
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E221F58F9AD3CDA90B75247C2652AA1181D7A457.cer
File: E221F58F9AD3CDA90B75247C2652AA1181D7A457.cer (raw, json)
Hash identifier: oV8uXPTITDlX5G66qn2eEz6rpYenITh/Pg+YApTMQU4=
Subject key identifier: E2:21:F5:8F:9A:D3:CD:A9:0B:75:24:7C:26:52:AA:11:81:D7:A4:57
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 5400B5E19C23FE4874B14D77D02B6F26A23A9E4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/D9973489D48CBEBCBEBAE931A40B6AF5D117E81900F8F98DF0728F12B6D26692/0/E221F58F9AD3CDA90B75247C2652AA1181D7A457.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/D9973489D48CBEBCBEBAE931A40B6AF5D117E81900F8F98DF0728F12B6D26692/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 27 Jan 2026 22:29:44 +0000
Certificate not after: Tue 26 Jan 2027 22:34:44 +0000
Subordinate resources: AS: 273223
IP: 2803:2e50::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 19 Feb 2026 20:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:00:b5:e1:9c:23:fe:48:74:b1:4d:77:d0:2b:6f:26:a2:3a:9e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 27 22:29:44 2026 GMT
Not After : Jan 26 22:34:44 2027 GMT
Subject: CN=E221F58F9AD3CDA90B75247C2652AA1181D7A457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:95:0b:25:0e:a9:e6:43:00:2f:58:d9:2f:
57:7e:82:30:af:2d:8e:d7:ea:95:68:44:3f:f5:67:
cf:e1:4d:7e:01:15:bb:3d:f1:0c:96:f1:78:08:fe:
51:31:c1:55:3c:be:95:30:d4:cd:87:bf:c4:5b:b1:
31:7d:49:a4:4b:c2:d0:7c:e6:2c:6e:b3:db:7c:5c:
9d:7d:88:b2:e5:1c:19:67:9c:71:84:f0:07:48:e3:
54:21:84:49:d7:a0:5f:8d:dd:89:93:60:e0:ca:48:
fb:67:bb:43:9a:17:56:01:83:ea:73:2d:c2:9c:46:
a8:28:f8:07:5f:16:1c:e1:5b:5a:9c:c3:54:a1:04:
25:42:5e:d8:3b:30:2d:ed:ad:39:11:8c:bf:54:8f:
92:4f:38:2d:c9:d4:36:02:95:53:2e:28:79:ce:c5:
0a:2c:fa:a3:ac:04:9c:45:83:02:17:07:cf:b7:0d:
db:9f:92:d6:0d:dd:48:f1:d6:ea:14:86:83:7d:1a:
54:82:08:90:62:58:89:56:bb:01:04:99:61:6d:cf:
3f:2a:58:a4:cd:d7:9d:6f:cc:9b:61:c3:e2:bb:75:
96:ee:93:ed:00:80:25:a2:df:b3:d8:ef:4e:6d:3a:
04:28:34:79:ed:ab:f7:9b:2e:40:ea:e7:09:dd:59:
c0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E2:21:F5:8F:9A:D3:CD:A9:0B:75:24:7C:26:52:AA:11:81:D7:A4:57
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D9973489D48CBEBCBEBAE931A40B6AF5D117E81900F8F98DF0728F12B6D26692/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D9973489D48CBEBCBEBAE931A40B6AF5D117E81900F8F98DF0728F12B6D26692/0/E221F58F9AD3CDA90B75247C2652AA1181D7A457.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:2e50::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273223
Signature Algorithm: sha256WithRSAEncryption
4f:68:72:98:cc:bd:6a:cb:7c:b1:0b:15:f1:56:c9:52:97:4d:
6d:1c:a4:a7:92:23:2f:6e:ef:f8:91:c0:89:0f:45:8c:a8:09:
f3:77:bd:72:a5:90:82:8d:56:cf:3e:07:f9:02:5a:34:03:b8:
6f:f0:89:22:8f:e0:6a:83:6f:2d:2e:f3:24:dd:d2:a4:69:58:
7e:10:ba:33:89:7a:61:a2:37:c7:61:04:fa:89:40:49:fc:15:
5e:51:36:7e:6d:49:92:86:91:e9:5d:f4:18:88:a4:fe:13:79:
bb:43:e3:14:1a:0f:27:b2:68:80:6f:00:b8:9b:84:23:65:5e:
ec:9a:f3:40:df:be:75:69:2c:47:3b:1f:f4:63:9a:84:36:5a:
b0:fb:76:dd:52:9e:11:3a:ae:fc:2b:09:07:4c:e1:30:8c:85:
97:7f:66:0e:54:6c:38:2d:c0:35:fd:af:4f:0e:a9:66:3f:d9:
c0:7d:2d:bd:ef:78:56:f6:98:b7:a0:3c:09:62:46:c6:46:e3:
13:0f:c5:f7:51:bd:2a:50:9c:19:72:ab:b8:64:40:83:b5:51:
93:af:f2:83:80:b0:51:2a:79:41:55:e7:a3:b4:2a:be:09:f9:
14:06:42:f9:e3:b0:b0:f0:5c:6c:52:c2:04:41:d7:47:1d:5f:
63:93:bb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 18:47:20 2026 by rpki-client