$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB26E88C7390227494021E2EEF569C0DB192B472.cer File: DB26E88C7390227494021E2EEF569C0DB192B472.cer (raw, json) Hash identifier: qsqBzUfAkXmLI1hdR5GzruepnADFv3hE9vkPTNhq0e0= Subject key identifier: DB:26:E8:8C:73:90:22:74:94:02:1E:2E:EF:56:9C:0D:B1:92:B4:72 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 4095D549FD139611EB2D4A0DD3D733480C567711 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E5F61B4A649E3C28E43BDD384B1AB917811314A8F25DB1CF7F995D0C7A1A3D0C/0/DB26E88C7390227494021E2EEF569C0DB192B472.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E5F61B4A649E3C28E43BDD384B1AB917811314A8F25DB1CF7F995D0C7A1A3D0C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 18:47:43 +0000 Certificate not after: Tue 26 Jan 2027 18:52:43 +0000 Subordinate resources: AS: 265861 IP: 45.226.112.0/22 IP: 2803:4620::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:95:d5:49:fd:13:96:11:eb:2d:4a:0d:d3:d7:33:48:0c:56:77:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 18:47:43 2026 GMT Not After : Jan 26 18:52:43 2027 GMT Subject: CN=DB26E88C7390227494021E2EEF569C0DB192B472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0a:c8:9d:1c:6e:6a:b3:77:30:60:77:90:b2: c8:22:b7:2f:d9:c2:f5:bf:46:6f:85:c1:b6:8c:f0: b7:f5:86:a4:9e:b3:35:0f:36:ce:37:6d:13:94:fe: fe:8d:28:82:c1:3c:f9:f1:ab:0c:b7:85:f2:07:2b: 4a:8e:e6:1c:ce:1b:5d:60:8f:2f:84:9c:51:09:ed: bd:0e:e5:1b:a0:84:b6:6d:7f:78:10:0a:99:b8:a4: 6c:7b:34:24:96:a3:d4:6d:0f:1f:4c:23:8a:b3:27: 8e:a1:b1:3f:31:a3:d6:a9:6c:94:7a:ca:db:6d:b9: 35:20:23:bc:ba:74:80:72:c6:50:72:37:2d:7c:ad: 36:e1:51:1d:2f:1b:a7:28:40:d8:1a:3c:b9:8a:a2: ef:0d:4e:2a:3e:22:af:53:39:35:07:5b:28:6d:47: f2:d1:2a:0a:82:4a:8b:11:3a:50:b6:7a:1d:b1:4c: 10:33:5a:d0:5e:ab:96:52:c2:74:4b:08:b0:1c:dc: 49:ee:23:d7:09:72:cc:c2:02:3c:81:3b:8f:e5:c1: 47:e1:8e:c4:15:18:b0:73:c8:d1:48:10:f6:25:f6: 41:09:13:4b:55:43:c9:55:61:34:3c:64:23:38:8e: bf:2d:0a:b6:9b:9c:98:ad:0f:3e:81:0f:f1:9a:9c: d1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:26:E8:8C:73:90:22:74:94:02:1E:2E:EF:56:9C:0D:B1:92:B4:72 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E5F61B4A649E3C28E43BDD384B1AB917811314A8F25DB1CF7F995D0C7A1A3D0C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E5F61B4A649E3C28E43BDD384B1AB917811314A8F25DB1CF7F995D0C7A1A3D0C/0/DB26E88C7390227494021E2EEF569C0DB192B472.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.226.112.0/22 IPv6: 2803:4620::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265861 Signature Algorithm: sha256WithRSAEncryption 67:aa:11:be:a9:3d:53:9e:4f:f2:9f:c2:31:d2:b5:28:b2:e3: e9:3f:e3:08:a7:aa:e9:99:b0:85:2d:79:da:e9:b9:b9:67:51: 9d:d8:3a:3f:5b:2f:8a:82:cf:51:68:ca:39:c2:4a:41:49:78: d0:c4:cb:66:fb:cf:58:35:6f:7e:2f:e2:79:8e:44:65:ee:a4: 48:0a:aa:d3:ff:c5:52:d3:fa:19:4a:71:7c:02:04:2c:f4:6b: 7a:82:0e:d7:3b:12:f3:80:ed:11:cf:44:54:b2:37:a8:f6:2b: 54:34:dc:63:92:0d:99:e3:71:20:fb:0a:1f:4b:1e:7a:70:23: fa:55:b5:3b:88:4d:f1:7c:d8:bb:5b:4d:87:0b:9d:a0:ec:d9: a8:b0:85:47:ad:1c:f3:c9:c4:11:7b:85:67:4b:7a:e8:74:12: be:03:95:80:c3:43:87:98:f0:0d:bc:c7:af:18:65:e3:fb:a6: 6d:0a:8a:f6:e0:17:91:ea:ae:6d:c8:c6:2d:e4:cc:e0:17:a4: 69:7d:3a:c8:fc:a5:e2:73:16:56:d3:cd:56:4b:55:71:9f:69: e9:5f:09:51:93:0f:12:3b:dc:20:dc:33:fa:8e:e8:82:03:9e: 10:59:5d:51:bf:8f:dc:f0:39:b1:8f:df:04:fd:19:36:06:ca: 35:1d:7c:22 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUQJXVSf0TlhHrLUoN09czSAxWdxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcxODQ3NDNaFw0yNzAxMjYxODUyNDNaMDMxMTAvBgNV BAMTKERCMjZFODhDNzM5MDIyNzQ5NDAyMUUyRUVGNTY5QzBEQjE5MkI0NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUCsidHG5qs3cwYHeQssgity/Z wvW/Rm+FwbaM8Lf1hqSeszUPNs43bROU/v6NKILBPPnxqwy3hfIHK0qO5hzOG11g jy+EnFEJ7b0O5RughLZtf3gQCpm4pGx7NCSWo9RtDx9MI4qzJ46hsT8xo9apbJR6 ytttuTUgI7y6dIByxlByNy18rTbhUR0vG6coQNgaPLmKou8NTio+Iq9TOTUHWyht R/LRKgqCSosROlC2eh2xTBAzWtBeq5ZSwnRLCLAc3EnuI9cJcszCAjyBO4/lwUfh jsQVGLBzyNFIEPYl9kEJE0tVQ8lVYTQ8ZCM4jr8tCrabnJitDz6BD/GanNHrAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTbJuiMc5AidJQC Hi7vVpwNsZK0cjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVGNjFCNEE2NDlFM0MyOEU0M0JERDM4 NEIxQUI5MTc4MTEzMTRBOEYyNURCMUNGN0Y5OTVEMEM3QTFBM0QwQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FNUY2MUI0QTY0OUUzQzI4RTQzQkREMzg0QjFBQjkxNzgxMTMxNEE4RjI1 REIxQ0Y3Rjk5NUQwQzdBMUEzRDBDLzAvREIyNkU4OEM3MzkwMjI3NDk0MDIxRTJF RUY1NjlDMERCMTkyQjQ3Mi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLeJwMA0EAgAC MAcDBQAoA0YgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQOhTANBgkqhkiG9w0B AQsFAAOCAQEAZ6oRvqk9U55P8p/CMdK1KLLj6T/jCKeq6ZmwhS152um5uWdRndg6 P1svioLPUWjKOcJKQUl40MTLZvvPWDVvfi/ieY5EZe6kSAqq0//FUtP6GUpxfAIE LPRreoIO1zsS84DtEc9EVLI3qPYrVDTcY5INmeNxIPsKH0seenAj+lW1O4hN8XzY u1tNhwudoOzZqLCFR60c88nEEXuFZ0t66HQSvgOVgMNDh5jwDbzHrxhl4/umbQqK 9uAXkequbcjGLeTM4BekaX06yPyl4nMWVtPNVktVcZ9p6V8JUZMPEjvcINwz+o7o ggOeEFldUb+P3PA5sY/fBP0ZNgbKNR18Ig== -----END CERTIFICATE-----Generated at Mon Mar 2 14:42:14 2026 by rpki-client