
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer
File: 2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer (raw, json)
Hash identifier: WzarkBAE4Sf3zoVLa0d5T9skBIfsdzHN4QtmJPcfSRw=
Subject key identifier: 2F:B0:6E:BD:28:FE:83:A5:64:FA:3D:FC:83:F4:F9:8A:C6:20:C9:8A
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 27483AAA3FC7C11476ED1FD5425A3C7927D89FBB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 17:55:21 +0000
Certificate not after: Wed 27 Jan 2027 18:00:21 +0000
Subordinate resources: AS: 16531
IP: 200.52.128.0/20
IP: 200.76.96.0/20
IP: 200.76.116.0/23
IP: 200.76.119.0/24
IP: 200.76.124.0/22
IP: 2001:1200::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 22 Feb 2026 23:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:48:3a:aa:3f:c7:c1:14:76:ed:1f:d5:42:5a:3c:79:27:d8:9f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 17:55:21 2026 GMT
Not After : Jan 27 18:00:21 2027 GMT
Subject: CN=2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:16:e3:e1:ee:95:14:b6:71:de:0a:07:5f:f7:
3d:53:b1:08:da:4e:eb:71:cf:e2:e5:74:54:4f:93:
90:8f:02:39:0f:88:b0:aa:13:5c:23:a1:12:93:66:
92:78:53:41:3a:08:9c:9d:08:3c:6a:0d:21:ac:25:
19:3d:f4:48:a1:f7:1a:b2:a5:eb:cc:fe:39:e3:75:
58:dc:45:88:ec:a7:65:30:c3:69:f6:e3:46:a3:77:
c5:a6:18:8c:bc:76:98:21:72:3e:b9:12:34:db:bb:
f4:e1:f4:72:c4:0f:db:52:9c:e5:96:3b:e9:82:4a:
c2:19:5b:c0:5a:99:c5:dd:7b:71:18:15:ef:48:61:
92:f4:f9:03:a9:cf:47:9b:8f:43:80:30:4e:9a:9d:
07:a3:e4:10:e6:b9:66:8f:78:b9:02:5a:b0:09:ca:
9c:05:d2:84:f1:e0:95:9b:01:84:2c:a6:be:bd:fd:
3f:30:56:50:36:6a:0e:76:75:82:c8:98:a0:20:4d:
a4:68:68:ce:e4:ce:f7:64:ea:03:c6:cd:c9:4b:e8:
1e:4c:3c:7c:66:2a:3b:c6:21:c7:17:92:d8:2a:5a:
59:fd:ea:5a:ef:85:01:07:73:3d:08:f4:16:2e:55:
08:f1:10:2e:ae:17:a1:cf:85:6a:a9:81:99:c1:09:
15:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2F:B0:6E:BD:28:FE:83:A5:64:FA:3D:FC:83:F4:F9:8A:C6:20:C9:8A
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.52.128.0/20
200.76.96.0/20
200.76.116.0/23
200.76.119.0/24
200.76.124.0/22
IPv6:
2001:1200::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16531
Signature Algorithm: sha256WithRSAEncryption
77:9e:cc:3a:fb:88:ec:4c:27:9f:22:dc:61:04:b8:2f:5b:2d:
c6:e6:d7:f0:ae:a7:47:b7:18:9a:26:b2:39:77:84:b5:77:10:
4d:54:6c:e6:1e:d0:a8:b2:ce:c7:1c:d7:76:99:88:46:75:80:
76:bd:9b:cb:57:7d:0f:32:13:68:33:c9:64:f1:cd:e2:de:4f:
4b:99:e3:14:42:07:b5:dd:7c:6b:c2:2e:ec:e1:31:26:0a:f5:
3f:af:43:4f:b4:7a:5f:7c:98:28:99:b6:17:22:f8:23:e7:3d:
6c:6a:41:2a:05:a5:15:96:99:7a:33:02:44:59:ff:75:a4:e6:
e9:02:98:1e:13:32:29:04:c9:0f:ee:83:0b:a6:12:09:3b:58:
94:4f:0f:9b:f5:54:2c:df:ad:8d:16:aa:19:8b:aa:40:5b:b8:
e1:97:aa:88:91:c1:58:b8:bd:34:c8:67:31:cb:42:93:de:2b:
20:63:23:95:78:6c:01:8a:19:27:8c:1f:cd:db:5a:26:42:7f:
d2:36:de:d0:6d:41:72:75:a3:13:d2:6b:2a:51:61:6c:83:89:
c2:d8:f0:81:ac:7a:5b:29:56:e1:34:5a:11:55:cf:b2:ec:98:
43:57:a4:4c:1a:e1:bc:a3:8d:56:ce:59:fe:95:20:50:d7:1f:
1c:ad:3a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:46:32 2026 by rpki-client