
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.cer
File: 964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.cer (raw, json)
Hash identifier: 4CvRe2SGaXDPagUyr/3xwMdVD9/TdVa28ZRyY3Vx4SY=
Subject key identifier: 96:4E:B9:84:A6:CD:AD:66:DD:3C:C7:17:D7:0D:6E:7D:CD:4F:FE:96
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 66C0001E3745526A356BBC9FA6B9AF591429B1B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 07:10:41 +0000
Certificate not after: Wed 27 Jan 2027 07:15:41 +0000
Subordinate resources: AS: 266700
IP: 45.230.20.0/24
IP: 2801:15:b000::/48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 22 Feb 2026 23:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:c0:00:1e:37:45:52:6a:35:6b:bc:9f:a6:b9:af:59:14:29:b1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 07:10:41 2026 GMT
Not After : Jan 27 07:15:41 2027 GMT
Subject: CN=964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b3:e2:15:14:a0:6c:db:92:b8:97:63:41:a2:
f8:c3:58:77:aa:b4:d9:b3:83:9d:42:54:05:57:0e:
dc:09:16:8d:9f:4a:80:27:b1:02:d1:aa:f9:db:d9:
bf:1f:94:ad:0d:57:ed:2c:f9:4b:c1:d9:5e:c6:a8:
db:65:b6:5d:15:0b:c6:f8:42:70:7b:b2:03:dd:9a:
af:25:fe:27:00:80:17:02:33:1e:22:c6:27:ef:a4:
9e:40:c9:b9:d6:63:52:38:f4:be:bf:da:0e:21:fc:
6f:6c:3d:0e:d2:39:68:f7:14:8e:58:15:5e:b0:81:
ab:09:3d:ce:cd:1c:f1:f2:8f:f5:9a:c0:10:ab:da:
91:9a:e4:13:fc:86:80:59:af:eb:4d:9d:2f:9b:92:
13:35:87:1e:e0:1f:04:9d:3a:3a:ba:2f:89:1f:d5:
9f:3c:7a:c8:13:8d:03:2a:b4:47:c0:b2:96:4d:f2:
86:1c:11:e1:4c:d7:8c:92:28:47:cd:3b:45:aa:d4:
b5:01:cf:54:65:6a:36:91:b3:6e:2a:e4:19:83:16:
96:f1:f8:6e:ab:fb:ce:96:3b:cb:7c:a4:ba:f0:b5:
ac:65:d4:5b:ee:69:2b:f1:35:1c:9d:a7:09:51:cb:
bb:1e:fd:aa:57:03:3e:b0:c9:aa:2a:c8:16:71:16:
c3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
96:4E:B9:84:A6:CD:AD:66:DD:3C:C7:17:D7:0D:6E:7D:CD:4F:FE:96
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.20.0/24
IPv6:
2801:15:b000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266700
Signature Algorithm: sha256WithRSAEncryption
14:dc:8e:5e:7a:2b:42:ef:52:b6:01:3a:e1:c6:32:20:75:e6:
6d:37:09:a7:70:8a:35:d0:cf:35:bc:9f:20:8b:be:4d:3c:4a:
c7:c3:84:de:81:44:c9:60:7f:61:fa:bc:38:af:48:77:ed:eb:
48:66:06:ff:61:5a:04:be:a0:b6:32:ec:c2:42:99:c1:d5:61:
3d:03:4d:86:1c:cb:a6:3c:7b:b8:f0:ff:c9:b6:13:06:29:a2:
65:15:ca:d4:a0:b8:af:75:61:1a:21:f4:2f:95:1a:5c:fb:aa:
74:ef:d7:e5:fa:05:92:59:e5:ab:83:4f:64:28:b3:15:d7:31:
d1:90:f6:f2:2f:94:94:25:92:02:6d:a6:9b:a6:ff:cc:ba:57:
9d:5d:69:27:fe:17:77:49:f7:91:84:83:10:d8:7f:f7:03:ec:
51:5c:0b:2a:86:48:b8:53:63:ad:2a:fd:a7:8e:3d:6c:1c:cf:
4a:23:39:56:80:ea:d2:e9:7e:a4:1e:bb:f3:0d:af:68:6b:ff:
ce:23:43:1c:e3:61:4b:ea:91:e4:77:2e:28:bd:14:1f:a7:96:
8d:df:4d:5c:db:28:c1:3e:2a:20:b3:84:27:95:9e:c6:7d:55:
a9:19:4a:70:e7:d8:ec:a3:f3:02:84:d4:54:32:be:10:36:8e:
62:1a:0d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:11:01 2026 by rpki-client