
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD94D9821F379D20EA36D36736038ACA527A9932.cer
File: BD94D9821F379D20EA36D36736038ACA527A9932.cer (raw, json)
Hash identifier: 7bBgtZZgdC/gp5cGH83G9c39x80mUwe89UfqGAHpUdo=
Subject key identifier: BD:94:D9:82:1F:37:9D:20:EA:36:D3:67:36:03:8A:CA:52:7A:99:32
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 126B27973F341BFCFBF2B2FAE9F6DEF35BCC7633
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/53597B0E71B9106A97FE0731821F974E2A39E5F15F4244AEA1D09AB156C65042/0/BD94D9821F379D20EA36D36736038ACA527A9932.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/53597B0E71B9106A97FE0731821F974E2A39E5F15F4244AEA1D09AB156C65042/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 00:42:52 +0000
Certificate not after: Wed 27 Jan 2027 00:47:52 +0000
Subordinate resources: AS: 270101
IP: 45.6.215.0/24
IP: 168.196.208.0/23
IP: 2803:67e0::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 22 Feb 2026 23:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:6b:27:97:3f:34:1b:fc:fb:f2:b2:fa:e9:f6:de:f3:5b:cc:76:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 00:42:52 2026 GMT
Not After : Jan 27 00:47:52 2027 GMT
Subject: CN=BD94D9821F379D20EA36D36736038ACA527A9932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e8:bd:fb:d5:f8:cb:6c:2f:11:9b:a1:53:3d:
a9:93:fe:dd:4e:af:19:4c:15:ab:72:c7:83:d2:b2:
90:85:77:09:72:92:03:0a:28:6a:f3:7e:27:99:20:
bf:c5:96:31:5c:ac:71:20:d5:06:55:27:27:74:8a:
d7:71:74:fc:c1:1f:98:e3:39:5c:4e:5a:38:8a:44:
4b:d1:59:d3:22:b0:6f:c8:5f:a2:c2:43:aa:fa:99:
21:77:d9:ee:7f:92:7c:38:91:1c:1f:ff:4e:40:fa:
d9:dd:d6:84:6b:22:3c:1d:66:d1:83:4a:20:25:40:
58:be:c1:7d:69:7c:9b:eb:cc:80:42:17:22:cb:bb:
76:a8:a7:c0:95:4e:03:1d:78:d0:ed:1e:d4:e9:b4:
13:c0:00:2f:5b:0f:57:9a:0f:5d:48:23:b0:89:74:
3d:11:64:4e:36:4d:e2:80:95:51:3c:28:1d:37:a4:
18:44:7b:a2:dc:28:9a:37:91:67:00:a1:48:35:1f:
bc:68:43:b4:1c:dc:86:0e:2f:ae:6c:76:fb:f7:50:
f9:81:10:cf:19:98:49:82:93:f9:95:d7:a9:35:1f:
5f:5b:6f:8d:69:22:24:ff:2c:e1:83:23:e2:10:e5:
e4:4e:5c:c9:88:59:03:53:0c:aa:f0:44:86:fc:40:
ed:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BD:94:D9:82:1F:37:9D:20:EA:36:D3:67:36:03:8A:CA:52:7A:99:32
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/53597B0E71B9106A97FE0731821F974E2A39E5F15F4244AEA1D09AB156C65042/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/53597B0E71B9106A97FE0731821F974E2A39E5F15F4244AEA1D09AB156C65042/0/BD94D9821F379D20EA36D36736038ACA527A9932.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.215.0/24
168.196.208.0/23
IPv6:
2803:67e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270101
Signature Algorithm: sha256WithRSAEncryption
28:87:9f:f6:d3:a5:c6:aa:3d:88:05:d4:a8:c0:3e:41:5d:14:
45:e5:00:33:b1:31:77:9b:65:40:e5:04:aa:69:6c:09:4e:0d:
89:7c:f3:d4:e5:78:9c:b3:cd:da:d0:fe:60:19:d9:18:95:ab:
f7:d6:5e:18:e6:89:15:a9:43:63:96:8c:3a:fa:74:9e:7b:76:
0e:0d:dc:06:ae:f7:7a:db:da:c0:df:81:16:22:20:9b:96:79:
75:3f:ee:02:2d:69:a7:ce:02:20:58:c2:80:b0:67:0f:bf:d4:
15:4a:23:0c:1d:80:9a:3b:32:ae:57:10:0a:04:99:89:89:bc:
e2:37:0a:63:ad:28:ee:32:ab:04:56:19:df:59:5b:cb:7a:07:
06:ca:d3:e7:e7:36:d8:26:b7:cf:0b:ac:d3:98:67:25:8c:8b:
ad:82:ab:5a:0a:b4:b1:4c:41:f5:1a:6b:c1:c5:f6:76:85:e3:
95:15:5f:f7:9b:c8:cb:fc:05:aa:39:8f:35:9c:d3:34:1a:da:
0b:8c:7e:a0:89:76:64:04:14:35:58:ee:e2:08:75:b6:fe:98:
1e:f3:a5:97:af:79:9b:d2:72:f5:09:c6:8e:65:a8:4e:05:55:
49:ce:04:93:8e:64:75:af:0a:fd:e9:a4:02:74:ba:51:d8:d9:
2b:fe:b9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:53:19 2026 by rpki-client