
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85F4566088745ADBB1E092E7B22AB66DA1835628.cer
File: 85F4566088745ADBB1E092E7B22AB66DA1835628.cer (raw, json)
Hash identifier: x+Chvv4VCdHSI196Uu/FiwUUMUDeeJ1Oq7T5Smze81A=
Subject key identifier: 85:F4:56:60:88:74:5A:DB:B1:E0:92:E7:B2:2A:B6:6D:A1:83:56:28
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 255F6407CA106AD3238F2DB628A5BDD201B557FD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/D1ABAB5B5F1D63078CFD7CD91F85B287F557685B0AD5D26D654669F48D9601B7/0/85F4566088745ADBB1E092E7B22AB66DA1835628.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/D1ABAB5B5F1D63078CFD7CD91F85B287F557685B0AD5D26D654669F48D9601B7/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 16:47:28 +0000
Certificate not after: Wed 27 Jan 2027 16:52:28 +0000
Subordinate resources: AS: 265796
IP: 181.191.124.0/22
IP: 2803:5020::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 22 Feb 2026 23:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:5f:64:07:ca:10:6a:d3:23:8f:2d:b6:28:a5:bd:d2:01:b5:57:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 16:47:28 2026 GMT
Not After : Jan 27 16:52:28 2027 GMT
Subject: CN=85F4566088745ADBB1E092E7B22AB66DA1835628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:46:6e:74:da:c6:8b:1a:fb:92:f7:fc:ef:25:
14:54:15:97:cb:e2:17:33:5c:22:2b:3a:a6:dc:98:
43:5a:b3:73:40:09:9e:69:72:8c:a6:1a:66:eb:93:
18:83:ec:3f:e5:2f:7a:09:ef:f7:4f:4d:1b:c9:6b:
c0:f0:40:74:89:b2:22:8b:d2:d6:5e:1d:fb:2d:68:
42:ad:41:bf:02:74:bf:99:6c:8a:57:f5:06:54:75:
c3:c7:e8:0a:fd:73:83:11:02:27:32:ec:92:bb:15:
34:0b:29:49:e9:68:ae:28:cd:4b:3e:6b:0c:59:e7:
9f:bc:33:1e:c1:40:de:b8:9e:ae:b6:ac:72:b8:a7:
2d:9f:36:a5:18:c2:6f:7d:2a:57:4b:d1:4e:f0:a0:
8d:44:75:37:7a:19:d8:5a:af:1f:0b:96:b4:2d:58:
cf:6a:10:92:69:f7:52:fa:02:b0:81:ab:c5:0f:b7:
a1:98:ad:88:4e:9b:97:7d:cc:fd:de:fc:37:e4:4e:
c5:70:75:74:78:e6:38:86:fd:6e:ac:02:52:8c:66:
98:0b:1a:9f:30:b8:bc:ff:05:e7:d6:90:f2:74:94:
ad:cb:60:21:44:6c:c8:15:54:a9:c1:00:d9:97:15:
65:72:c8:67:28:fa:e4:ef:ab:4b:b9:ce:e0:53:7f:
e3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
85:F4:56:60:88:74:5A:DB:B1:E0:92:E7:B2:2A:B6:6D:A1:83:56:28
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D1ABAB5B5F1D63078CFD7CD91F85B287F557685B0AD5D26D654669F48D9601B7/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D1ABAB5B5F1D63078CFD7CD91F85B287F557685B0AD5D26D654669F48D9601B7/0/85F4566088745ADBB1E092E7B22AB66DA1835628.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.191.124.0/22
IPv6:
2803:5020::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265796
Signature Algorithm: sha256WithRSAEncryption
06:98:9c:14:b2:23:27:29:1b:df:2d:6f:ee:c0:2d:7a:ec:cd:
68:41:bd:95:70:98:b9:32:70:fd:65:25:45:76:33:28:7c:48:
26:1b:3f:a7:ef:7b:d1:2b:3d:ce:de:6a:0a:4a:c1:25:26:67:
7c:e6:b5:f9:62:92:6f:07:c2:42:47:57:0c:4f:92:ac:29:47:
5e:44:80:2f:c1:1b:56:a2:32:b1:fa:5d:99:7b:03:d2:47:74:
15:fa:98:f0:ab:4c:5c:49:d2:d8:c2:30:64:a6:9d:a3:9b:be:
a9:47:8b:78:5a:a2:f0:21:da:c2:bf:fd:4e:b3:d3:55:9f:4e:
ec:ca:8f:f2:b3:cc:66:60:2c:77:ac:bd:e9:63:73:0b:e4:d9:
e6:92:21:b5:6c:de:68:c9:68:88:d6:da:43:4d:d2:7c:40:94:
c1:18:89:cf:49:a4:8f:f2:fb:67:95:ff:31:a4:1b:4c:4b:eb:
05:2f:7f:9b:74:0e:d9:b9:83:a2:78:b4:0d:34:1a:b4:a5:e8:
b5:a2:4f:3c:c5:2d:14:79:d9:2d:10:45:97:a0:de:a2:49:77:
e0:93:cb:dd:fa:e1:81:5a:75:f4:d2:96:69:91:e4:c3:8d:8d:
2a:ba:3d:1e:89:b5:b7:d2:e7:73:5f:17:5f:7d:c5:0d:92:52:
3f:50:ab:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:39:08 2026 by rpki-client