
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.cer
File: 865E5586107E0C9E056624D8900338C5C1CBFCC5.cer (raw, json)
Hash identifier: bu8YPOX8dpNwfJJ3EDm7HKc0AOU1yL28uM5dEwTbAYw=
Subject key identifier: 86:5E:55:86:10:7E:0C:9E:05:66:24:D8:90:03:38:C5:C1:CB:FC:C5
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 4F2D25A8FE4F169CAA660E1BC824CC751C2839EE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 04:06:27 +0000
Certificate not after: Wed 27 Jan 2027 04:11:27 +0000
Subordinate resources: AS: 273280
IP: 2001:1226::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 23 Feb 2026 22:12:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:2d:25:a8:fe:4f:16:9c:aa:66:0e:1b:c8:24:cc:75:1c:28:39:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 04:06:27 2026 GMT
Not After : Jan 27 04:11:27 2027 GMT
Subject: CN=865E5586107E0C9E056624D8900338C5C1CBFCC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:55:bb:f4:c9:06:f0:a4:8c:01:0c:3b:a2:
ff:26:e3:c8:e3:7a:8e:52:4f:b7:8a:dd:e0:bc:a8:
1f:5e:6b:86:c9:79:0a:eb:4a:5d:3b:72:91:f0:23:
8d:c8:04:df:82:d6:6e:24:50:97:8d:e7:e0:cb:78:
89:b7:db:c6:07:82:9c:af:a2:ed:bc:66:6f:de:65:
82:3a:24:41:95:43:34:94:2c:26:f6:19:5e:7b:39:
dc:01:6b:aa:54:b8:37:9c:0d:87:5b:d3:38:d1:f0:
ec:aa:61:04:e9:91:e4:d5:ed:b9:09:9f:b8:31:11:
28:67:90:22:ed:79:29:48:c9:c5:73:ec:87:c5:ec:
f5:13:9f:9a:dd:d8:de:c7:9d:b6:c1:db:e1:cc:f9:
8d:31:4a:ca:92:e8:32:1a:9c:33:75:aa:1b:24:82:
89:e0:2a:46:36:b7:56:8c:ea:b2:b5:73:81:81:40:
83:b1:bb:ad:51:6e:33:91:cc:b7:f5:26:a7:18:e6:
0d:4d:27:10:7c:5c:c3:11:52:9a:1b:ad:a0:dd:cf:
39:fd:2b:48:88:c4:03:20:77:b3:bd:cb:41:fa:21:
29:70:4b:4f:1a:ed:b5:6f:f9:28:7a:dc:aa:db:37:
35:62:76:9e:2d:ee:61:aa:08:33:d1:93:af:12:d6:
40:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
86:5E:55:86:10:7E:0C:9E:05:66:24:D8:90:03:38:C5:C1:CB:FC:C5
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C5337DE2B36C0C0EBFECC4F2F418E133785D887511A24D82F8865FE5829676E5/0/865E5586107E0C9E056624D8900338C5C1CBFCC5.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1226::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273280
Signature Algorithm: sha256WithRSAEncryption
42:5c:78:f2:29:9d:d6:51:65:49:89:67:77:70:1e:e4:b4:c3:
08:e6:af:5d:59:6a:c9:47:3d:0a:8c:75:cb:f3:59:5d:02:c8:
29:a3:52:22:b0:68:51:de:ad:0a:78:40:f6:c8:08:a6:34:5e:
31:f9:42:6c:8d:99:3e:f7:57:7c:b4:38:9c:32:a6:5e:6f:bb:
64:a7:e4:2f:0d:5d:c1:b4:06:52:a2:c6:6f:01:77:4e:f0:79:
25:8a:71:21:a1:92:48:aa:14:54:87:c2:31:e4:68:4f:90:33:
21:34:75:04:53:c8:44:62:09:06:0c:23:b0:71:99:63:6a:11:
39:e9:c0:6d:18:9d:33:32:13:0d:9b:db:6f:86:76:b1:95:4d:
8e:23:98:31:ce:00:93:19:8d:43:71:04:a1:76:9f:81:c7:c2:
fc:65:93:59:29:6e:46:ef:8e:47:5f:be:da:2a:f8:b0:1c:24:
2f:06:74:ac:3a:12:11:6e:c1:83:fa:a9:85:ee:89:71:bb:81:
53:81:97:d8:9a:89:80:0a:ec:e9:8f:6b:dd:21:3a:83:fc:93:
b2:ac:87:0f:fe:a1:73:8a:01:90:60:fb:b7:16:24:7e:db:6a:
9d:7a:18:87:63:97:c0:cb:26:28:8a:58:84:d6:a7:1a:63:89:
9e:a7:7e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:07:05 2026 by rpki-client