
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109.cer
File: 2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109.cer (raw, json)
Hash identifier: X3k7AcsqxgkG3Q6cKO+M86zbU+266Jb9agodiUN3aro=
Subject key identifier: 2E:9F:A3:F3:5A:2B:5E:2A:62:F1:28:B1:E1:1A:64:14:B4:2D:71:09
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 5D4C09302820ECC0771D6476988E20B4F7473D96
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/E83E9530FD2523ACC48E9176102A76C83E41CACA874A1F819AA18AF2A1941D78/0/2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/E83E9530FD2523ACC48E9176102A76C83E41CACA874A1F819AA18AF2A1941D78/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 27 Jan 2026 17:50:43 +0000
Certificate not after: Tue 26 Jan 2027 17:55:43 +0000
Subordinate resources: AS: 273195
IP: 2803:c650::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 22 Feb 2026 23:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:4c:09:30:28:20:ec:c0:77:1d:64:76:98:8e:20:b4:f7:47:3d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 27 17:50:43 2026 GMT
Not After : Jan 26 17:55:43 2027 GMT
Subject: CN=2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f6:2d:31:91:1e:d7:38:8d:c4:2f:06:0d:5a:
cd:60:8c:b9:f8:f1:ba:54:d9:98:f5:71:36:bf:87:
ed:91:56:5d:7b:95:f2:82:2d:27:3d:3f:5b:6b:2e:
40:84:1b:bf:d4:07:0a:56:54:78:bd:44:ae:bd:f3:
99:53:c3:6b:53:16:04:5c:f4:ae:31:eb:b9:c5:e5:
b6:0b:eb:9d:b4:a0:c6:84:be:a5:d8:76:71:54:cb:
42:c4:11:7f:42:31:f7:de:61:ab:aa:22:80:7e:84:
86:e9:e3:62:a7:75:9d:52:7a:45:63:72:64:ab:e5:
e2:15:51:36:c6:23:d7:92:e2:a0:64:e3:4c:76:30:
ef:5d:81:b9:54:93:e2:99:16:ef:6f:3d:cf:43:71:
2f:e3:fb:f0:76:8d:4a:85:d9:fb:1d:32:6a:e8:8c:
9d:bb:4d:5e:69:03:a6:f8:be:83:7f:bd:27:cf:c8:
db:55:50:d7:9d:f8:76:de:df:7a:97:b9:65:0d:c2:
5c:48:bd:94:84:47:19:32:68:7b:43:c6:0c:e6:7b:
6e:b1:2d:b6:b3:1f:82:40:e0:e2:26:19:50:11:0c:
8d:c9:48:a5:81:fc:59:0d:25:60:61:e4:0a:6d:82:
52:1a:18:3a:c0:47:dc:12:01:a9:c7:a0:90:77:47:
22:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2E:9F:A3:F3:5A:2B:5E:2A:62:F1:28:B1:E1:1A:64:14:B4:2D:71:09
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E83E9530FD2523ACC48E9176102A76C83E41CACA874A1F819AA18AF2A1941D78/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E83E9530FD2523ACC48E9176102A76C83E41CACA874A1F819AA18AF2A1941D78/0/2E9FA3F35A2B5E2A62F128B1E11A6414B42D7109.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:c650::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273195
Signature Algorithm: sha256WithRSAEncryption
29:a0:28:92:39:2a:62:00:c5:47:c5:82:21:7b:01:ab:83:75:
38:ac:85:86:bf:b1:de:bf:3d:57:48:58:d7:37:63:24:26:d0:
96:ae:3a:7b:ca:74:1f:4a:85:2a:3d:74:d3:5c:af:2f:a9:7a:
f2:ba:13:46:0b:53:c1:1b:80:8f:1e:81:98:d5:22:44:b8:f7:
29:8c:40:02:55:57:ff:09:bb:98:63:43:88:86:6c:d7:f6:a4:
47:ff:56:5d:3f:17:7c:17:5b:92:e8:91:7d:e6:74:71:ec:bf:
89:7a:b9:11:11:61:43:3c:c9:b0:df:b6:b5:f5:cf:12:89:1f:
96:18:45:e4:16:07:53:12:d9:10:31:02:bb:46:31:15:56:e4:
a6:26:5c:d5:75:d3:d0:5e:26:03:d9:e2:93:cb:b9:ae:36:71:
8c:55:25:a5:37:be:a1:9e:55:90:b8:91:36:f1:85:64:ac:0a:
89:54:b4:f9:c7:a4:67:5f:cb:87:ad:9a:a6:bb:34:89:20:03:
4f:35:c6:7b:bd:c6:c2:8e:56:99:a8:c8:e4:6e:0a:d8:a4:43:
76:5c:e6:fd:fd:c0:36:ed:d8:de:4f:14:d4:61:68:51:d2:cd:
2f:6b:8b:8b:ec:7e:70:48:93:62:ac:be:3f:e5:1f:12:89:e8:
23:d9:c6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:52:01 2026 by rpki-client