
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3600F1B0522620745C949963CFD8EA88F5958F83.cer
File: 3600F1B0522620745C949963CFD8EA88F5958F83.cer (raw, json)
Hash identifier: pKtnn2y2kpwGAzSpyDSXM+FLJggJnJvKSTzdP4+Di9I=
Subject key identifier: 36:00:F1:B0:52:26:20:74:5C:94:99:63:CF:D8:EA:88:F5:95:8F:83
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 0FE4DE16304C186260D9074DE072B4A217B0AEE3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/EBEE2E75A5692A7AA0C4A50F147A306DD4F397751DE34B89F3DA5998B97145D0/0/3600F1B0522620745C949963CFD8EA88F5958F83.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/EBEE2E75A5692A7AA0C4A50F147A306DD4F397751DE34B89F3DA5998B97145D0/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 02:27:30 +0000
Certificate not after: Wed 27 Jan 2027 02:32:30 +0000
Subordinate resources: AS: 272840
IP: 167.250.135.0/24
IP: 2803:dc90::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 21 Feb 2026 22:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:e4:de:16:30:4c:18:62:60:d9:07:4d:e0:72:b4:a2:17:b0:ae:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 02:27:30 2026 GMT
Not After : Jan 27 02:32:30 2027 GMT
Subject: CN=3600F1B0522620745C949963CFD8EA88F5958F83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:28:8e:41:ba:95:3a:78:58:47:64:00:8c:
7b:15:6b:20:51:d8:f9:86:76:e4:97:36:a1:11:ac:
ab:9f:74:3e:25:57:7e:23:26:e7:6a:40:c7:66:7d:
e7:39:41:95:6b:40:59:74:45:5e:1d:3c:1c:5b:40:
1a:fe:40:b5:12:a7:c8:57:81:ab:8f:56:f7:f8:62:
3b:a9:16:35:7a:99:a1:c7:d6:f9:ab:5b:5d:d2:ec:
c6:bb:e6:13:ae:77:99:67:01:6b:d9:10:91:2f:c2:
80:05:57:18:e3:18:e0:ac:a4:6c:74:5c:c1:97:eb:
15:0d:f7:a2:22:5d:6e:05:f4:1f:b7:1c:63:32:09:
6a:9b:dc:2e:c5:74:2c:df:db:34:02:80:ba:03:7f:
e3:b0:72:dd:cf:4f:f1:f2:77:57:7e:b8:6e:04:44:
7a:60:cf:2e:7f:06:81:85:67:b2:5b:0b:5d:5d:93:
9f:fa:8b:28:86:a6:08:89:79:08:bb:7f:3d:4c:12:
6c:14:40:03:a5:68:46:b9:7e:39:7d:47:ce:e9:63:
a0:78:74:2f:30:e5:03:8a:c9:88:9d:5e:ff:47:34:
23:6b:3c:da:d8:38:6f:21:4c:31:60:9c:8c:2f:89:
b5:17:22:f4:3c:bf:67:35:6b:17:0a:ec:f1:f0:cb:
fb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
36:00:F1:B0:52:26:20:74:5C:94:99:63:CF:D8:EA:88:F5:95:8F:83
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EBEE2E75A5692A7AA0C4A50F147A306DD4F397751DE34B89F3DA5998B97145D0/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EBEE2E75A5692A7AA0C4A50F147A306DD4F397751DE34B89F3DA5998B97145D0/0/3600F1B0522620745C949963CFD8EA88F5958F83.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.135.0/24
IPv6:
2803:dc90::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
272840
Signature Algorithm: sha256WithRSAEncryption
3c:86:85:6e:22:f8:f8:fb:40:3d:32:84:94:6b:ce:ea:39:94:
71:5b:cd:85:40:c2:cc:d5:4f:59:ec:b5:f1:7f:a0:2b:23:86:
72:f1:26:4a:8d:6f:4f:17:7b:9f:9c:f9:06:b3:cc:b5:db:ae:
a5:db:98:6a:5f:1b:3e:19:f5:17:fa:24:81:a3:63:97:d9:82:
5e:74:2e:ff:b0:65:45:9f:5d:bd:78:17:46:cd:ba:3b:98:7e:
d2:1a:f8:48:97:54:b0:27:c1:b1:98:6b:9a:07:02:38:7f:a1:
dc:1d:52:a8:da:79:90:1f:d4:50:53:ab:35:5e:6d:ba:ae:1c:
5c:19:3f:a6:be:ad:5e:5b:4b:fe:c5:8e:1d:30:4f:87:99:08:
5b:7e:e6:da:5a:d9:d4:de:61:3d:50:e0:5b:e3:d7:89:57:d6:
d8:40:3b:63:6c:93:97:fe:0f:0e:36:08:bf:1d:5e:b4:d0:bd:
51:9f:e2:b0:bc:fd:df:21:a1:e7:ab:0d:de:e9:ab:93:7d:44:
5c:f3:54:b0:d9:50:a3:0f:3a:da:fb:33:06:b9:7a:a5:05:72:
ae:50:2d:e4:bf:d6:81:fd:ab:42:39:05:c1:62:04:91:36:f2:
b7:6e:bf:b4:98:56:33:7a:8b:28:2f:9d:1c:9d:9c:60:4d:fc:
cb:0d:54:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:56:08 2026 by rpki-client