
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.cer
File: 412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.cer (raw, json)
Hash identifier: q2XdPWDsgMfAGIxpVptY9ExG5otyjpEOfkz/bxB/3C0=
Subject key identifier: 41:2E:3F:2D:3B:64:DF:DE:B5:82:85:F6:53:32:7E:EB:6F:F6:CA:E9
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 6AC25A23B83F95C760090203C3EB270693A83E72
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 27 Jan 2026 20:41:24 +0000
Certificate not after: Tue 26 Jan 2027 20:46:24 +0000
Subordinate resources: IP: 200.9.4.0/22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 22 Feb 2026 23:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:c2:5a:23:b8:3f:95:c7:60:09:02:03:c3:eb:27:06:93:a8:3e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 27 20:41:24 2026 GMT
Not After : Jan 26 20:46:24 2027 GMT
Subject: CN=412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3e:8a:10:aa:70:2b:b1:63:9e:f8:55:92:d1:
56:73:a0:ed:8c:bf:80:96:aa:6f:0b:27:f2:7c:6e:
35:1a:38:66:f4:36:c3:b3:f1:91:93:13:0f:08:24:
83:c3:f2:a2:18:e2:0b:3a:ba:d8:17:f7:9d:97:19:
47:39:1a:22:7c:44:58:b7:aa:a5:1b:cf:0e:f8:0c:
be:b7:62:97:bc:8e:b0:d4:eb:c4:96:61:4d:f6:62:
65:c5:3f:25:6c:5b:64:ae:fa:b9:df:95:4f:ae:6a:
6e:5f:a3:a4:28:75:39:a8:b0:bf:08:6f:02:d4:7c:
73:42:ca:92:89:d9:41:78:e5:a4:a8:13:6f:8d:48:
2c:b4:51:62:08:bf:c5:4d:67:f7:c4:72:14:9e:e6:
43:fe:b4:ac:23:d4:9e:53:c1:2e:d6:82:0c:51:53:
08:4c:d5:ef:ee:52:1e:99:77:42:48:5d:75:7b:2e:
11:9d:47:b6:f5:37:bb:33:62:94:f4:44:99:58:a4:
25:43:91:d7:bb:e3:3d:ec:1d:11:b9:29:f8:33:2d:
2a:e8:dd:1c:f9:b1:6c:3b:42:5c:f6:3a:cd:20:cb:
12:d6:b1:b0:cc:2d:c3:95:52:ac:b1:23:65:3e:49:
84:fe:d8:4c:b8:ee:7f:ec:23:9d:bf:78:7c:7c:25:
f6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
41:2E:3F:2D:3B:64:DF:DE:B5:82:85:F6:53:32:7E:EB:6F:F6:CA:E9
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.9.4.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:b5:7b:e1:45:16:aa:71:60:f6:d0:65:81:e9:0e:e3:a1:06:
a6:3e:74:7f:1f:91:9e:bb:a0:f9:53:82:c7:20:d5:ef:67:3b:
26:86:7d:df:fa:6f:a6:89:f7:ac:1c:46:70:9e:db:4b:59:75:
8f:3f:f3:2f:5f:46:93:af:07:40:51:19:2c:a0:c5:aa:a0:67:
8a:3e:c1:60:1c:6f:05:ba:da:1e:2d:d7:67:2e:7b:83:b6:31:
02:1b:1d:c8:a8:ce:d4:f3:3e:46:be:37:e3:09:38:94:25:db:
e2:4a:55:0b:a1:61:33:a3:d6:26:27:1c:2f:b9:35:c4:ec:6d:
34:ca:d6:4e:d4:9a:79:13:65:ab:a7:e7:61:68:bb:44:1f:10:
c8:a5:ad:6f:af:e0:bf:b7:78:e5:0b:3b:27:ae:47:a5:05:8c:
7f:95:60:85:b4:f1:51:a7:c1:ff:02:fb:c9:1e:1d:78:82:a6:
37:f9:53:bd:3b:45:cf:13:28:b6:b3:01:7c:34:cd:1d:5c:23:
78:21:23:fd:9f:34:d6:c7:08:78:36:da:ab:2d:99:52:bf:7b:
17:fe:2d:4c:6c:bb:ed:83:f0:e3:6b:e8:f1:b3:08:af:ec:29:
f1:58:10:fc:49:ee:ab:38:e7:02:d3:99:69:ad:47:25:4e:f7:
51:0e:39:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:16:03 2026 by rpki-client