$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/259C857FBBE3D174F02EFBE0681691812000149A.cer File: 259C857FBBE3D174F02EFBE0681691812000149A.cer (raw, json) Hash identifier: dhC7mXhUKQ+O2+jlk74B+Ap61oa3klc8tQC0rMUZ1es= Subject key identifier: 25:9C:85:7F:BB:E3:D1:74:F0:2E:FB:E0:68:16:91:81:20:00:14:9A Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 2C5D5FDEDD2507D1AC88EA7BEB9942C2D58BC05B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 15:17:01 +0000 Certificate not after: Wed 27 Jan 2027 15:22:01 +0000 Subordinate resources: AS: 265659 IP: 170.247.96.0/22 IP: 2803:b6c0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:5d:5f:de:dd:25:07:d1:ac:88:ea:7b:eb:99:42:c2:d5:8b:c0:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 15:17:01 2026 GMT Not After : Jan 27 15:22:01 2027 GMT Subject: CN=259C857FBBE3D174F02EFBE0681691812000149A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:16:a4:fc:e2:75:37:69:41:af:fb:2a:23:2f: 26:bc:3a:ff:66:f0:92:5b:7a:34:4d:5c:3b:d4:d7: a3:68:4f:ab:fd:8d:02:a2:3e:c0:77:27:d9:32:50: 6d:32:3d:74:82:a8:08:7c:a1:32:9d:94:b1:e3:4f: 74:e2:36:66:bd:cd:5c:bc:29:7f:6b:6b:ef:f6:58: 36:01:3a:32:af:b0:0e:b9:9c:9d:6c:aa:c4:2d:de: 0b:ee:f1:76:7b:4c:81:58:67:f2:cc:c8:8e:9b:e6: ab:6d:bf:65:83:cc:77:80:c5:7e:21:bd:fe:50:52: 48:1e:af:74:48:a7:dd:45:d1:15:28:93:16:9f:00: 24:4f:34:2b:ab:a7:7c:5e:95:39:17:9a:52:b2:b0: 2e:e0:2f:d9:dc:6e:21:ff:4e:5c:d8:81:2d:85:82: da:0c:78:34:4f:c8:10:4d:30:f4:0b:13:06:8d:3b: cd:e2:06:0b:9b:44:85:7b:73:10:e0:be:7a:e1:62: 2e:51:4e:23:f4:c4:29:d2:bb:5d:5d:5a:7a:fc:aa: 7c:09:0e:ec:b2:9b:8f:4f:86:f5:e1:d0:b0:93:9b: 3e:a4:5f:90:51:59:62:56:1e:ed:74:78:77:ed:0b: 0e:d6:c3:02:74:9c:6a:8f:e8:d7:86:ed:42:5f:73: 70:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:9C:85:7F:BB:E3:D1:74:F0:2E:FB:E0:68:16:91:81:20:00:14:9A X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.247.96.0/22 IPv6: 2803:b6c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265659 Signature Algorithm: sha256WithRSAEncryption 14:2a:f7:6b:95:b3:61:5e:6e:43:0d:2e:cf:55:23:9c:f3:5a: be:06:04:53:36:7c:f2:f9:be:ec:8b:6b:24:a5:f5:f2:e4:c4: 1b:d7:97:2c:3b:54:59:a0:05:77:9a:e1:fc:7b:da:bd:0f:09: b5:3f:6e:5b:57:f1:f7:78:01:b3:8e:09:ee:d5:c0:ad:6a:ad: 42:a4:d0:27:66:be:b9:27:f5:eb:3e:ec:d3:52:fb:50:db:eb: 91:0c:da:0f:5a:0f:ce:32:24:d7:d1:46:be:a0:dc:2d:19:3e: 4e:57:37:0f:03:cd:1e:30:66:5a:55:09:4b:0f:3f:3d:27:27: 09:07:4d:9f:44:bc:7a:d2:04:8c:0f:13:be:57:8b:a3:42:72: 89:0e:03:f0:7c:81:2f:7c:84:4c:b4:d3:02:3b:b2:c1:c8:9e: 0c:db:37:28:13:0c:ad:c3:ad:a7:40:07:66:cb:0c:0f:5f:36: 2b:0a:d2:5b:51:8b:10:99:6e:bb:69:84:6e:90:c2:b8:bd:f8: c4:ba:f2:46:e7:d0:10:4a:b9:45:76:99:57:f1:2c:9b:ad:14: 1a:0d:7a:71:3e:a7:57:c7:34:49:70:a8:a9:1e:02:36:6c:5d: 8d:b5:2f:cf:13:61:79:6d:17:64:ff:5c:64:29:af:2d:a8:7d: f4:45:b8:27 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIULF1f3t0lB9GsiOp765lCwtWLwFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNTE3MDFaFw0yNzAxMjcxNTIyMDFaMDMxMTAvBgNV BAMTKDI1OUM4NTdGQkJFM0QxNzRGMDJFRkJFMDY4MTY5MTgxMjAwMDE0OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiFqT84nU3aUGv+yojLya8Ov9m 8JJbejRNXDvU16NoT6v9jQKiPsB3J9kyUG0yPXSCqAh8oTKdlLHjT3TiNma9zVy8 KX9ra+/2WDYBOjKvsA65nJ1sqsQt3gvu8XZ7TIFYZ/LMyI6b5qttv2WDzHeAxX4h vf5QUkger3RIp91F0RUokxafACRPNCurp3xelTkXmlKysC7gL9ncbiH/TlzYgS2F gtoMeDRPyBBNMPQLEwaNO83iBgubRIV7cxDgvnrhYi5RTiP0xCnSu11dWnr8qnwJ Duyym49PhvXh0LCTmz6kX5BRWWJWHu10eHftCw7WwwJ0nGqP6NeG7UJfc3DhAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQlnIV/u+PRdPAu ++BoFpGBIAAUmjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDE3MjNCMDY3OTEzMEY2NTlGRDJCQzk3 MEQyMUZBRTExQjkyNDk3MzkxRTc5RDhBODY0RUM5MzBGN0Q4RUI2Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80MTcyM0IwNjc5MTMwRjY1OUZEMkJDOTcwRDIxRkFFMTFCOTI0OTczOTFF NzlEOEE4NjRFQzkzMEY3RDhFQjZGLzAvMjU5Qzg1N0ZCQkUzRDE3NEYwMkVGQkUw NjgxNjkxODEyMDAwMTQ5QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqvdgMA0EAgAC MAcDBQAoA7bAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQNuzANBgkqhkiG9w0B AQsFAAOCAQEAFCr3a5WzYV5uQw0uz1UjnPNavgYEUzZ88vm+7ItrJKX18uTEG9eX LDtUWaAFd5rh/HvavQ8JtT9uW1fx93gBs44J7tXArWqtQqTQJ2a+uSf16z7s01L7 UNvrkQzaD1oPzjIk19FGvqDcLRk+Tlc3DwPNHjBmWlUJSw8/PScnCQdNn0S8etIE jA8TvleLo0JyiQ4D8HyBL3yETLTTAjuywcieDNs3KBMMrcOtp0AHZssMD182KwrS W1GLEJluu2mEbpDCuL34xLryRufQEEq5RXaZV/Esm60UGg16cT6nV8c0SXCoqR4C NmxdjbUvzxNheW0XZP9cZCmvLah99EW4Jw== -----END CERTIFICATE-----Generated at Mon Mar 2 15:41:54 2026 by rpki-client