
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer
File: A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer (raw, json)
Hash identifier: Dq+pg5h+duu8lnEhBo7IWo/BvRXbsSvujX9cqikuKJU=
Subject key identifier: A1:2F:D7:F3:F9:F4:70:03:0B:9F:CC:2C:F4:E7:EE:20:F8:2F:89:4A
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 6CC8F4B61D74C69DAD1C8E377F634B1FDAF9D5AA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 27 Jan 2026 22:55:16 +0000
Certificate not after: Tue 26 Jan 2027 23:00:16 +0000
Subordinate resources: AS: 269993
IP: 138.121.108.0/22
IP: 168.90.220.0/22
IP: 181.177.220.0/22
IP: 2803:4d00::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 23 Feb 2026 22:12:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:c8:f4:b6:1d:74:c6:9d:ad:1c:8e:37:7f:63:4b:1f:da:f9:d5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 27 22:55:16 2026 GMT
Not After : Jan 26 23:00:16 2027 GMT
Subject: CN=A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a6:ab:a3:fe:08:e8:61:a2:d9:8a:7b:c4:8e:
ba:df:53:9d:22:08:07:1d:80:9a:21:a6:7e:d7:2c:
47:07:2a:14:cc:e4:70:03:5a:da:2e:d4:6a:0e:bc:
05:84:a0:11:f4:ba:a3:2e:fd:a0:65:ef:10:ff:dc:
29:03:17:36:27:bd:f8:54:75:99:23:c7:e4:39:d5:
66:35:25:a7:1e:13:50:d8:dd:3e:8e:e8:08:34:81:
cd:9b:17:e8:99:ba:e1:17:07:ea:83:8a:55:2e:c2:
d2:4a:7b:a1:e9:56:52:ea:3e:e4:86:70:4f:1f:1f:
46:8f:e0:1c:f7:4b:8b:9b:69:3e:18:9f:4e:ad:24:
47:23:ca:fb:8b:5a:cc:d2:20:50:7b:bc:98:4c:50:
3e:7e:16:6c:29:37:93:a2:e7:44:d2:1f:08:44:80:
b2:00:9f:9e:5d:37:40:bb:ca:4b:7b:7f:41:c5:13:
cf:8d:4e:0c:85:ac:0f:79:90:40:a5:40:f6:59:13:
21:38:e7:92:47:b5:dd:db:8b:c0:1a:aa:f0:76:3d:
65:aa:73:b5:e0:d9:1f:fc:0e:6c:86:b4:b8:64:4f:
1d:f1:5e:5a:c8:0c:1f:76:fb:b4:ff:8f:b2:27:46:
26:9d:0a:8d:f0:92:23:4a:84:e3:6b:78:f5:75:c7:
08:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A1:2F:D7:F3:F9:F4:70:03:0B:9F:CC:2C:F4:E7:EE:20:F8:2F:89:4A
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.108.0/22
168.90.220.0/22
181.177.220.0/22
IPv6:
2803:4d00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
269993
Signature Algorithm: sha256WithRSAEncryption
7d:07:5b:53:9e:5f:67:db:de:d7:42:cf:27:ee:a8:43:ed:55:
6a:f8:ae:31:75:9f:af:5b:f9:e6:c9:ee:89:d7:25:3e:e7:3e:
bd:9f:60:6d:67:1b:ff:c3:09:30:bd:28:78:73:25:72:84:1f:
f6:6b:54:da:7f:5f:ba:20:82:0b:37:2d:9b:2a:1c:ad:1b:ec:
38:83:60:c1:97:78:8e:6c:32:32:e4:ec:b3:84:06:01:2a:0b:
23:a0:ce:97:30:85:f2:c9:7c:83:c0:03:16:84:c3:63:0d:80:
85:ac:18:71:1e:86:c6:8f:d0:a8:7f:c3:5b:d4:91:bd:f1:ba:
18:ef:61:f8:06:74:84:11:5b:41:67:dc:2a:53:ab:2f:b7:98:
85:ba:0f:d7:0e:6f:fe:11:9a:f7:a8:78:ec:65:db:ea:41:f5:
30:22:50:7e:d9:61:57:1b:a3:30:2a:50:09:47:17:b3:1f:90:
a1:9f:9a:47:54:27:e2:38:b0:5d:10:5b:ea:d6:bc:66:b3:35:
76:d8:48:d6:6f:e2:72:8d:61:4e:21:11:16:55:6f:59:f5:5e:
8b:99:3b:8d:30:c4:a2:38:ee:54:a0:a2:9c:78:f0:2f:1e:b4:
41:f8:fe:71:a9:19:98:3c:6e:3f:60:15:48:f2:1c:64:b6:ac:
ea:68:6b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:26:01 2026 by rpki-client