$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.cer File: CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.cer (raw, json) Hash identifier: XfJgnCis6RlDEtOoZ1spjyHV/BQoYWVfmhK12CP8YBU= Subject key identifier: CF:EC:95:C0:42:F7:18:CF:DE:FD:38:BC:85:C4:AF:BA:3E:7A:9A:F8 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 72D03FE420269D103A8457CFCEB4F66A6D997276 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/B141EB61AA977898F5638128056510257A1EB4F18042E353CE2EF886E8D20983/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/B141EB61AA977898F5638128056510257A1EB4F18042E353CE2EF886E8D20983/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 17:46:19 +0000 Certificate not after: Wed 27 Jan 2027 17:51:19 +0000 Subordinate resources: IP: 168.228.108.0/22 IP: 2801:1d8::/36 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Feb 2026 22:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:d0:3f:e4:20:26:9d:10:3a:84:57:cf:ce:b4:f6:6a:6d:99:72:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 17:46:19 2026 GMT Not After : Jan 27 17:51:19 2027 GMT Subject: CN=CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b7:a6:3e:46:60:21:e6:b8:ad:14:da:58:da: 82:2d:26:00:c7:0b:8e:8d:da:cd:d7:f6:92:88:8d: 2f:ba:0d:43:2b:9c:5a:a2:69:89:3e:59:0b:e3:9c: 78:d1:f4:29:83:2c:0b:93:a0:de:80:6e:56:ef:3b: 76:4a:72:1f:be:88:28:ba:ac:dd:b8:8d:7f:d2:f2: c8:b5:30:d1:27:ba:44:f7:80:91:10:c7:54:e0:91: 16:56:1c:aa:d5:04:0c:17:2e:a8:41:e6:af:5b:2d: 8d:4c:71:ce:be:30:6d:93:7a:70:ec:64:d8:d9:98: d4:36:6e:d6:cd:7f:0a:73:d7:a5:54:fb:20:d7:f2: 55:b9:68:64:5d:21:ce:c7:10:80:b2:00:19:91:33: 7b:b1:76:91:b2:60:ed:36:8b:b2:b4:96:8d:cd:3a: b5:1e:f3:b5:f2:72:1b:17:82:69:dc:c4:0d:53:b8: 7a:80:06:e1:87:d4:a8:0a:22:8c:1c:96:0e:06:36: 17:94:f5:69:58:e5:96:b9:ba:2f:26:b6:56:e7:20: 8a:e8:bf:47:eb:3b:22:f2:b6:40:92:3b:3f:c0:8d: d8:91:83:fa:ba:88:ee:4d:a9:eb:67:9c:d9:76:a8: 47:a5:ab:4b:6e:95:69:75:fc:ce:c8:49:d9:7d:1e: ce:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:EC:95:C0:42:F7:18:CF:DE:FD:38:BC:85:C4:AF:BA:3E:7A:9A:F8 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B141EB61AA977898F5638128056510257A1EB4F18042E353CE2EF886E8D20983/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B141EB61AA977898F5638128056510257A1EB4F18042E353CE2EF886E8D20983/0/CFEC95C042F718CFDEFD38BC85C4AFBA3E7A9AF8.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.228.108.0/22 IPv6: 2801:1d8::/36 Signature Algorithm: sha256WithRSAEncryption 35:26:48:f2:b8:26:b3:18:e1:f8:0a:a0:1f:75:10:d2:87:e7: 62:c5:09:10:f2:53:f3:5a:50:de:c5:e1:96:17:4f:63:5a:e0: 86:3a:df:de:6d:25:54:b8:fc:07:53:45:d9:98:b8:6b:be:a4: d7:1b:67:29:2b:95:e5:ad:33:09:46:04:37:f1:9e:7a:e3:f3: 6a:5e:71:bb:2e:10:7b:59:a1:9e:71:cb:fb:9f:b1:3b:90:24: cf:be:69:5c:f6:6c:bb:cb:a2:d4:9a:c6:4b:51:43:55:86:a5: 68:26:7e:5f:86:53:bb:07:f8:7f:88:c5:7c:3b:f7:6c:a7:42: d3:fc:b4:27:7e:02:3d:02:7f:fd:39:de:4d:54:2a:1b:ba:96: 8e:88:44:f8:03:e1:ec:27:2a:7d:65:e5:d4:d8:81:cc:7a:1c: dc:5f:6d:77:c0:0d:0d:e4:be:49:56:20:a2:b2:84:b9:d1:26: eb:ac:8d:b9:bc:24:fd:07:98:49:9d:fd:35:28:66:15:d3:40: 21:71:12:26:fd:1e:5f:a8:57:70:d0:ac:6d:0c:d5:68:2d:16: 53:17:84:d6:42:d6:49:fa:cc:5f:80:f9:a4:53:02:3d:53:21: f2:33:10:da:90:3f:6e:0e:86:3b:67:81:a2:b3:cb:50:91:ea: 51:47:34:31 -----BEGIN CERTIFICATE----- MIIGijCCBXKgAwIBAgIUctA/5CAmnRA6hFfPzrT2am2ZcnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNzQ2MTlaFw0yNzAxMjcxNzUxMTlaMDMxMTAvBgNV BAMTKENGRUM5NUMwNDJGNzE4Q0ZERUZEMzhCQzg1QzRBRkJBM0U3QTlBRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTt6Y+RmAh5ritFNpY2oItJgDH C46N2s3X9pKIjS+6DUMrnFqiaYk+WQvjnHjR9CmDLAuToN6AblbvO3ZKch++iCi6 rN24jX/S8si1MNEnukT3gJEQx1TgkRZWHKrVBAwXLqhB5q9bLY1Mcc6+MG2TenDs ZNjZmNQ2btbNfwpz16VU+yDX8lW5aGRdIc7HEICyABmRM3uxdpGyYO02i7K0lo3N OrUe87XychsXgmncxA1TuHqABuGH1KgKIowclg4GNheU9WlY5Za5ui8mtlbnIIro v0frOyLytkCSOz/AjdiRg/q6iO5NqetnnNl2qEelq0tulWl1/M7ISdl9Hs7HAgMB AAGjggOUMIIDkDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTP7JXAQvcYz979 OLyFxK+6Pnqa+DAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQjE0MUVCNjFBQTk3Nzg5OEY1NjM4MTI4 MDU2NTEwMjU3QTFFQjRGMTgwNDJFMzUzQ0UyRUY4ODZFOEQyMDk4My8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CMTQxRUI2MUFBOTc3ODk4RjU2MzgxMjgwNTY1MTAyNTdBMUVCNEYxODA0 MkUzNTNDRTJFRjg4NkU4RDIwOTgzLzAvQ0ZFQzk1QzA0MkY3MThDRkRFRkQzOEJD ODVDNEFGQkEzRTdBOUFGOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCqORsMA4EAgAC MAgDBgQoAQHYADANBgkqhkiG9w0BAQsFAAOCAQEANSZI8rgmsxjh+AqgH3UQ0ofn YsUJEPJT81pQ3sXhlhdPY1rghjrf3m0lVLj8B1NF2Zi4a76k1xtnKSuV5a0zCUYE N/GeeuPzal5xuy4Qe1mhnnHL+5+xO5Akz75pXPZsu8ui1JrGS1FDVYalaCZ+X4ZT uwf4f4jFfDv3bKdC0/y0J34CPQJ//TneTVQqG7qWjohE+APh7CcqfWXl1NiBzHoc 3F9td8ANDeS+SVYgorKEudEm66yNubwk/QeYSZ39NShmFdNAIXESJv0eX6hXcNCs bQzVaC0WUxeE1kLWSfrMX4D5pFMCPVMh8jMQ2pA/bg6GO2eBorPLUJHqUUc0MQ== -----END CERTIFICATE-----Generated at Wed Feb 18 14:26:28 2026 by rpki-client