
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.cer
File: C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.cer (raw, json)
Hash identifier: eVkFvTfayyh+FJNo/E8OyF6u4MuCAeHEr3KHJce4i18=
Subject key identifier: C9:8C:BA:FA:1B:63:46:1F:71:81:D2:0C:05:CB:6C:83:B4:A7:52:B4
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 438925817E7D9A598AD480A7BE9C95061F1D710C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/FDFF1188C2B050BE246E6E28475C838C9DE4134FF2EDA671A2859E02F5C7EE81/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/FDFF1188C2B050BE246E6E28475C838C9DE4134FF2EDA671A2859E02F5C7EE81/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 27 Jan 2026 17:50:51 +0000
Certificate not after: Tue 26 Jan 2027 17:55:51 +0000
Subordinate resources: AS: 271934
IP: 2803:ba10::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 23 Feb 2026 22:12:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:89:25:81:7e:7d:9a:59:8a:d4:80:a7:be:9c:95:06:1f:1d:71:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 27 17:50:51 2026 GMT
Not After : Jan 26 17:55:51 2027 GMT
Subject: CN=C98CBAFA1B63461F7181D20C05CB6C83B4A752B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:97:ec:f5:05:d7:3a:b5:42:93:25:cc:b6:aa:
2f:a0:7e:da:25:ef:8c:71:64:65:a2:16:41:e0:e5:
1f:b8:2d:37:d8:3d:8f:98:54:47:93:6c:23:66:4a:
d6:66:c0:a0:6f:66:12:56:c2:49:02:66:c6:c0:65:
1c:a2:cf:66:2b:7f:1c:43:04:e4:ba:55:1a:87:9b:
11:0a:61:47:2e:89:db:a2:7e:85:45:5a:bb:8c:8c:
27:fe:4f:a5:d9:d3:ec:77:a3:af:26:5f:20:cf:6a:
b9:5b:7b:91:f8:63:9b:21:73:36:19:1a:a3:e7:46:
ad:36:7a:d6:04:02:32:7f:12:5a:a3:48:09:67:61:
cf:1b:5d:d6:14:b7:2f:c7:ab:ba:66:22:e5:21:67:
3b:52:77:34:86:fd:df:29:36:07:57:b4:17:1a:db:
cd:6f:b5:42:6d:78:96:08:ec:60:e8:71:29:3c:f2:
15:25:ed:11:a6:d1:27:a2:62:99:c3:7d:a3:1c:76:
0c:02:8e:cb:24:6b:32:44:46:6a:7f:8d:1e:f5:57:
d3:f6:32:35:9b:62:71:c5:0b:08:be:c4:72:d5:9c:
01:a7:b8:bb:9a:97:01:06:73:c8:89:c3:db:90:4e:
07:da:52:ca:c7:f7:7e:9c:43:0f:64:4d:f1:60:97:
db:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C9:8C:BA:FA:1B:63:46:1F:71:81:D2:0C:05:CB:6C:83:B4:A7:52:B4
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FDFF1188C2B050BE246E6E28475C838C9DE4134FF2EDA671A2859E02F5C7EE81/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FDFF1188C2B050BE246E6E28475C838C9DE4134FF2EDA671A2859E02F5C7EE81/0/C98CBAFA1B63461F7181D20C05CB6C83B4A752B4.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:ba10::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271934
Signature Algorithm: sha256WithRSAEncryption
0c:15:0c:d3:01:b5:80:19:a1:7f:e3:f9:f7:7a:54:54:bf:9a:
50:60:61:33:d6:f7:9e:44:7e:81:5f:8a:2e:ec:8a:3a:ce:f2:
de:82:35:94:30:cd:90:04:55:b2:d3:1b:fc:8f:e3:ee:ca:2f:
ec:17:be:05:0b:9c:70:c8:cb:9b:59:4a:05:73:df:37:c3:cd:
51:95:88:9d:40:2f:f5:d9:91:1a:e1:6b:96:21:79:16:6f:a0:
c2:92:cc:d1:29:43:37:f8:92:9f:a5:6c:18:1a:85:fb:49:04:
23:a7:89:c4:66:5e:2b:7f:38:42:2c:89:95:f8:e2:17:6d:6a:
fc:46:d7:9e:61:b3:3d:13:e9:70:65:99:85:04:be:d6:03:68:
e5:38:44:18:c1:32:e8:1c:46:75:85:5a:f4:10:ea:c0:a8:a1:
62:23:fd:ef:4c:b2:f8:56:d8:a6:db:7e:5a:61:5f:ea:0e:03:
17:c7:f0:5b:bf:37:14:94:43:39:0a:45:e2:0e:8f:dd:ba:21:
96:bd:3f:ad:cf:37:a6:42:fb:4e:fc:3a:18:2a:f8:aa:75:24:
d6:74:55:e9:7c:3e:c2:77:8d:7c:1d:fa:21:86:7a:62:c7:a1:
4a:bf:62:c4:43:27:b0:28:e2:17:b3:db:e2:4d:5b:3c:32:f3:
6b:af:37:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:04:33 2026 by rpki-client