
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49B1A7F3F084BD80E21A4EEBC75931ED9C458056.cer
File: 49B1A7F3F084BD80E21A4EEBC75931ED9C458056.cer (raw, json)
Hash identifier: zoKe5WrD4RQpO4NoRovVG/SBvQBT/7AK7sMSZ0PKXMs=
Subject key identifier: 49:B1:A7:F3:F0:84:BD:80:E2:1A:4E:EB:C7:59:31:ED:9C:45:80:56
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 42ECB7C8EE198C5CF49F4DAD7516DAA02A7A5D8C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/52ED2CF8405F4F6F4843763D866A63D2BC3E11F97C38DE67412360A72D20C560/0/49B1A7F3F084BD80E21A4EEBC75931ED9C458056.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/52ED2CF8405F4F6F4843763D866A63D2BC3E11F97C38DE67412360A72D20C560/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 21:22:33 +0000
Certificate not after: Wed 27 Jan 2027 21:27:33 +0000
Subordinate resources: AS: 266671
IP: 45.225.75.0/24
IP: 2803:1920::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 22 Feb 2026 23:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:ec:b7:c8:ee:19:8c:5c:f4:9f:4d:ad:75:16:da:a0:2a:7a:5d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 21:22:33 2026 GMT
Not After : Jan 27 21:27:33 2027 GMT
Subject: CN=49B1A7F3F084BD80E21A4EEBC75931ED9C458056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4e:a5:05:a1:a7:e2:98:c7:a0:ee:9f:4d:d3:
35:83:0d:62:4d:43:79:3f:4f:39:6e:66:f5:70:45:
c7:b3:41:9f:92:fa:bf:d2:cf:3e:e1:c2:3a:d9:8e:
56:50:39:cf:36:a6:30:bf:c6:ea:25:cb:6c:ed:d4:
ee:a8:cb:71:7c:e8:95:72:88:9e:36:07:c5:37:f8:
08:b2:66:dc:16:02:66:cf:a8:66:44:3b:79:7d:5d:
85:4c:3f:d2:4b:42:58:9d:f3:10:9e:d3:c6:26:76:
58:6e:1f:cb:d9:d7:02:e5:15:e4:a4:8c:a0:a8:fa:
e5:ae:59:79:e5:a9:96:af:c1:68:e2:a8:84:29:98:
f5:62:33:bf:9b:f2:08:b7:42:62:87:c9:80:58:24:
af:3b:dc:4a:84:cd:81:45:62:3e:cb:ce:5d:d9:d9:
45:0f:df:cc:15:b8:00:b5:bd:a5:5a:61:f4:36:44:
26:d8:79:78:dc:ab:60:bf:b8:5b:de:94:1b:07:65:
31:9f:fa:48:d5:1d:a8:31:ff:93:1e:a0:e2:d1:40:
5a:90:5d:60:c2:d0:5f:78:58:0f:83:7d:4f:68:43:
25:3e:9b:75:e7:27:09:45:7b:95:7c:c2:94:19:9c:
ed:cc:69:e1:e8:ed:a2:69:ef:0a:1f:b2:81:3b:21:
af:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
49:B1:A7:F3:F0:84:BD:80:E2:1A:4E:EB:C7:59:31:ED:9C:45:80:56
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/52ED2CF8405F4F6F4843763D866A63D2BC3E11F97C38DE67412360A72D20C560/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/52ED2CF8405F4F6F4843763D866A63D2BC3E11F97C38DE67412360A72D20C560/0/49B1A7F3F084BD80E21A4EEBC75931ED9C458056.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.75.0/24
IPv6:
2803:1920::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266671
Signature Algorithm: sha256WithRSAEncryption
0b:bb:28:ef:10:9d:90:4e:ae:d0:88:8f:b4:ce:8a:f9:e9:d0:
0b:1c:cc:91:a1:b3:5e:32:d3:6b:2b:b6:f1:e8:f7:cc:19:f4:
02:b0:0e:68:19:c3:31:07:02:af:42:0c:07:36:e8:62:1c:45:
e6:7e:39:7e:61:58:76:88:8a:01:b4:c1:f1:6d:47:bf:c4:c9:
43:7e:84:ef:0a:2d:fa:f1:89:2c:7b:cd:1d:a2:a0:d2:21:62:
74:92:6a:4e:af:6d:69:1c:a7:7f:7f:28:39:da:cf:c9:17:55:
74:bf:59:35:ef:b7:50:ea:80:e4:43:2e:d1:7b:f1:99:ae:ef:
e4:24:64:8b:4a:53:59:32:f7:2a:9d:57:d4:db:19:b0:7d:b2:
23:d7:9e:58:34:52:a7:03:73:1a:f5:cc:99:1e:e9:4f:df:3e:
e3:31:a2:0c:99:b9:f7:10:7d:c8:a6:82:7e:98:cb:fd:5c:6c:
87:d4:3c:24:97:10:a1:a3:34:52:63:51:e6:ee:dc:7f:4c:56:
83:e2:44:f8:f9:51:10:60:7d:05:d1:aa:d2:38:77:35:25:83:
ff:2e:de:61:62:76:3c:44:88:a8:66:b7:cd:b3:59:19:a7:ff:
c8:ac:9e:cb:33:16:d2:6f:12:3d:cd:c1:2b:64:74:98:a2:f4:
28:32:68:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:58:49 2026 by rpki-client