
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AE1EF6069D214BD367F253365FDF707B362C8A5.cer
File: 9AE1EF6069D214BD367F253365FDF707B362C8A5.cer (raw, json)
Hash identifier: JZbVsOy/eC9O8N6J+XK2KljgGaRkILsDaWY9rSOhqB4=
Subject key identifier: 9A:E1:EF:60:69:D2:14:BD:36:7F:25:33:65:FD:F7:07:B3:62:C8:A5
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 1048A0FFA7327645F787B8BD2FADC65AD5EF2CC1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/C1FBE9BEB0786CBAC91B5300161946F17DD363F8AEB2F1E0FE90365C62B740F5/0/9AE1EF6069D214BD367F253365FDF707B362C8A5.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/C1FBE9BEB0786CBAC91B5300161946F17DD363F8AEB2F1E0FE90365C62B740F5/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 27 Jan 2026 17:50:55 +0000
Certificate not after: Tue 26 Jan 2027 17:55:55 +0000
Subordinate resources: AS: 272961
IP: 2803:7990::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 22 Feb 2026 23:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:48:a0:ff:a7:32:76:45:f7:87:b8:bd:2f:ad:c6:5a:d5:ef:2c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 27 17:50:55 2026 GMT
Not After : Jan 26 17:55:55 2027 GMT
Subject: CN=9AE1EF6069D214BD367F253365FDF707B362C8A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:b5:41:b0:25:92:82:b4:a4:92:24:23:56:
c6:ae:3c:5d:8e:6c:70:2b:10:4d:45:53:ae:ae:8c:
03:68:fc:d9:01:0f:f3:f3:b7:9f:fd:7f:33:af:3a:
90:f0:e2:c8:a9:c9:17:84:c9:08:e4:cf:80:60:f3:
a1:1a:dd:b6:f9:66:ec:6e:be:5f:42:b8:f7:5e:6e:
41:24:c2:37:d4:3a:65:dc:ce:9d:f4:18:44:57:82:
96:49:71:d7:dd:cd:05:f9:f5:0f:16:00:24:4b:d6:
9a:fa:06:02:af:e2:44:82:e5:51:db:12:e6:d3:f6:
07:f0:3a:1d:36:12:83:b1:bc:c8:a9:f2:ef:61:6f:
d4:01:aa:7f:2e:48:49:2d:7f:7f:4a:72:16:30:9d:
b0:bc:a7:bc:de:ca:af:42:c6:8f:04:cc:dd:e3:71:
99:85:b2:b9:90:82:3e:42:38:56:4a:d2:9f:44:8b:
13:52:d4:77:2c:0f:eb:7a:e2:51:21:fe:e6:a9:39:
b4:63:89:02:15:c3:4c:50:e4:0a:97:84:27:5e:72:
8e:c6:a4:d1:b7:19:b1:50:6a:a9:43:6a:7c:10:85:
8c:ba:03:3e:f2:8b:4d:ef:ca:68:ea:f4:3d:81:7e:
f5:7c:e6:3c:a2:3c:e4:f7:ac:d8:23:b8:fa:5b:d8:
87:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9A:E1:EF:60:69:D2:14:BD:36:7F:25:33:65:FD:F7:07:B3:62:C8:A5
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C1FBE9BEB0786CBAC91B5300161946F17DD363F8AEB2F1E0FE90365C62B740F5/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C1FBE9BEB0786CBAC91B5300161946F17DD363F8AEB2F1E0FE90365C62B740F5/0/9AE1EF6069D214BD367F253365FDF707B362C8A5.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:7990::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
272961
Signature Algorithm: sha256WithRSAEncryption
54:67:77:18:5e:94:bd:48:08:73:ab:44:ea:8b:c0:7b:44:d8:
43:32:31:00:94:08:27:b7:ac:db:18:e6:94:22:37:61:aa:1f:
55:ac:64:2f:cb:0d:2a:54:86:3b:ae:67:4e:32:f6:51:e4:0a:
e3:db:03:9d:fe:db:c7:03:89:26:1d:bd:1e:00:06:de:8d:42:
28:75:ba:6e:2b:02:e3:f6:2e:7d:14:46:fd:e9:bd:e2:a5:a3:
b6:de:b2:7f:3c:51:49:95:fc:b5:41:f7:bd:8f:67:e0:bf:2b:
d0:de:24:3a:28:8a:d9:09:93:20:5e:40:b4:59:8d:ad:d7:51:
e6:3c:82:88:85:0d:ae:6e:00:0e:ea:33:c3:d1:ef:44:2d:d9:
b2:a9:39:8e:6e:8f:cb:c2:f9:4f:31:f4:77:c3:d6:39:f7:e7:
1c:78:97:46:82:c2:eb:4d:94:5a:97:43:64:fa:0f:25:6d:b5:
6a:6c:99:39:30:99:05:4b:4b:9c:87:c9:ca:6d:9e:17:3e:b5:
64:32:cf:fa:e4:15:b6:b2:13:e7:e5:2b:93:39:52:b3:84:3a:
c6:cb:2a:56:72:b7:32:f5:9e:7c:32:51:b6:71:9c:4a:bf:67:
43:de:68:e7:f3:be:47:40:22:ad:38:d4:3e:77:ac:61:30:83:
13:35:1e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:11:31 2026 by rpki-client