
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1124389491FB420AF7FDE7F9D2323ACF465291F.cer
File: D1124389491FB420AF7FDE7F9D2323ACF465291F.cer (raw, json)
Hash identifier: hUMBZiLH0LWN7EqTAAmgxDTdm0gCJJTs3w1gPWpj8iU=
Subject key identifier: D1:12:43:89:49:1F:B4:20:AF:7F:DE:7F:9D:23:23:AC:F4:65:29:1F
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 59ABDA60DC357ECCBC979CB159A809283CEFA265
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/48C022FDAC21F4F471FCBE48305007541B6B18C90892D3D40B974FED8357F746/0/D1124389491FB420AF7FDE7F9D2323ACF465291F.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/48C022FDAC21F4F471FCBE48305007541B6B18C90892D3D40B974FED8357F746/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 05:32:06 +0000
Certificate not after: Wed 27 Jan 2027 05:37:06 +0000
Subordinate resources: AS: 270064
IP: 190.124.48.0/22
IP: 2803:43e0::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 22 Feb 2026 23:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:ab:da:60:dc:35:7e:cc:bc:97:9c:b1:59:a8:09:28:3c:ef:a2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 05:32:06 2026 GMT
Not After : Jan 27 05:37:06 2027 GMT
Subject: CN=D1124389491FB420AF7FDE7F9D2323ACF465291F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cf:e9:c2:50:4d:40:6d:23:15:b9:23:5c:a4:
53:94:bd:ab:03:95:66:6f:c7:dc:0d:50:c7:1e:68:
f3:16:1f:16:c7:08:c4:2a:b7:81:5f:69:13:45:b9:
df:24:0b:91:98:a9:3b:bf:4f:49:d3:6d:3d:68:dd:
fb:52:cb:1e:45:f8:7c:f3:38:a6:7e:6f:eb:38:1e:
9e:78:68:6d:b9:a1:67:27:6a:a0:cf:e8:ae:10:53:
10:0c:78:32:1d:2a:d6:f4:97:c0:0c:3f:f1:1b:d2:
37:41:a5:52:97:d6:fe:b6:ea:c8:2f:b8:65:c1:69:
03:90:72:d1:73:0f:64:8d:52:8e:a7:65:5e:61:82:
91:ed:60:e2:5b:28:e9:3d:d5:a8:d9:ee:f7:76:d9:
53:d8:37:02:d8:58:3b:f3:4a:80:42:c4:40:d0:13:
a9:02:5a:3d:c9:51:05:32:92:fe:a1:b3:b7:e9:c9:
fc:27:61:94:f3:ca:64:45:9a:c9:0a:8b:ac:4c:ad:
72:ac:2d:59:39:35:a2:c2:48:d9:ff:03:05:68:86:
b8:76:e7:85:97:7e:6c:e3:65:de:0a:50:7a:ab:02:
8d:e2:7c:f8:3e:a9:40:ff:75:a9:53:3d:46:ff:52:
40:cf:0a:bd:99:d1:c7:7c:43:3c:cb:3e:11:8e:31:
c0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D1:12:43:89:49:1F:B4:20:AF:7F:DE:7F:9D:23:23:AC:F4:65:29:1F
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/48C022FDAC21F4F471FCBE48305007541B6B18C90892D3D40B974FED8357F746/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/48C022FDAC21F4F471FCBE48305007541B6B18C90892D3D40B974FED8357F746/0/D1124389491FB420AF7FDE7F9D2323ACF465291F.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.124.48.0/22
IPv6:
2803:43e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
270064
Signature Algorithm: sha256WithRSAEncryption
4a:ce:08:48:e8:cb:b1:43:ce:74:4e:9c:79:57:1f:32:c4:eb:
2d:a2:9e:f4:d4:90:25:91:4f:3e:d6:90:79:61:bd:97:0a:0d:
33:1a:45:7d:83:70:9c:0b:99:6b:2e:cb:c1:36:1f:c2:8c:5b:
50:e1:5a:e8:2c:e0:3d:90:8b:c3:fb:23:66:e1:62:eb:75:86:
e3:2f:e9:77:30:e4:02:7c:6e:0b:32:a2:23:70:c0:c6:b7:d3:
ee:a9:5b:17:de:3a:cf:b9:cc:84:6a:37:b2:98:5c:ee:8a:31:
4b:72:ef:8c:37:3a:b6:af:4a:38:15:64:6d:ce:65:24:23:ef:
41:0e:f7:9b:82:01:ee:dd:e8:af:62:3b:79:18:0b:90:45:2b:
37:a0:3f:2f:d3:96:56:b7:fc:1e:36:bc:d9:f6:c3:7e:6d:6c:
c3:db:3f:26:5f:75:52:1a:3f:0c:12:a7:f5:23:a2:32:90:93:
ab:7a:7d:a5:80:0f:dd:0b:d4:27:3c:c9:b5:98:15:c4:9f:42:
64:2c:f5:ff:1b:07:d6:f4:fc:22:b2:8f:ae:fa:9e:93:5c:97:
23:4a:33:23:ba:9c:a0:c6:88:a2:5f:30:37:d3:a3:0c:69:85:
c0:78:88:d6:04:f6:4c:43:1a:51:90:c7:1c:e6:79:a1:df:cb:
ff:d6:61:e4
-----BEGIN CERTIFICATE-----
MIIGpTCCBY2gAwIBAgIUWavaYNw1fsy8l5yxWagJKDzvomUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE
NjA1ODY3ODAeFw0yNjAxMjgwNTMyMDZaFw0yNzAxMjcwNTM3MDZaMDMxMTAvBgNV
BAMTKEQxMTI0Mzg5NDkxRkI0MjBBRjdGREU3RjlEMjMyM0FDRjQ2NTI5MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYz+nCUE1AbSMVuSNcpFOUvasD
lWZvx9wNUMceaPMWHxbHCMQqt4FfaRNFud8kC5GYqTu/T0nTbT1o3ftSyx5F+Hzz
OKZ+b+s4Hp54aG25oWcnaqDP6K4QUxAMeDIdKtb0l8AMP/Eb0jdBpVKX1v626sgv
uGXBaQOQctFzD2SNUo6nZV5hgpHtYOJbKOk91ajZ7vd22VPYNwLYWDvzSoBCxEDQ
E6kCWj3JUQUykv6hs7fpyfwnYZTzymRFmskKi6xMrXKsLVk5NaLCSNn/AwVohrh2
54WXfmzjZd4KUHqrAo3ifPg+qUD/dalTPUb/UkDPCr2Z0cd8QzzLPhGOMcC5AgMB
AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTREkOJSR+0IK9/
3n+dIyOs9GUpHzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy
NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDhDMDIyRkRBQzIxRjRGNDcxRkNCRTQ4
MzA1MDA3NTQxQjZCMThDOTA4OTJEM0Q0MEI5NzRGRUQ4MzU3Rjc0Ni8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OEMwMjJGREFDMjFGNEY0NzFGQ0JFNDgzMDUwMDc1NDFCNkIxOEM5MDg5
MkQzRDQwQjk3NEZFRDgzNTdGNzQ2LzAvRDExMjQzODk0OTFGQjQyMEFGN0ZERTdG
OUQyMzIzQUNGNDY1MjkxRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCvnwwMA0EAgAC
MAcDBQAoA0PgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQe8DANBgkqhkiG9w0B
AQsFAAOCAQEASs4ISOjLsUPOdE6ceVcfMsTrLaKe9NSQJZFPPtaQeWG9lwoNMxpF
fYNwnAuZay7LwTYfwoxbUOFa6CzgPZCLw/sjZuFi63WG4y/pdzDkAnxuCzKiI3DA
xrfT7qlbF946z7nMhGo3sphc7ooxS3LvjDc6tq9KOBVkbc5lJCPvQQ73m4IB7t3o
r2I7eRgLkEUrN6A/L9OWVrf8Hja82fbDfm1sw9s/Jl91Uho/DBKn9SOiMpCTq3p9
pYAP3QvUJzzJtZgVxJ9CZCz1/xsH1vT8IrKPrvqek1yXI0ozI7qcoMaIol8wN9Oj
DGmFwHiI1gT2TEMaUZDHHOZ5od/L/9Zh5A==
-----END CERTIFICATE-----
Generated at Thu Feb 19 15:50:50 2026 by rpki-client