
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.cer
File: 5FAC4FA89218203214573AEA6EC449BC4CFD9640.cer (raw, json)
Hash identifier: G3fxTESlRh0/sHXvOFjvKWwpGMUDzLgSLoqHLxlTA4A=
Subject key identifier: 5F:AC:4F:A8:92:18:20:32:14:57:3A:EA:6E:C4:49:BC:4C:FD:96:40
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 7A247B4682FF3439F926FC8C8412C8854BC42C98
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 20:44:14 +0000
Certificate not after: Wed 27 Jan 2027 20:49:14 +0000
Subordinate resources: AS: 267858
IP: 170.244.168.0/22
IP: 2803:eac0::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 22 Feb 2026 23:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:24:7b:46:82:ff:34:39:f9:26:fc:8c:84:12:c8:85:4b:c4:2c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 20:44:14 2026 GMT
Not After : Jan 27 20:49:14 2027 GMT
Subject: CN=5FAC4FA89218203214573AEA6EC449BC4CFD9640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:fc:4b:1e:e3:fd:09:c4:93:75:17:55:b8:
44:e0:a9:57:63:f9:24:c9:3b:76:92:e9:47:ef:ed:
c6:21:a1:9e:3b:90:6c:6b:6a:ce:d4:2a:b1:e3:c5:
4c:ab:a5:de:e8:fe:5d:10:6d:f7:9a:d8:1b:7c:b9:
e7:3a:65:af:65:c6:2b:60:ca:23:25:3c:a4:0f:b8:
b3:55:a0:13:47:02:5f:75:d8:6a:e4:e0:3a:86:6b:
b4:5e:fe:cf:07:f5:89:46:4b:dc:1f:28:65:34:1a:
9d:0c:9d:16:b6:29:a5:40:76:13:81:8d:1d:59:29:
58:48:ea:2f:89:91:1c:42:f4:56:fd:3d:a5:10:2d:
5e:b6:85:bb:43:dc:41:68:a7:bb:08:af:3e:b7:cc:
74:d0:e9:06:19:0f:1e:d4:81:ee:60:9e:ec:08:f0:
52:b1:92:87:a2:d6:5b:2e:ea:c8:b1:19:8a:fe:c2:
dc:5a:32:30:e9:9b:32:5a:25:cb:91:db:c2:b6:91:
89:54:71:2b:01:24:48:3d:77:4d:cb:a2:22:57:cc:
fd:e9:ac:a3:7f:9e:88:7e:1e:a7:c9:dd:8a:35:70:
69:ce:56:1b:68:58:b0:b6:c8:52:a4:b3:1f:31:5d:
1f:73:0c:67:09:b0:fb:69:9c:75:18:84:9c:47:e3:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5F:AC:4F:A8:92:18:20:32:14:57:3A:EA:6E:C4:49:BC:4C:FD:96:40
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.168.0/22
IPv6:
2803:eac0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267858
Signature Algorithm: sha256WithRSAEncryption
00:a8:42:2c:d2:50:16:a7:9d:6e:e8:cd:6f:a8:9b:ff:14:e0:
09:3f:0b:eb:3b:3d:6d:f1:4b:c7:1c:77:d8:0f:53:23:1d:8b:
ad:2f:e8:42:f6:1e:5a:ea:a2:bd:a5:41:2f:87:07:5a:99:52:
0c:bb:a9:bb:4c:4c:55:19:d7:a9:a0:b3:2d:c7:05:52:b6:f3:
f3:91:6c:10:b9:6f:4d:92:24:a2:68:fc:2b:c7:9f:fb:ce:82:
67:27:53:58:aa:ad:55:8c:cb:61:3a:6e:56:3a:c5:3c:81:85:
5c:e6:75:23:88:c3:a2:d9:41:c8:d1:4e:80:74:b7:84:cd:be:
40:e8:c7:cf:c3:0e:a1:59:1d:38:e7:fc:36:87:41:4a:d1:f7:
d6:d6:c6:6e:1e:41:b7:b6:d9:b2:0f:30:1a:d2:a3:0b:b7:3f:
de:ef:4c:62:62:24:cd:3e:cc:0c:01:4e:8a:06:94:c3:c0:2a:
56:83:66:06:ae:4a:47:20:4a:33:5b:f7:f3:84:58:3a:cb:ea:
bf:bb:14:cf:93:ac:35:17:6a:ba:bf:94:4f:c1:8d:e2:e9:43:
b0:34:0c:31:bc:10:23:b7:09:f8:5a:d9:37:0d:19:81:7a:94:
64:67:09:a6:63:47:ea:3f:70:63:f1:39:cc:ca:36:30:58:66:
2e:74:0d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:19:00 2026 by rpki-client