
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.cer
File: BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.cer (raw, json)
Hash identifier: KsN0Y/2XtJyJBJNiHwvp3/FN+lA0OioDgvoJ2xMil6M=
Subject key identifier: BA:6D:20:BA:A9:6B:C8:F1:7C:49:28:A4:ED:0F:18:86:73:9B:35:A6
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 2465B383F7055ADC44CBBA27ECB138940CB70B2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/EFBE89E7128AFA3025F926472099CD117262B32AAC77A885FD97934982C68E55/0/BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/EFBE89E7128AFA3025F926472099CD117262B32AAC77A885FD97934982C68E55/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 27 Jan 2026 17:50:49 +0000
Certificate not after: Tue 26 Jan 2027 17:55:49 +0000
Subordinate resources: AS: 267745
IP: 45.169.163.0/24
IP: 2803:83a0::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 22 Feb 2026 23:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:65:b3:83:f7:05:5a:dc:44:cb:ba:27:ec:b1:38:94:0c:b7:0b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 27 17:50:49 2026 GMT
Not After : Jan 26 17:55:49 2027 GMT
Subject: CN=BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:82:36:3d:5e:80:53:46:9b:36:63:10:81:
70:c4:01:2f:de:ae:f1:82:c5:18:48:98:99:44:20:
59:f2:af:52:0c:f5:7e:af:9f:77:53:ce:f8:18:9b:
5c:2b:76:15:62:47:bb:c6:7f:c2:39:06:6d:39:55:
4e:91:f0:18:71:40:1c:87:a5:c0:89:89:6a:10:46:
f9:48:7e:db:4c:1a:3b:1e:79:43:36:84:9c:77:c3:
67:8d:fc:96:4e:f5:f0:4b:57:05:80:c5:3f:eb:48:
b2:81:b3:9d:bb:e6:9d:8c:93:c1:c3:70:b8:cb:54:
96:a9:00:5b:e9:77:a2:9e:da:f6:8d:e4:98:21:2f:
3c:63:13:c8:06:b1:c5:1b:7b:ab:29:da:1b:08:f6:
d8:e2:26:7a:0b:4c:c0:e8:96:02:75:cc:d2:b8:f3:
eb:91:71:1c:92:22:88:be:af:94:01:f7:41:c0:98:
49:34:83:55:65:f7:a0:70:35:48:71:c5:d5:e6:25:
cd:63:6c:37:bf:82:76:54:84:62:f6:1e:9c:ce:2c:
dc:b4:6e:34:4f:cf:1b:c8:5d:7c:e0:27:04:ad:ff:
a3:82:f3:43:a3:ad:91:40:5b:45:3e:55:c4:e0:3b:
f8:4d:b0:46:00:53:73:29:da:5b:73:19:0a:e3:b6:
d4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BA:6D:20:BA:A9:6B:C8:F1:7C:49:28:A4:ED:0F:18:86:73:9B:35:A6
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EFBE89E7128AFA3025F926472099CD117262B32AAC77A885FD97934982C68E55/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EFBE89E7128AFA3025F926472099CD117262B32AAC77A885FD97934982C68E55/0/BA6D20BAA96BC8F17C4928A4ED0F1886739B35A6.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.163.0/24
IPv6:
2803:83a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
267745
Signature Algorithm: sha256WithRSAEncryption
74:0e:de:cf:31:27:32:fc:67:62:2d:86:e6:2b:d1:41:87:f5:
47:c1:34:d7:d4:71:1a:36:98:57:e2:c1:b7:2c:e2:2f:5a:39:
63:99:25:26:a3:f3:6a:f1:f8:bd:e7:6c:e9:8a:50:77:a9:16:
af:a1:fc:19:e1:84:66:5b:4b:9f:e9:25:40:fd:4a:85:90:33:
33:8d:ba:40:f7:e3:be:4d:43:2a:07:47:61:0d:87:5d:8f:1c:
df:fc:8d:12:b7:19:ff:4e:46:ff:c0:74:00:2b:13:88:d6:32:
5e:34:09:56:95:f1:e6:b6:06:64:a4:a2:50:eb:2e:36:53:d5:
27:81:68:62:33:94:e9:ad:f4:d5:8b:5c:a6:5d:f2:74:57:6d:
84:0f:6a:d4:86:01:9d:b4:18:f0:81:0a:43:c7:b4:77:95:52:
35:ef:bc:29:e5:6d:cf:d2:21:f5:c4:9c:74:b0:b0:9e:8f:2d:
14:9c:0f:66:db:ce:36:69:85:c9:df:54:6f:9a:4b:55:9e:40:
9e:a9:6e:79:36:a1:95:a5:af:af:ef:66:d6:48:b5:ca:cd:87:
9a:84:0a:af:2d:ef:c9:ca:38:bf:4b:cc:6f:84:8d:03:bd:ed:
d6:12:7a:86:cb:1a:8d:cb:9a:68:63:dd:7a:e9:8e:7f:f1:cf:
55:ea:8f:80
-----BEGIN CERTIFICATE-----
MIIGpTCCBY2gAwIBAgIUJGWzg/cFWtxEy7on7LE4lAy3Cy0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE
NjA1ODY3ODAeFw0yNjAxMjcxNzUwNDlaFw0yNzAxMjYxNzU1NDlaMDMxMTAvBgNV
BAMTKEJBNkQyMEJBQTk2QkM4RjE3QzQ5MjhBNEVEMEYxODg2NzM5QjM1QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6g4I2PV6AU0abNmMQgXDEAS/e
rvGCxRhImJlEIFnyr1IM9X6vn3dTzvgYm1wrdhViR7vGf8I5Bm05VU6R8BhxQByH
pcCJiWoQRvlIfttMGjseeUM2hJx3w2eN/JZO9fBLVwWAxT/rSLKBs5275p2Mk8HD
cLjLVJapAFvpd6Ke2vaN5JghLzxjE8gGscUbe6sp2hsI9tjiJnoLTMDolgJ1zNK4
8+uRcRySIoi+r5QB90HAmEk0g1Vl96BwNUhxxdXmJc1jbDe/gnZUhGL2HpzOLNy0
bjRPzxvIXXzgJwSt/6OC80OjrZFAW0U+VcTgO/hNsEYAU3Mp2ltzGQrjttRpAgMB
AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS6bSC6qWvI8XxJ
KKTtDxiGc5s1pjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy
NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRUZCRTg5RTcxMjhBRkEzMDI1RjkyNjQ3
MjA5OUNEMTE3MjYyQjMyQUFDNzdBODg1RkQ5NzkzNDk4MkM2OEU1NS8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy9FRkJFODlFNzEyOEFGQTMwMjVGOTI2NDcyMDk5Q0QxMTcyNjJCMzJBQUM3
N0E4ODVGRDk3OTM0OTgyQzY4RTU1LzAvQkE2RDIwQkFBOTZCQzhGMTdDNDkyOEE0
RUQwRjE4ODY3MzlCMzVBNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALamjMA0EAgAC
MAcDBQAoA4OgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQV4TANBgkqhkiG9w0B
AQsFAAOCAQEAdA7ezzEnMvxnYi2G5ivRQYf1R8E019RxGjaYV+LBtyziL1o5Y5kl
JqPzavH4veds6YpQd6kWr6H8GeGEZltLn+klQP1KhZAzM426QPfjvk1DKgdHYQ2H
XY8c3/yNErcZ/05G/8B0ACsTiNYyXjQJVpXx5rYGZKSiUOsuNlPVJ4FoYjOU6a30
1Ytcpl3ydFdthA9q1IYBnbQY8IEKQ8e0d5VSNe+8KeVtz9Ih9cScdLCwno8tFJwP
ZtvONmmFyd9Ub5pLVZ5AnqlueTahlaWvr+9m1ki1ys2HmoQKry3vyco4v0vMb4SN
A73t1hJ6hssajcuaaGPdeumOf/HPVeqPgA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 12:55:05 2026 by rpki-client