
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.cer
File: FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.cer (raw, json)
Hash identifier: g8f+OoWIoWSmmB0WneyH0S/0z26YsWYJYVjIEWnZb2Y=
Subject key identifier: FD:A5:A3:52:F4:B8:A1:5F:DA:0A:C9:ED:2B:32:89:C3:22:2C:BA:CF
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 1E2380DAD6C95EBB2F1ED3CA52350F6632C233EE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 27 Jan 2026 22:59:26 +0000
Certificate not after: Tue 26 Jan 2027 23:04:26 +0000
Subordinate resources: AS: 272038
IP: 181.233.180.0/22
IP: 2803:4d10::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 22 Feb 2026 23:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:23:80:da:d6:c9:5e:bb:2f:1e:d3:ca:52:35:0f:66:32:c2:33:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 27 22:59:26 2026 GMT
Not After : Jan 26 23:04:26 2027 GMT
Subject: CN=FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:1a:e1:57:8b:29:c7:9e:44:a8:29:cb:e7:
fb:96:b7:ef:9d:c9:c2:49:12:a5:ab:74:f5:b5:b6:
37:23:4d:7d:c1:f1:2f:84:9b:99:c8:b6:5f:64:47:
ef:ed:b1:6e:14:9d:0b:4e:5b:06:37:45:67:ec:4c:
fb:e9:b7:3d:ca:8c:b2:61:48:e8:29:66:82:c1:c1:
4d:d9:86:7d:3b:a4:e5:4f:3a:82:04:e9:32:8e:74:
02:89:cd:5e:9e:07:47:d1:4c:56:2c:d3:c4:c0:aa:
cc:bd:72:b2:4e:44:4e:00:09:fd:bf:cb:e8:fc:a8:
81:20:34:50:e9:67:bf:29:77:75:9e:5b:7d:1a:83:
e5:5a:6a:6e:42:b3:85:2b:d3:83:52:03:91:2c:62:
3b:3f:fc:82:36:b4:cc:8b:58:e3:38:a8:4c:9f:31:
a5:82:f4:26:ca:60:b0:80:2f:e0:ab:b2:5a:fc:7f:
80:b5:bc:93:f7:05:8b:4c:72:3c:7a:42:ba:58:5d:
b9:05:bc:f4:2e:4c:29:34:08:54:b7:e3:25:1d:a0:
61:bc:8a:66:88:40:d0:3c:11:ce:89:5f:28:14:a4:
9d:0f:b6:d6:39:e3:55:55:39:f5:eb:6c:cf:23:f7:
69:b7:f6:84:77:c6:29:a6:62:02:1e:26:2d:5c:23:
69:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FD:A5:A3:52:F4:B8:A1:5F:DA:0A:C9:ED:2B:32:89:C3:22:2C:BA:CF
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.233.180.0/22
IPv6:
2803:4d10::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
272038
Signature Algorithm: sha256WithRSAEncryption
4f:1a:8a:c7:3d:78:0b:a2:09:c0:c0:f7:59:db:85:08:13:31:
9f:19:fb:09:c9:02:b8:d8:40:52:7c:bc:4a:5d:63:5b:f6:3f:
2c:ee:a9:e7:cb:4a:7a:3b:9f:17:a9:6d:42:b2:3b:65:2c:6c:
69:11:6b:3e:bb:a7:b9:d8:68:2d:d3:60:90:e4:5f:2e:50:f2:
33:72:02:d1:2b:58:ab:f9:7c:4a:2d:72:19:81:3f:3b:ae:36:
a6:ea:fb:71:e4:34:93:15:01:2a:cc:7a:aa:39:f0:ad:1d:dd:
94:c1:76:eb:a0:ef:8e:fd:12:9f:4c:5a:dd:6c:e7:8f:07:ad:
f1:17:6d:ca:ae:2b:35:ac:b1:21:31:fd:ca:e2:85:c5:fe:80:
c6:57:fd:96:02:98:e3:06:07:30:93:af:b1:8e:d4:05:a0:50:
90:d1:35:6a:4b:fc:6d:c0:9f:0e:7f:91:16:eb:e5:da:1b:ff:
55:0a:4a:57:2f:8a:20:af:ac:53:f7:11:c0:1f:96:9d:fe:0f:
7b:04:1e:5c:be:d9:3f:b4:02:fb:53:2c:1f:33:d4:a7:09:97:
2f:61:c8:b0:c5:de:14:0a:75:14:c6:8c:a1:1e:3f:51:de:67:
a6:0c:00:cc:4f:aa:c3:ea:7a:29:cf:2a:ae:02:34:5e:69:cc:
d4:02:16:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:10:58 2026 by rpki-client