
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F2B68C44C2A31541210D894254226DCF2A63FD5.cer
File: 6F2B68C44C2A31541210D894254226DCF2A63FD5.cer (raw, json)
Hash identifier: Ez6oUdIo7XhJWDNLWkVCfdplIcUVRezTmdndfhnuGVk=
Subject key identifier: 6F:2B:68:C4:4C:2A:31:54:12:10:D8:94:25:42:26:DC:F2:A6:3F:D5
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 35F068FC44A1983CF071765654D7A5C1A00D65CF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/45F5B0F6B432084492421F87D85DC933C32131207800D5BEFBF891585FF9A0DB/0/6F2B68C44C2A31541210D894254226DCF2A63FD5.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/45F5B0F6B432084492421F87D85DC933C32131207800D5BEFBF891585FF9A0DB/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 17:57:45 +0000
Certificate not after: Wed 27 Jan 2027 18:02:45 +0000
Subordinate resources: AS: 264768
IP: 168.196.140.0/22
IP: 2803:d0c0::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 21 Feb 2026 22:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:f0:68:fc:44:a1:98:3c:f0:71:76:56:54:d7:a5:c1:a0:0d:65:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 17:57:45 2026 GMT
Not After : Jan 27 18:02:45 2027 GMT
Subject: CN=6F2B68C44C2A31541210D894254226DCF2A63FD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:bf:17:75:57:ea:fb:78:f4:8b:3a:86:e8:
3c:f7:f9:7c:b6:29:6f:19:ac:8e:48:81:4d:7c:8e:
a0:ce:3f:39:f4:61:85:a2:67:09:13:9e:f7:f1:dd:
00:a2:f4:10:fd:c3:94:54:a9:3d:87:fe:37:d9:e2:
fd:4d:f0:29:43:db:b2:46:f4:c3:33:6e:fe:93:2f:
fc:35:ed:e8:16:87:b4:5e:b9:d5:5b:84:1a:7a:9d:
da:61:ca:4f:87:4e:a1:f2:95:5a:59:ac:78:85:c4:
89:cb:e6:8c:4c:b2:3b:1a:35:3b:20:39:6f:3f:9b:
40:da:8c:ab:25:2f:7c:72:6f:31:bf:f9:f5:30:3f:
d9:bf:37:44:59:a6:14:f7:71:66:a2:68:1f:d6:a2:
46:c9:bb:eb:64:0e:d6:a0:22:ef:b7:68:14:29:fd:
98:87:04:79:46:2c:80:39:22:f6:25:07:60:b4:3a:
7c:78:54:d0:79:1c:1c:87:f4:d9:c1:9e:a2:4a:bb:
db:27:63:87:b4:90:db:9c:03:86:47:cc:07:78:72:
98:9d:e6:89:5d:fb:63:6a:bc:8b:82:20:cd:f6:1c:
3e:4e:ae:58:4a:7c:d8:ea:2a:8c:8d:5b:58:0d:dd:
55:4c:a7:b2:18:b2:6e:ba:c5:11:cc:bb:19:cf:71:
47:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6F:2B:68:C4:4C:2A:31:54:12:10:D8:94:25:42:26:DC:F2:A6:3F:D5
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/45F5B0F6B432084492421F87D85DC933C32131207800D5BEFBF891585FF9A0DB/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/45F5B0F6B432084492421F87D85DC933C32131207800D5BEFBF891585FF9A0DB/0/6F2B68C44C2A31541210D894254226DCF2A63FD5.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.140.0/22
IPv6:
2803:d0c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264768
Signature Algorithm: sha256WithRSAEncryption
0f:c5:47:14:1b:62:8e:4b:4e:84:81:8b:5f:7e:5a:66:df:72:
5b:8d:dd:30:4c:7b:36:89:8b:d7:31:d7:84:ce:3e:ec:78:7b:
c2:ef:ea:d7:e6:73:90:4c:1d:5e:2b:9a:a6:4e:9e:22:e3:d0:
01:de:37:e0:09:7b:e8:17:00:96:2a:c1:07:6d:45:e3:3a:ad:
d6:0d:76:22:f5:5f:46:55:dd:65:5a:ba:07:89:2e:b1:1c:ec:
42:28:d2:d9:c9:b7:ab:02:2c:bb:b1:9f:3b:4a:46:ee:f7:36:
ba:b6:c6:33:92:fd:93:67:1b:2a:03:15:83:f9:41:f5:8e:64:
50:5d:7d:45:4e:b8:bd:fa:7f:b8:0a:4d:d1:60:4d:e1:40:5d:
0b:5c:96:51:73:89:fe:67:a7:27:1a:22:80:ba:71:d2:cd:91:
b3:0d:f2:54:f0:d6:ba:3f:8f:58:74:fa:29:4e:b4:dc:17:01:
52:20:be:92:fa:20:26:f0:d3:41:e1:35:e1:3d:fd:5d:4a:e7:
44:8c:7a:61:7a:8f:ee:63:92:0f:79:4e:c4:37:de:53:23:c6:
35:da:c4:9b:7b:16:4a:af:00:47:0f:af:9f:74:96:21:c3:8f:
9b:24:8b:e0:93:d9:6b:b3:1f:06:da:98:64:cf:a5:23:9d:b4:
c7:99:33:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:54:46 2026 by rpki-client