0PeykRVq9wCzYgFB/rNFrJCaLRIsWqFC0TZNZPSFUP1aTO6MNbSdOof5k30drlbO dKh/F6+kgCRxk1sg6iJV9EkwWa30gUAayio3gy6k3blC8MC94m6DuVQb9gio/AtR 0gSYw6Z1FMyfj4dLg4zu+yt05dNU/fVA53KjojdzIOO8WlpgqSXtYKAjStHiRcMJ LVt0LipQG83saMYvOeaJ3aKRWvLGp42E -----END CERTIFICATE-----Generated at Thu Feb 19 04:20:28 2026 by rpki-client