
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A42C2536663031C220CC68656426F3680C410069.cer
File: A42C2536663031C220CC68656426F3680C410069.cer (raw, json)
Hash identifier: mqPdxg+ixSjo+C7SB9CPtR4R25x4Ja3XfLjGt8aOUL4=
Subject key identifier: A4:2C:25:36:66:30:31:C2:20:CC:68:65:64:26:F3:68:0C:41:00:69
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 7E42ACB75F6785E8C6D41185ABD66EBBF3D0FAA1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/A42C2536663031C220CC68656426F3680C410069.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 27 Jan 2026 20:23:14 +0000
Certificate not after: Tue 26 Jan 2027 20:28:14 +0000
Subordinate resources: AS: 266665
IP: 45.227.200.0/22
IP: 2803:4920::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 22 Feb 2026 23:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:42:ac:b7:5f:67:85:e8:c6:d4:11:85:ab:d6:6e:bb:f3:d0:fa:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 27 20:23:14 2026 GMT
Not After : Jan 26 20:28:14 2027 GMT
Subject: CN=A42C2536663031C220CC68656426F3680C410069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:f4:be:6e:8d:4b:08:e9:d7:13:5a:40:7b:
94:0f:be:29:0f:3f:e0:96:27:80:eb:61:dd:53:51:
b8:86:5f:5d:c4:d7:46:77:14:04:7d:2d:2c:ed:fc:
e3:fd:17:97:05:e7:1f:ae:34:9d:16:6a:ea:05:cf:
6a:b8:95:c0:29:97:d0:3e:38:51:82:b1:df:03:7a:
8f:2f:88:62:00:84:3e:ce:51:74:66:ed:34:b3:e7:
79:37:c7:ee:7c:19:fa:65:23:0a:78:71:e9:eb:0f:
62:ed:80:5a:0a:cb:0c:eb:83:e8:08:b9:e6:5e:09:
1b:9c:32:00:70:18:4b:65:27:e5:0a:1b:cf:ad:28:
0b:6d:14:3d:d5:e2:69:00:bd:2b:62:55:a8:62:3b:
44:83:04:a3:00:26:d6:00:b6:7d:9d:37:4a:37:5c:
38:b3:7c:e3:ce:49:12:3a:45:5f:b3:fa:b8:78:be:
0a:25:24:ff:44:6b:89:5f:ea:91:c4:0f:dc:88:2a:
a9:c8:7b:2a:3c:2b:cf:a3:0e:31:e4:2a:22:a3:d7:
5d:30:b1:80:74:12:11:51:06:60:d1:be:75:20:92:
cb:25:6e:82:f9:c5:a8:dd:63:0c:2e:9e:0f:13:84:
72:32:51:d5:ae:7c:1a:76:5e:5c:a7:cd:69:56:23:
fe:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A4:2C:25:36:66:30:31:C2:20:CC:68:65:64:26:F3:68:0C:41:00:69
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/A42C2536663031C220CC68656426F3680C410069.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.227.200.0/22
IPv6:
2803:4920::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266665
Signature Algorithm: sha256WithRSAEncryption
7a:4c:4a:79:48:11:6e:f2:47:f2:7c:f8:f2:03:14:c2:27:89:
87:e1:fe:08:02:76:84:62:3c:ae:40:37:cd:44:4a:d5:9f:3b:
1c:4b:25:b1:b6:5f:c6:1e:2e:fb:b4:a1:2d:31:5d:b1:01:38:
5a:aa:fe:59:dc:54:e1:05:7f:cf:39:ca:93:34:2d:a9:c2:50:
71:80:38:cd:c2:fc:c0:0c:19:40:52:bb:ce:dd:45:64:d0:1a:
c0:89:e9:b7:4c:09:ab:6e:23:4d:7a:79:63:b3:8b:10:17:ac:
b2:fb:0e:28:ba:3b:12:50:45:12:0d:71:90:cf:33:77:74:42:
ad:8d:33:11:a6:35:af:fb:2c:6f:b0:1b:2e:93:91:37:3c:5c:
d3:a2:d9:d4:f1:ac:60:cd:1f:97:b7:1e:2e:08:57:77:88:31:
50:88:33:fc:e3:fd:f2:d8:2b:29:de:0d:59:e7:12:00:ec:20:
32:68:7a:51:fe:4c:e7:2a:60:59:01:51:6e:64:21:fa:e0:00:
12:2a:8b:b8:a2:6f:19:12:6c:bc:91:2b:41:08:bb:e3:13:83:
9d:dc:bf:6d:8e:d4:9b:0e:ce:50:dc:a5:04:6c:41:67:bc:10:
bd:aa:08:4d:12:b7:02:a2:27:d0:bb:f2:45:ef:7b:79:b5:cd:
a0:e7:de:53
-----BEGIN CERTIFICATE-----
MIIGpTCCBY2gAwIBAgIUfkKst19nhejG1BGFq9Zuu/PQ+qEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE
NjA1ODY3ODAeFw0yNjAxMjcyMDIzMTRaFw0yNzAxMjYyMDI4MTRaMDMxMTAvBgNV
BAMTKEE0MkMyNTM2NjYzMDMxQzIyMENDNjg2NTY0MjZGMzY4MEM0MTAwNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ4PS+bo1LCOnXE1pAe5QPvikP
P+CWJ4DrYd1TUbiGX13E10Z3FAR9LSzt/OP9F5cF5x+uNJ0WauoFz2q4lcApl9A+
OFGCsd8Deo8viGIAhD7OUXRm7TSz53k3x+58GfplIwp4cenrD2LtgFoKywzrg+gI
ueZeCRucMgBwGEtlJ+UKG8+tKAttFD3V4mkAvStiVahiO0SDBKMAJtYAtn2dN0o3
XDizfOPOSRI6RV+z+rh4vgolJP9Ea4lf6pHED9yIKqnIeyo8K8+jDjHkKiKj110w
sYB0EhFRBmDRvnUgksslboL5xajdYwwung8ThHIyUdWufBp2XlynzWlWI/5FAgMB
AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSkLCU2ZjAxwiDM
aGVkJvNoDEEAaTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy
NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNUEyNUEzNTY0RTEwQjY3RENGRkZEQTg2
NDU3NkNERTNDMUNCRUMxNTdCOTM1RjAwRTA5QkU4QzU1M0UyNjY5Mi8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy81QTI1QTM1NjRFMTBCNjdEQ0ZGRkRBODY0NTc2Q0RFM0MxQ0JFQzE1N0I5
MzVGMDBFMDlCRThDNTUzRTI2NjkyLzAvQTQyQzI1MzY2NjMwMzFDMjIwQ0M2ODY1
NjQyNkYzNjgwQzQxMDA2OS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLePIMA0EAgAC
MAcDBQAoA0kgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQRqTANBgkqhkiG9w0B
AQsFAAOCAQEAekxKeUgRbvJH8nz48gMUwieJh+H+CAJ2hGI8rkA3zURK1Z87HEsl
sbZfxh4u+7ShLTFdsQE4Wqr+WdxU4QV/zznKkzQtqcJQcYA4zcL8wAwZQFK7zt1F
ZNAawInpt0wJq24jTXp5Y7OLEBessvsOKLo7ElBFEg1xkM8zd3RCrY0zEaY1r/ss
b7AbLpORNzxc06LZ1PGsYM0fl7ceLghXd4gxUIgz/OP98tgrKd4NWecSAOwgMmh6
Uf5M5ypgWQFRbmQh+uAAEiqLuKJvGRJsvJErQQi74xODndy/bY7Umw7OUNylBGxB
Z7wQvaoITRK3AqIn0LvyRe97ebXNoOfeUw==
-----END CERTIFICATE-----
Generated at Thu Feb 19 01:41:33 2026 by rpki-client