
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer
File: 3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer (raw, json)
Hash identifier: 8OFpet+mbT4IMRm3/yJgj97IlmxGzQ7wDJXCQyWw5kg=
Subject key identifier: 3F:40:D9:6A:4F:BB:BE:F5:8B:DC:1A:8A:02:AB:0D:89:B2:B1:62:92
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 2605275543D1CC94C7CBD5F9A843AC030C7874CC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 10:05:59 +0000
Certificate not after: Wed 27 Jan 2027 10:10:59 +0000
Subordinate resources: AS: 272859
IP: 2803:6290::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 22 Feb 2026 23:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:05:27:55:43:d1:cc:94:c7:cb:d5:f9:a8:43:ac:03:0c:78:74:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 10:05:59 2026 GMT
Not After : Jan 27 10:10:59 2027 GMT
Subject: CN=3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:5d:18:2e:fb:10:4d:78:99:27:2e:a6:af:
cd:a5:a2:e8:47:3a:91:e6:cb:84:88:08:ba:3a:e6:
c8:23:63:e7:1c:02:4e:7f:ac:fc:6e:02:90:55:79:
7b:21:82:46:8c:06:b6:c4:0c:af:c3:a7:90:e6:c3:
3b:15:c3:7c:12:75:89:ee:c7:de:f6:66:00:f8:a4:
7e:a2:2e:e5:c2:72:7c:00:33:a2:f4:cd:47:9d:36:
94:8f:31:3b:78:f1:55:fc:57:11:c6:0c:21:95:9e:
9f:9f:00:89:f2:84:d8:0d:be:8d:9e:b8:5d:74:cd:
01:cf:ca:ee:ac:b7:52:8c:af:be:55:3a:bc:1a:74:
08:de:cd:ac:99:f8:a2:29:3d:24:2c:0b:6f:fa:75:
a0:66:1e:f8:0f:39:4c:46:d9:8b:d3:b8:ff:01:aa:
bb:e3:38:ee:0f:e1:46:18:01:e8:3d:ff:c0:db:32:
64:10:4e:7f:a0:b2:a5:3f:68:55:25:87:6a:70:03:
8f:ae:be:c2:4a:09:61:41:07:41:7b:6a:f8:8b:f5:
45:09:61:8a:71:41:50:39:ed:3c:c1:39:ec:a7:69:
95:06:20:aa:7b:5e:51:1f:ab:d3:c1:17:91:25:c5:
7a:9e:be:80:61:0c:2c:80:67:53:60:81:2c:a7:4a:
1b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3F:40:D9:6A:4F:BB:BE:F5:8B:DC:1A:8A:02:AB:0D:89:B2:B1:62:92
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:6290::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
272859
Signature Algorithm: sha256WithRSAEncryption
2d:a0:71:0f:66:9c:10:56:c2:42:31:28:c3:87:e8:59:d5:51:
d4:c8:cf:aa:51:20:81:61:24:45:3d:47:46:28:75:fd:ab:29:
cf:05:a2:4e:05:06:f9:37:2b:b0:57:87:b1:15:67:ee:0f:83:
c1:b7:f3:a0:e7:fa:fb:3d:06:e7:1b:8a:0f:a2:aa:98:da:20:
0f:4e:81:c8:00:f9:cf:9b:8e:e5:30:45:9c:f9:ea:ea:c7:84:
3c:a5:46:0d:2e:64:5a:07:47:b6:f7:af:3f:db:51:da:fd:97:
7a:03:29:f4:53:bc:4e:fd:18:50:a7:bc:e8:d3:47:6c:b5:d3:
7e:51:43:52:6c:e1:d1:90:6f:39:70:34:b7:2b:d0:05:4a:fc:
aa:be:94:bc:d3:d5:b4:a3:d5:53:95:05:e0:2e:e7:f6:05:ba:
43:5c:a8:a0:c5:e2:4a:22:bd:f8:bc:cc:86:8a:e5:16:7c:a0:
00:1d:f6:de:0e:60:56:70:d5:f1:00:7a:3f:f3:ba:6b:f2:25:
98:05:7c:6c:02:b5:ee:a1:9e:ed:c4:d4:83:8b:eb:55:7b:01:
44:c6:8d:50:b7:8e:87:97:88:d6:b5:d8:a1:11:da:29:1d:49:
2a:32:28:1f:7f:8e:06:49:5b:6b:47:18:0d:14:e1:04:b3:b4:
17:31:00:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:19:55 2026 by rpki-client