
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.cer
File: EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.cer (raw, json)
Hash identifier: VNlyEUCo1h2YErytZrlK/JlaELDZ/Y29Ra3xG6CPi0M=
Subject key identifier: EF:3F:FE:AA:A0:9A:4C:FC:C6:35:E4:8A:4C:FC:06:59:BC:BA:42:31
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 140406F3639E2185FE46E0DAF566929D2351098A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 15:20:48 +0000
Certificate not after: Wed 27 Jan 2027 15:25:48 +0000
Subordinate resources: AS: 263768
IP: 138.99.128.0/22
IP: 170.81.212.0/22
IP: 2803:6840::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 22 Feb 2026 23:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:04:06:f3:63:9e:21:85:fe:46:e0:da:f5:66:92:9d:23:51:09:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 15:20:48 2026 GMT
Not After : Jan 27 15:25:48 2027 GMT
Subject: CN=EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:ab:c7:af:8a:fd:8c:8e:84:f5:45:21:a3:
c9:73:77:a0:05:05:c5:d0:ac:22:ab:29:0d:40:47:
5f:a5:57:7e:ca:ae:fe:0a:5f:11:2c:67:6a:79:54:
ad:28:38:08:55:0a:b8:0c:87:b5:4f:d8:fd:96:ff:
42:dc:fd:97:84:5c:99:1e:7a:e7:15:82:2b:d4:ab:
a4:4c:8e:04:97:71:93:ba:4a:46:3c:d7:64:df:80:
06:a8:91:c3:13:72:cc:9e:e6:00:a7:a5:75:2f:b6:
a6:e2:ff:09:a2:c5:c8:b4:76:82:70:56:df:d0:02:
64:ef:4d:47:aa:39:0b:0c:3c:79:90:ae:d8:d9:49:
56:5e:b6:0a:d8:2e:5b:d5:2f:bb:ec:62:18:32:a5:
7c:8d:77:d4:01:d7:b0:98:31:28:e7:d2:3c:fd:7e:
28:92:91:c6:dc:ba:be:ab:c1:da:ec:a3:8f:f2:09:
20:d8:18:02:e0:03:c3:3f:4b:42:95:51:7e:4f:1a:
6d:37:52:2c:c6:e8:6a:5b:c2:59:86:b4:e2:7c:d8:
bd:b3:41:d7:02:b8:60:fa:dc:93:6c:da:1f:23:3e:
d6:49:02:70:67:5c:94:9d:6c:97:21:26:88:51:c2:
29:5a:15:0e:27:d3:55:48:6e:08:69:44:fd:3f:ab:
3b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EF:3F:FE:AA:A0:9A:4C:FC:C6:35:E4:8A:4C:FC:06:59:BC:BA:42:31
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.128.0/22
170.81.212.0/22
IPv6:
2803:6840::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263768
Signature Algorithm: sha256WithRSAEncryption
54:3c:d6:b0:a3:df:b1:69:08:76:d6:26:73:23:a0:f8:b0:ed:
65:00:6e:56:b1:09:e7:ac:f2:ab:fd:0b:7c:c8:cb:5d:3e:39:
ca:ab:28:9c:2f:47:0a:81:50:67:ef:af:e8:aa:69:44:41:51:
8f:a0:7e:d7:4c:96:a0:a6:9b:2c:73:91:a9:0c:5b:ab:0c:3c:
34:95:cf:81:5d:1c:2e:cc:1a:d5:91:75:5b:48:aa:4d:17:d7:
9b:9b:ef:6f:de:4b:0e:2f:9e:c3:6d:f7:e4:ad:df:f0:1b:9e:
1f:22:76:32:f9:27:d4:26:a0:e1:d2:d4:98:26:b3:fb:cd:aa:
99:1d:5b:c5:16:b3:7f:49:c3:41:5e:d8:e1:96:7b:c4:11:73:
b0:cc:44:b1:26:67:ba:57:37:1a:80:a7:0a:f8:43:41:37:cd:
2a:51:af:92:ff:6b:11:0a:2c:c8:f5:41:3d:bc:c2:c4:d7:27:
39:85:43:e0:6d:eb:fe:bd:be:9c:45:4d:0e:f0:2b:e8:eb:5d:
f7:c5:52:f6:9b:36:ca:b0:4b:68:96:a3:78:7d:90:35:f5:47:
e5:b3:73:c3:9e:99:72:ed:7d:b4:80:0b:f1:d0:2e:3d:12:16:
62:8a:13:2c:37:4f:76:86:3e:36:84:4a:76:d9:71:ad:07:4e:
a1:99:93:46
-----BEGIN CERTIFICATE-----
MIIGqzCCBZOgAwIBAgIUFAQG82OeIYX+RuDa9WaSnSNRCYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE
NjA1ODY3ODAeFw0yNjAxMjgxNTIwNDhaFw0yNzAxMjcxNTI1NDhaMDMxMTAvBgNV
BAMTKEVGM0ZGRUFBQTA5QTRDRkNDNjM1RTQ4QTRDRkMwNjU5QkNCQTQyMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7oKvHr4r9jI6E9UUho8lzd6AF
BcXQrCKrKQ1AR1+lV37Krv4KXxEsZ2p5VK0oOAhVCrgMh7VP2P2W/0Lc/ZeEXJke
eucVgivUq6RMjgSXcZO6SkY812TfgAaokcMTcsye5gCnpXUvtqbi/wmixci0doJw
Vt/QAmTvTUeqOQsMPHmQrtjZSVZetgrYLlvVL7vsYhgypXyNd9QB17CYMSjn0jz9
fiiSkcbcur6rwdrso4/yCSDYGALgA8M/S0KVUX5PGm03UizG6GpbwlmGtOJ82L2z
QdcCuGD63JNs2h8jPtZJAnBnXJSdbJchJohRwilaFQ4n01VIbghpRP0/qzsbAgMB
AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTvP/6qoJpM/MY1
5IpM/AZZvLpCMTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy
NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOUZCRTI1Mzc3MTc2NDhCRTQ1ODRFMEY2
M0U5OENCNzUxMTZFNzg3MkYxRUQzODU0RDI0QjdERURFQTk0QjVDRS8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy85RkJFMjUzNzcxNzY0OEJFNDU4NEUwRjYzRTk4Q0I3NTExNkU3ODcyRjFF
RDM4NTREMjRCN0RFREVBOTRCNUNFLzAvRUYzRkZFQUFBMDlBNENGQ0M2MzVFNDhB
NENGQzA2NTlCQ0JBNDIzMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCimOAAwQCqlHU
MA0EAgACMAcDBQAoA2hAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQGWDANBgkq
hkiG9w0BAQsFAAOCAQEAVDzWsKPfsWkIdtYmcyOg+LDtZQBuVrEJ56zyq/0LfMjL
XT45yqsonC9HCoFQZ++v6KppREFRj6B+10yWoKabLHORqQxbqww8NJXPgV0cLswa
1ZF1W0iqTRfXm5vvb95LDi+ew2335K3f8BueHyJ2Mvkn1Cag4dLUmCaz+82qmR1b
xRazf0nDQV7Y4ZZ7xBFzsMxEsSZnulc3GoCnCvhDQTfNKlGvkv9rEQosyPVBPbzC
xNcnOYVD4G3r/r2+nEVNDvAr6Otd98VS9ps2yrBLaJajeH2QNfVH5bNzw56Zcu19
tIAL8dAuPRIWYooTLDdPdoY+NoRKdtlxrQdOoZmTRg==
-----END CERTIFICATE-----
Generated at Thu Feb 19 00:03:02 2026 by rpki-client