$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer File: 8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer (raw, json) Hash identifier: NH5LDCGzmr0QpBW/2ZTFqDHMMAOEUTPKGGVZkHFNt+k= Subject key identifier: 8E:EE:8A:60:C9:88:42:16:83:DB:C2:FD:DE:16:9C:9A:A9:12:EF:90 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 38C58EDA076E6F8C57C560E4DD00ECAE05B4196D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 13:32:36 +0000 Certificate not after: Wed 27 Jan 2027 13:37:36 +0000 Subordinate resources: AS: 266711 IP: 45.229.247.0/24 IP: 2801:1b:b000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Feb 2026 05:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c5:8e:da:07:6e:6f:8c:57:c5:60:e4:dd:00:ec:ae:05:b4:19:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 13:32:36 2026 GMT Not After : Jan 27 13:37:36 2027 GMT Subject: CN=8EEE8A60C988421683DBC2FDDE169C9AA912EF90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a7:6c:15:c6:6e:00:5e:0c:b3:1d:b1:00:16: e8:1b:28:15:ee:71:32:f9:fa:89:7b:37:55:a4:38: e7:01:8f:3f:aa:00:2c:13:f6:56:5c:65:ef:a0:2e: 87:ea:ae:bb:53:e6:4f:3e:7d:77:ce:b1:5c:de:87: 9d:42:c8:a3:05:2b:16:15:b4:02:d8:55:c1:50:a4: 6c:14:17:f1:d4:b2:30:83:e8:03:0d:46:45:52:67: 1d:49:e2:2c:0d:d1:57:86:3d:ed:cb:81:43:0b:04: 0c:de:a7:8a:fa:46:46:5c:47:6c:56:62:47:0f:af: b0:27:f5:ba:e0:a9:c1:56:66:81:aa:6c:94:7b:8d: e4:aa:e7:6b:d9:d6:02:f7:6b:fd:ee:e9:ec:fa:32: 75:24:ad:9f:03:bf:dd:62:20:97:41:ce:25:8f:fd: db:66:82:d1:90:17:41:f2:78:08:b2:86:d8:be:3d: 30:09:6f:8d:17:e2:75:12:6f:27:2d:7f:1c:b5:71: cb:24:51:d3:13:66:31:22:07:90:c3:d1:1b:37:a1: eb:95:4e:ff:65:4e:e4:e7:18:f2:86:1d:db:e1:17: 5d:92:ad:0b:33:b4:67:15:a2:e6:29:67:0d:7f:93: d9:c2:f8:fa:5e:28:26:82:9f:82:ba:4f:9c:d2:4c: 2e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8E:EE:8A:60:C9:88:42:16:83:DB:C2:FD:DE:16:9C:9A:A9:12:EF:90 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.229.247.0/24 IPv6: 2801:1b:b000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266711 Signature Algorithm: sha256WithRSAEncryption 4b:75:f1:26:3d:32:fc:59:d1:b6:33:08:7d:ba:65:ff:4f:a0: 50:23:18:2c:62:77:62:70:fc:68:fc:db:53:d9:56:39:51:79: 68:2c:77:2c:0a:07:ef:63:a5:67:ed:43:88:00:94:66:cd:3e: 49:e3:e8:07:50:41:59:ed:2e:27:6b:09:3a:be:d8:c1:50:ae: 3a:a5:ba:c2:1e:01:8b:2e:75:75:8f:ab:c7:b2:4f:8f:26:08: 7c:b0:9f:90:81:c1:dd:de:87:e1:da:46:4e:01:2f:ca:0f:da: bc:b9:e3:53:96:eb:e7:01:9e:3a:db:af:8a:c6:d0:c3:43:e8: 9c:cd:56:a2:2e:6b:c0:d8:c5:4e:4c:4a:fd:e3:44:7b:e9:12: 38:24:a8:55:e3:9d:6c:bf:ed:22:c1:ae:4d:2d:ea:24:ff:a8: 38:07:b0:22:ed:a6:a3:c1:df:29:6b:d2:24:44:30:33:6b:a1: 2b:ea:fd:11:26:42:19:91:fb:7e:ca:1d:a2:0f:63:00:ba:04: d0:be:a6:f2:e6:2a:9e:7c:27:37:53:8a:37:b3:75:04:91:da: 8b:25:46:bf:45:ca:96:eb:9b:56:73:98:9f:3a:72:30:61:37: 49:d6:f2:21:79:be:f4:b6:27:1e:8a:17:50:fd:15:e0:c9:f6: 09:8b:f9:ce -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUOMWO2gdub4xXxWDk3QDsrgW0GW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxMzMyMzZaFw0yNzAxMjcxMzM3MzZaMDMxMTAvBgNV BAMTKDhFRUU4QTYwQzk4ODQyMTY4M0RCQzJGRERFMTY5QzlBQTkxMkVGOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqp2wVxm4AXgyzHbEAFugbKBXu cTL5+ol7N1WkOOcBjz+qACwT9lZcZe+gLofqrrtT5k8+fXfOsVzeh51CyKMFKxYV tALYVcFQpGwUF/HUsjCD6AMNRkVSZx1J4iwN0VeGPe3LgUMLBAzep4r6RkZcR2xW YkcPr7An9brgqcFWZoGqbJR7jeSq52vZ1gL3a/3u6ez6MnUkrZ8Dv91iIJdBziWP /dtmgtGQF0HyeAiyhti+PTAJb40X4nUSbyctfxy1ccskUdMTZjEiB5DD0Rs3oeuV Tv9lTuTnGPKGHdvhF12SrQsztGcVouYpZw1/k9nC+PpeKCaCn4K6T5zSTC63AgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSO7opgyYhCFoPb wv3eFpyaqRLvkDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREJDMTM0NzRDQkM2MTBGOEYwNjA4NEQ1 QTBENTk1M0EwMzI2RTc3MTkxODcxNTU4NEMwQzkwQTU2ODZGQkI4Mi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQkMxMzQ3NENCQzYxMEY4RjA2MDg0RDVBMEQ1OTUzQTAzMjZFNzcxOTE4 NzE1NTg0QzBDOTBBNTY4NkZCQjgyLzAvOEVFRThBNjBDOTg4NDIxNjgzREJDMkZE REUxNjlDOUFBOTEyRUY5MC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALeX3MA8EAgAC MAkDBwAoAQAbsAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBHXMA0GCSqGSIb3 DQEBCwUAA4IBAQBLdfEmPTL8WdG2Mwh9umX/T6BQIxgsYndicPxo/NtT2VY5UXlo LHcsCgfvY6Vn7UOIAJRmzT5J4+gHUEFZ7S4nawk6vtjBUK46pbrCHgGLLnV1j6vH sk+PJgh8sJ+QgcHd3ofh2kZOAS/KD9q8ueNTluvnAZ4626+KxtDDQ+iczVaiLmvA 2MVOTEr940R76RI4JKhV451sv+0iwa5NLeok/6g4B7Ai7aajwd8pa9IkRDAza6Er 6v0RJkIZkft+yh2iD2MAugTQvqby5iqefCc3U4o3s3UEkdqLJUa/RcqW65tWc5if OnIwYTdJ1vIheb70ticeihdQ/RXgyfYJi/nO -----END CERTIFICATE-----Generated at Sun Feb 22 23:28:33 2026 by rpki-client