
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.cer
File: 89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.cer (raw, json)
Hash identifier: Aeoz28OiqiAjVEWUl9q/fGkQpKoKBUlgEgntlHOtbGc=
Subject key identifier: 89:C8:23:AD:60:CB:A4:B0:7B:90:92:FB:3D:0B:F1:A0:B8:C1:5A:BE
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 6367D62B4DC509D0B595C95B75647528414B8A3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 22:36:12 +0000
Certificate not after: Wed 27 Jan 2027 22:41:12 +0000
Subordinate resources: AS: 61456
IP: 131.108.80.0/22
IP: 2803:8380::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 22 Feb 2026 23:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:67:d6:2b:4d:c5:09:d0:b5:95:c9:5b:75:64:75:28:41:4b:8a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 22:36:12 2026 GMT
Not After : Jan 27 22:41:12 2027 GMT
Subject: CN=89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:49:1c:51:63:06:fd:af:9b:b9:0e:2e:53:
73:66:c8:dc:26:b9:88:ec:d7:8c:33:cc:eb:5b:82:
0a:d3:69:49:6a:f6:3b:43:c7:0f:ca:eb:06:1f:60:
3c:1d:0d:ec:03:7d:8d:e3:72:fe:1a:4b:d9:61:69:
f7:b3:e0:31:cc:43:55:57:8a:61:99:05:0e:67:21:
e8:46:cc:f9:19:1e:e4:b8:e0:5f:51:30:32:7a:c2:
cf:c9:56:ff:c4:4d:97:1f:81:9b:a5:ec:af:56:8e:
b0:b9:aa:df:25:57:71:e6:e9:2f:9e:01:d6:79:83:
82:03:3b:14:66:16:50:a7:54:c9:bc:d3:f7:62:20:
41:6d:f9:97:cf:b9:31:7f:65:e4:3c:29:76:e5:06:
38:42:cd:e3:a9:63:b3:ac:07:46:ce:9d:00:8a:5c:
ff:75:98:bc:c0:aa:dd:39:a0:02:77:e7:11:91:a1:
c7:30:5a:4c:97:4b:b5:90:76:f3:64:fc:fc:7b:03:
70:b9:aa:b5:34:9d:65:df:e8:33:00:ba:4a:a8:de:
2f:2a:6e:f1:ce:a3:c9:58:08:eb:d2:8f:78:5d:e1:
f8:61:6f:21:8d:7a:b7:a0:ea:72:85:22:85:de:a2:
0e:2a:8a:6e:c0:3c:e5:90:3b:6b:10:98:ba:f3:a5:
e4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
89:C8:23:AD:60:CB:A4:B0:7B:90:92:FB:3D:0B:F1:A0:B8:C1:5A:BE
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.80.0/22
IPv6:
2803:8380::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61456
Signature Algorithm: sha256WithRSAEncryption
1b:e9:ed:0e:01:48:04:49:ed:ad:02:72:ac:81:85:d4:a4:ad:
da:94:7a:09:24:66:5d:1b:a9:28:f4:31:04:a0:6c:d2:0f:44:
b1:26:2d:db:08:b3:61:ec:13:7c:40:a9:e1:c8:97:81:f6:45:
10:f3:d0:89:ea:25:66:f9:63:19:a8:f2:c5:b7:18:c2:c6:ed:
4b:65:af:a9:f0:ba:9e:1e:14:18:75:2e:f9:d8:26:bd:ec:a1:
b4:f1:d4:61:2b:06:77:1b:e1:c6:dc:35:cc:64:7f:95:f1:10:
76:21:13:6c:9f:df:47:3d:28:99:04:f6:20:aa:c7:df:a2:33:
e0:13:23:7c:0b:00:dc:48:84:df:d8:97:b3:71:05:1f:0b:1b:
aa:ba:c3:b0:82:ed:50:dd:a1:e7:76:60:92:55:17:ce:9e:aa:
ff:a9:5e:19:5a:29:93:dd:3a:ec:e6:41:c8:89:46:2b:0b:3b:
48:2b:ef:1d:d2:2e:54:18:41:bd:69:5e:db:bd:b6:d8:d6:7c:
b8:51:04:bd:66:f8:50:16:49:b3:f9:ec:62:da:57:78:10:87:
95:28:40:e6:c4:03:68:92:9f:e9:37:0f:e2:a3:6f:73:10:b7:
86:2d:f6:b2:a9:95:30:72:98:cf:94:30:58:c7:2e:36:bd:8a:
d6:60:06:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:39:06 2026 by rpki-client