
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.cer
File: 0ACE4851157C591E6DB98282567BE62A5CD0F826.cer (raw, json)
Hash identifier: Hu9BMMsW1Gs6k5hUwWNtISN4k1fAyL3oewC3GU45IDo=
Subject key identifier: 0A:CE:48:51:15:7C:59:1E:6D:B9:82:82:56:7B:E6:2A:5C:D0:F8:26
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 5ECF9DE2DDDF2F50227412FC991FC0C43DDDFF90
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 17:28:29 +0000
Certificate not after: Wed 27 Jan 2027 17:33:29 +0000
Subordinate resources: AS: 61499
IP: 138.121.4.0/22
IP: 2801:19:e000::/48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 22 Feb 2026 23:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:cf:9d:e2:dd:df:2f:50:22:74:12:fc:99:1f:c0:c4:3d:dd:ff:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 17:28:29 2026 GMT
Not After : Jan 27 17:33:29 2027 GMT
Subject: CN=0ACE4851157C591E6DB98282567BE62A5CD0F826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4f:e2:68:44:c6:eb:76:0a:a1:6d:c0:4d:3e:
c2:14:be:4f:f1:e8:fd:59:96:df:1c:8f:e3:69:32:
57:e8:f4:c6:e9:d8:57:58:27:fb:8c:6e:9a:31:8f:
9c:76:31:0f:3d:1e:d0:89:c3:da:59:60:b4:7d:a6:
28:5a:45:88:4d:27:52:90:17:e4:d1:c6:82:12:13:
ef:63:a7:fd:66:76:62:55:b7:81:2d:28:ab:b6:d6:
4d:ae:1a:39:e0:50:ed:3b:fe:54:18:f4:8d:27:4e:
e4:3e:0c:42:72:a4:7d:5a:b5:eb:78:ed:f8:63:40:
18:f7:83:d6:32:b8:3e:d0:4f:f7:23:d6:f5:36:1d:
fb:2d:39:30:be:d2:47:9c:fa:30:83:31:b0:d3:26:
6d:b4:c3:91:58:6e:91:16:a8:07:25:9b:4b:d2:fb:
9a:c0:2c:2c:f9:6f:12:bf:13:99:ec:0f:72:16:28:
f1:91:b0:6d:55:c1:05:0d:af:5e:9a:3f:b1:5a:bf:
a5:1a:ea:53:c2:c7:dd:4a:18:80:8e:39:04:61:22:
34:c0:ec:05:6a:95:61:d6:68:fb:2f:35:43:c4:f4:
ab:5b:0c:95:f8:fb:9f:77:27:0e:ee:84:95:67:98:
a5:89:e9:77:88:4b:87:46:d0:1a:41:03:df:a7:b9:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0A:CE:48:51:15:7C:59:1E:6D:B9:82:82:56:7B:E6:2A:5C:D0:F8:26
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.4.0/22
IPv6:
2801:19:e000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61499
Signature Algorithm: sha256WithRSAEncryption
6c:bd:2d:e9:35:64:d8:52:1f:66:3a:19:d6:09:f8:4f:8c:6c:
3b:f2:e0:33:f8:72:43:15:b0:0f:8f:87:4e:8c:f9:02:ac:d1:
02:c0:45:5f:ac:b2:72:00:13:3f:47:07:9c:be:d2:fa:df:83:
6a:c5:89:36:4e:b1:a4:37:35:1d:67:de:1b:d6:f3:87:61:aa:
88:db:af:ac:d4:b3:6f:ee:1d:37:43:94:05:bc:e1:5d:08:03:
2c:e5:76:a6:d0:46:52:6f:ac:9c:a4:ab:90:2b:0c:7e:84:10:
2b:3e:ed:9f:6d:de:3a:61:e3:0b:ec:8c:13:40:f5:5a:98:f7:
18:fe:28:cd:15:ee:3d:f1:45:86:1e:82:85:e0:40:f1:fa:58:
16:e4:f2:58:e9:45:d1:38:a1:e2:fe:ae:40:69:a9:6d:d5:16:
50:d0:7c:2f:ef:00:03:78:99:ce:a0:77:eb:bf:1c:c3:78:32:
ff:5e:96:05:8b:36:89:30:cb:55:99:9d:55:c1:29:96:36:2c:
1a:f6:54:30:ae:fa:d0:41:d3:b7:9c:5b:d7:90:2e:15:ce:b8:
cd:7a:c0:12:cc:ce:6c:68:36:48:6e:a4:58:2f:2b:cd:73:64:
5a:44:e0:f2:99:82:c4:81:e6:79:ac:4f:98:02:79:6f:97:4f:
3d:ac:41:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:41:17 2026 by rpki-client