$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer File: B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer (raw, json) Hash identifier: MlhiC040G8Jop6s6iM7nCYjibF2IBFmBDnGqi6lO2+w= Subject key identifier: B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 1A4E043F31B678409D8FD29D48F870BEACC5B4CB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 17:50:50 +0000 Certificate not after: Tue 26 Jan 2027 17:55:50 +0000 Subordinate resources: AS: 27826 IP: 200.16.120.0/21 IP: 2803:aa40::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 25 Feb 2026 01:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:4e:04:3f:31:b6:78:40:9d:8f:d2:9d:48:f8:70:be:ac:c5:b4:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 17:50:50 2026 GMT Not After : Jan 26 17:55:50 2027 GMT Subject: CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c4:68:c7:0e:cd:1a:82:9f:37:9f:75:48:76: 45:f2:4c:1c:ed:9f:97:3a:80:4d:a7:85:80:42:4e: a0:f0:10:06:3a:56:ad:c1:c7:4c:da:2a:d8:3b:38: 29:6a:df:b6:5f:f0:62:3c:90:27:82:53:1a:bc:65: a7:54:e7:76:4b:75:81:6f:00:54:b1:c9:a3:87:01: a0:3b:c7:56:7f:78:ac:f1:b2:86:54:cd:48:dd:14: 72:46:6f:83:03:67:0a:b9:2f:78:82:61:8c:29:13: 1f:e2:4f:33:d9:61:eb:bb:b6:dc:88:a9:11:95:7e: 6e:ba:dc:fd:2a:31:cc:e8:d1:13:98:6b:38:8c:fa: 0b:b5:ce:46:ed:ec:34:b9:b1:eb:3f:88:9f:a0:3a: 7f:46:4d:6c:3f:1f:3f:4c:a5:76:ca:d6:c3:fa:7d: e4:dd:83:29:f4:23:14:0f:ea:9e:44:e5:27:84:df: f7:71:1e:3d:8b:82:27:23:67:ba:80:f2:4f:38:21: 52:f6:ed:ed:cd:62:08:06:87:67:16:aa:e0:2a:77: 19:6e:02:1c:42:6e:79:67:7c:a1:75:a4:12:f6:bd: 10:13:38:fa:33:60:68:6b:57:e2:bd:58:d9:52:6f: ac:6f:77:c3:2e:5e:31:96:1c:74:1c:43:07:f2:07: 9b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.16.120.0/21 IPv6: 2803:aa40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27826 Signature Algorithm: sha256WithRSAEncryption 62:5b:c1:9d:9b:ac:ef:5e:f1:96:4a:af:d2:e8:27:0e:13:8c: 2c:d7:c4:15:88:92:78:0f:7d:f1:1a:51:ae:3b:79:8b:2b:ac: b3:09:81:e1:6d:aa:bf:58:e1:4e:3b:30:eb:11:86:81:14:c6: fa:14:5f:4e:2f:0a:81:0b:ff:5f:e5:5d:90:66:cd:c5:8a:8b: 12:43:67:ae:33:f5:64:6a:49:63:84:c0:f0:51:8b:88:07:4d: d8:24:f6:c6:76:4a:47:a9:a6:b8:aa:ff:db:30:61:8b:df:85: 56:a1:8f:d3:40:79:20:23:b8:25:c4:5d:3b:e9:5a:79:fc:56: bb:cc:e8:f8:3c:f2:2a:1e:56:d7:90:53:4a:78:65:3d:eb:aa: bb:d8:3b:a2:79:4d:9a:79:0f:0d:b5:ae:e0:8b:14:3b:8c:83: 2a:4d:67:1d:5d:d3:aa:66:1c:2e:44:d4:95:90:b1:01:ad:02: c8:10:eb:dd:cf:5f:6a:93:9a:ea:9c:48:77:62:2c:7c:14:c5: 9f:a3:d8:5b:59:1f:59:4c:6c:21:d9:60:5e:ef:29:85:66:63: 9c:28:df:79:c6:eb:81:c7:cd:41:c9:ab:9e:da:71:bc:a8:7f: 5d:18:ba:3c:30:37:8a:4d:57:a8:19:75:7e:da:a8:e1:61:bd: c2:98:64:e0 -----BEGIN CERTIFICATE----- MIIGpDCCBYygAwIBAgIUGk4EPzG2eECdj9KdSPhwvqzFtMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxNzUwNTBaFw0yNzAxMjYxNzU1NTBaMDMxMTAvBgNV BAMTKEI1QUE1QjFFNUI4MDA1NTZBNUI3OUY5OTdFMUIwQzg4MDIwQzEzQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrxGjHDs0agp83n3VIdkXyTBzt n5c6gE2nhYBCTqDwEAY6Vq3Bx0zaKtg7OClq37Zf8GI8kCeCUxq8ZadU53ZLdYFv AFSxyaOHAaA7x1Z/eKzxsoZUzUjdFHJGb4MDZwq5L3iCYYwpEx/iTzPZYeu7ttyI qRGVfm663P0qMczo0ROYaziM+gu1zkbt7DS5ses/iJ+gOn9GTWw/Hz9MpXbK1sP6 feTdgyn0IxQP6p5E5SeE3/dxHj2LgicjZ7qA8k84IVL27e3NYggGh2cWquAqdxlu AhxCbnlnfKF1pBL2vRATOPozYGhrV+K9WNlSb6xvd8MuXjGWHHQcQwfyB5uZAgMB AAGjggOuMIIDqjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS1qlseW4AFVqW3 n5l+GwyIAgwTuTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjVDM0I4N0MxNDZCNUU1RkY1NzZFNjQy QTdDN0M5NzdGQkU5OUQyQUZENDA2OUM1MENDRkU2QTk3ODg2NTQ5Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CNUMzQjg3QzE0NkI1RTVGRjU3NkU2NDJBN0M3Qzk3N0ZCRTk5RDJBRkQ0 MDY5QzUwQ0NGRTZBOTc4ODY1NDlGLzAvQjVBQTVCMUU1QjgwMDU1NkE1Qjc5Rjk5 N0UxQjBDODgwMjBDMTNCOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDyBB4MA0EAgAC MAcDBQAoA6pAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmyyMA0GCSqGSIb3DQEB CwUAA4IBAQBiW8Gdm6zvXvGWSq/S6CcOE4ws18QViJJ4D33xGlGuO3mLK6yzCYHh baq/WOFOOzDrEYaBFMb6FF9OLwqBC/9f5V2QZs3FiosSQ2euM/VkakljhMDwUYuI B03YJPbGdkpHqaa4qv/bMGGL34VWoY/TQHkgI7glxF076Vp5/Fa7zOj4PPIqHlbX kFNKeGU966q72DuieU2aeQ8Nta7gixQ7jIMqTWcdXdOqZhwuRNSVkLEBrQLIEOvd z19qk5rqnEh3Yix8FMWfo9hbWR9ZTGwh2WBe7ymFZmOcKN95xuuBx81Byaue2nG8 qH9dGLo8MDeKTVeoGXV+2qjhYb3CmGTg -----END CERTIFICATE-----Generated at Sat Feb 21 20:48:24 2026 by rpki-client