
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer
File: 25DDDEC2A8044F688AA799A6612C434B2ABEA979.cer (raw, json)
Hash identifier: TpQOEYYNVsHAJ7/NvC4JNAuiNfusFSClO0Ax+Ramfmo=
Subject key identifier: 25:DD:DE:C2:A8:04:4F:68:8A:A7:99:A6:61:2C:43:4B:2A:BE:A9:79
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 53500D15B598D728AA229B15DF6F0FF8ED9756DD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 13:43:42 +0000
Certificate not after: Wed 27 Jan 2027 13:48:42 +0000
Subordinate resources: AS: 264630
IP: 200.106.248.0/21
IP: 2801:0:190::/48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 22 Feb 2026 23:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:50:0d:15:b5:98:d7:28:aa:22:9b:15:df:6f:0f:f8:ed:97:56:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 13:43:42 2026 GMT
Not After : Jan 27 13:48:42 2027 GMT
Subject: CN=25DDDEC2A8044F688AA799A6612C434B2ABEA979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:db:7a:b6:8e:f0:80:5e:67:be:5b:34:17:88:
1b:fe:6a:76:c6:b6:1c:84:3a:14:51:3c:aa:be:a9:
7e:dd:18:4a:7f:e8:88:66:b5:d1:92:5a:a7:bc:e0:
74:85:09:0e:9a:f3:f3:b2:77:be:64:e8:9a:5c:dc:
23:ac:35:a9:90:d6:4d:b8:a7:e4:63:dc:fb:12:6c:
ad:18:5b:ad:ea:54:7b:da:64:40:a8:8c:ef:c1:18:
7d:29:f0:59:71:21:f5:85:1d:55:f3:76:f3:60:ac:
08:98:5c:1c:46:af:12:0f:b2:7a:8a:4f:2b:01:69:
dc:41:be:11:a8:72:c4:c6:cd:fe:33:76:d9:80:ab:
aa:d0:8a:9f:90:61:33:b8:ad:f5:9f:f4:e5:9e:71:
3b:92:c4:2e:ea:3c:3c:b7:c2:32:f7:d8:8d:09:02:
9b:7a:54:a1:e1:2d:42:e0:77:9e:a9:34:2b:77:de:
1b:66:b4:f6:f3:56:d9:92:9d:1a:c6:d4:e2:f9:52:
3c:65:07:1a:fc:03:cf:a9:9d:16:bf:1f:53:c1:4a:
5f:d1:bb:24:e7:e1:54:9f:dd:30:fb:b9:b8:c8:ee:
bf:b4:3d:18:c2:f9:f3:5a:84:a5:09:a7:f7:9e:66:
4d:bc:68:49:31:37:d1:b4:f1:8d:bd:de:5d:0d:77:
43:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
25:DD:DE:C2:A8:04:4F:68:8A:A7:99:A6:61:2C:43:4B:2A:BE:A9:79
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F149C1A63EA14689EA04FAAF65EDCE9D5706A76D0F690C939036968788DF292F/0/25DDDEC2A8044F688AA799A6612C434B2ABEA979.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.106.248.0/21
IPv6:
2801:0:190::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264630
Signature Algorithm: sha256WithRSAEncryption
27:2b:67:97:bb:dc:a9:f4:16:46:36:bc:3a:36:16:b1:ed:75:
7a:00:6c:ef:5e:70:22:89:ee:d6:25:7b:bb:09:67:17:e6:71:
b3:50:44:4a:2c:42:06:75:aa:ff:91:75:2d:fe:32:99:1c:ec:
14:f7:d2:a4:65:b0:14:67:ad:a2:63:39:89:95:75:9e:47:bb:
8a:43:86:8a:0d:5b:95:b7:cc:55:15:d2:09:fb:7f:2a:f5:6a:
e5:d8:6d:61:53:75:7f:ae:dd:7a:7e:d1:4f:8f:bc:1b:69:c4:
b0:ce:30:73:e8:79:d5:70:56:45:cb:ad:16:9d:10:a9:0a:44:
7a:e8:a2:05:64:c6:94:2b:8c:5f:b8:8e:e9:79:6f:82:4c:c5:
8c:38:d2:2d:ed:62:9b:1b:e6:d0:d7:10:cd:9f:18:c3:ca:cd:
4e:ad:dc:88:94:85:4a:a7:e1:68:af:dc:ae:fd:6b:80:16:5b:
e1:ae:81:c6:22:ba:c2:b3:d8:8c:c8:5b:27:7d:40:a9:15:55:
4d:07:17:15:26:64:c1:2b:12:1e:18:11:d8:7e:f8:8f:31:c7:
b1:13:02:f7:7e:4c:d4:22:05:30:7d:e1:3c:85:87:c6:8c:77:
4d:9b:2a:2b:81:b1:46:56:94:48:ff:c5:96:0b:a0:63:35:ab:
c7:2f:b4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:36:46 2026 by rpki-client