$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43329E371650BF65E90EB0576A6F24E54A8D8258.cer File: 43329E371650BF65E90EB0576A6F24E54A8D8258.cer (raw, json) Hash identifier: BdA5cdyqqMm8uhzFsVb6Bq4QRqL4VwtK3ykd8xRyzZw= Subject key identifier: 43:32:9E:37:16:50:BF:65:E9:0E:B0:57:6A:6F:24:E5:4A:8D:82:58 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2453587A97DF16EC3616E4AF02B6B39C3AE0A4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FCC4DA3217817CFA2ED7CA058A228334C24B3C38DCB0208E3261106C3BB14818/0/43329E371650BF65E90EB0576A6F24E54A8D8258.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FCC4DA3217817CFA2ED7CA058A228334C24B3C38DCB0208E3261106C3BB14818/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 18:24:31 +0000 Certificate not after: Wed 27 Jan 2027 18:29:31 +0000 Subordinate resources: AS: 270080 IP: 186.195.247.0/24 IP: 191.241.62.0/23 IP: 2803:be0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Feb 2026 11:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:53:58:7a:97:df:16:ec:36:16:e4:af:02:b6:b3:9c:3a:e0:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 18:24:31 2026 GMT Not After : Jan 27 18:29:31 2027 GMT Subject: CN=43329E371650BF65E90EB0576A6F24E54A8D8258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:86:15:66:aa:fe:2b:f4:33:80:89:a2:84:49: 78:e1:d2:76:ee:1f:5a:25:58:c9:5c:f5:49:76:45: b5:7f:09:29:28:e6:a2:73:7e:1f:95:2a:a5:f8:4b: d1:8c:3e:64:e9:de:10:86:7e:77:f5:23:f4:5b:7e: 46:c4:e2:3e:aa:b1:0f:fd:c2:37:fe:e4:a3:14:4e: f9:3a:01:ee:44:a6:a2:f7:98:de:80:98:8a:15:27: 22:2f:07:e4:68:ed:cb:6a:eb:e0:fe:f7:2b:ff:18: fb:c5:2d:de:04:89:84:88:6d:32:1d:d3:f4:62:c0: a3:39:18:18:b4:d7:4a:1e:c8:8a:d6:e6:a0:c9:b5: f4:ba:b9:52:e8:d2:2a:d7:94:f5:69:0b:d0:23:de: 5b:4a:be:83:69:70:46:62:d5:9f:14:cc:5a:d6:0f: bb:d7:22:c6:44:c1:f4:35:ea:55:6b:50:29:aa:16: 85:f5:71:09:bf:d0:af:25:0e:fa:2e:c9:db:6b:52: 29:80:25:68:6b:d3:f6:2a:07:a9:f1:e8:42:e4:7b: 7d:ed:61:87:72:ea:c8:b5:62:f8:ed:5b:58:63:ff: 0e:9f:2b:39:4d:61:b9:6b:72:ae:66:54:43:a5:bb: 07:91:fa:7e:98:95:5f:7d:c0:9e:32:67:aa:33:1f: 37:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 43:32:9E:37:16:50:BF:65:E9:0E:B0:57:6A:6F:24:E5:4A:8D:82:58 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FCC4DA3217817CFA2ED7CA058A228334C24B3C38DCB0208E3261106C3BB14818/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FCC4DA3217817CFA2ED7CA058A228334C24B3C38DCB0208E3261106C3BB14818/0/43329E371650BF65E90EB0576A6F24E54A8D8258.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.195.247.0/24 191.241.62.0/23 IPv6: 2803:be0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270080 Signature Algorithm: sha256WithRSAEncryption 09:8d:43:8b:0d:2e:a8:93:99:2d:83:ed:be:65:c9:52:2d:25: 0f:42:52:58:b1:03:30:28:0f:5b:ad:b4:15:88:57:cc:71:e2: aa:67:dc:52:ca:1d:80:81:09:bf:a3:bd:1b:17:85:17:7a:63: 6b:25:70:a3:0f:9b:3a:5e:dc:cd:d9:3c:af:c4:3d:f8:55:a9: ab:c8:25:ef:c9:ad:0a:c3:af:c8:48:30:f4:9f:f5:71:1e:8c: 1a:44:b7:26:27:40:a3:c7:d4:0d:73:4b:e4:e2:89:67:4a:5a: c6:ab:2b:88:38:14:bc:7e:f3:7b:c4:19:02:78:93:e0:13:43: 22:6e:6e:d5:3c:7e:7e:91:b6:28:55:24:50:c0:1a:d5:40:34: dd:3c:f9:13:29:9d:a3:6a:51:fd:da:d9:ab:b7:74:64:01:49: f4:6b:d6:cb:a9:7d:a5:f1:fb:63:30:06:ec:7c:fe:c2:0c:7d: 34:9d:34:72:76:5d:b6:9b:57:a3:09:64:55:a1:09:8f:5f:e9: cb:49:6b:4c:c9:59:4e:53:73:25:85:52:0d:08:fc:b6:ce:e1: 08:7a:3e:57:9c:ee:79:18:0d:41:c6:71:f4:77:78:84:47:91: 25:32:2c:a6:8b:d1:cc:03:26:ac:82:59:ea:f0:6c:de:39:a9: f4:54:ae:61 -----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgITJFNYepffFuw2FuSvAraznDrgpDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhGMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2 MDU4Njc4MB4XDTI2MDEyODE4MjQzMVoXDTI3MDEyNzE4MjkzMVowMzExMC8GA1UE AxMoNDMzMjlFMzcxNjUwQkY2NUU5MEVCMDU3NkE2RjI0RTU0QThEODI1ODCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPOGFWaq/iv0M4CJooRJeOHSdu4f WiVYyVz1SXZFtX8JKSjmonN+H5UqpfhL0Yw+ZOneEIZ+d/Uj9Ft+RsTiPqqxD/3C N/7koxRO+ToB7kSmoveY3oCYihUnIi8H5Gjty2rr4P73K/8Y+8Ut3gSJhIhtMh3T 9GLAozkYGLTXSh7IitbmoMm19Lq5UujSKteU9WkL0CPeW0q+g2lwRmLVnxTMWtYP u9cixkTB9DXqVWtQKaoWhfVxCb/QryUO+i7J22tSKYAlaGvT9ioHqfHoQuR7fe1h h3LqyLVi+O1bWGP/Dp8rOU1huWtyrmZUQ6W7B5H6fpiVX33AnjJnqjMfN1cCAwEA AaOCA7UwggOxMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFEMynjcWUL9l6Q6w V2pvJOVKjYJYMB8GA1UdIwQYMBaAFPJaG32Pet+UwN6+j+rBw7zWBYZ4MA4GA1Ud DwEB/wQEAwIBBjCBsAYDVR0fBIGoMIGlMIGioIGfoIGchoGZcnN5bmM6Ly9yZXBv c2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3 MDlBQzBEMjU1Q0YyNzlDNDc3MTZEMkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8w L0YyNUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY3JsMIG5 BggrBgEFBQcBAQSBrDCBqTCBpgYIKwYBBQUHMAKGgZlyc3luYzovL3JlcG9zaXRv cnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9FNUFBMUIyQzY5MEQzNEREM0E0MkUw QzAyNjhDMzIxOEVEMTU4RTE1RDI5RkNCRDBCQUI2NkI0Nzg2RDYzMkU2LzAvRjI1 QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNENjA1ODY3OC5jZXIwggFxBggr BgEFBQcBCwSCAWMwggFfMHkGCCsGAQUFBzAFhm1yc3luYzovL3JlcG9zaXRvcnku bGFjbmljLm5ldC9ycGtpL2xhY25pYy9GQ0M0REEzMjE3ODE3Q0ZBMkVEN0NBMDU4 QTIyODMzNEMyNEIzQzM4RENCMDIwOEUzMjYxMTA2QzNCQjE0ODE4LzAvMIGmBggr BgEFBQcwCoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj bmljL0ZDQzREQTMyMTc4MTdDRkEyRUQ3Q0EwNThBMjI4MzM0QzI0QjNDMzhEQ0Iw MjA4RTMyNjExMDZDM0JCMTQ4MTgvMC80MzMyOUUzNzE2NTBCRjY1RTkwRUIwNTc2 QTZGMjRFNTRBOEQ4MjU4Lm1mdDA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxh Y25pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAC6w/cDBAG/8T4w DQQCAAIwBwMFACgDC+AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBB8AMA0GCSqG SIb3DQEBCwUAA4IBAQAJjUOLDS6ok5ktg+2+ZclSLSUPQlJYsQMwKA9brbQViFfM ceKqZ9xSyh2AgQm/o70bF4UXemNrJXCjD5s6XtzN2TyvxD34VamryCXvya0Kw6/I SDD0n/VxHowaRLcmJ0Cjx9QNc0vk4olnSlrGqyuIOBS8fvN7xBkCeJPgE0Mibm7V PH5+kbYoVSRQwBrVQDTdPPkTKZ2jalH92tmrt3RkAUn0a9bLqX2l8ftjMAbsfP7C DH00nTRydl22m1ejCWRVoQmPX+nLSWtMyVlOU3MlhVINCPy2zuEIej5XnO55GA1B xnH0d3iER5ElMiymi9HMAyasglnq8GzeOan0VK5h -----END CERTIFICATE-----Generated at Tue Feb 17 10:54:59 2026 by rpki-client