
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
File: A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer (raw, json)
Hash identifier: iuik4OqAIx5ORD2tvvELEgw0L5BsUpUDut9k8ps/GbI=
Subject key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 654B53ECDFCC97AE22C055FB690841E2343455C9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Fri 30 Jan 2026 17:55:00 +0000
Certificate not after: Fri 29 Jan 2027 18:00:00 +0000
Subordinate resources: AS: 27823
AS: 274308
IP: 138.36.236.0/22
IP: 138.219.40.0/22
IP: 168.181.184.0/22
IP: 168.197.48.0/22
IP: 179.43.112.0/20
IP: 200.58.96.0/19
IP: 2800:6c0::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 07 Mar 2026 04:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:4b:53:ec:df:cc:97:ae:22:c0:55:fb:69:08:41:e2:34:34:55:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 30 17:55:00 2026 GMT
Not After : Jan 29 18:00:00 2027 GMT
Subject: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c1:43:82:bd:22:01:31:fb:3c:4e:ea:b5:36:
ac:6e:da:0f:22:8c:a6:a6:bf:2a:3a:99:ff:03:81:
22:2d:b6:01:a9:99:bc:d1:b0:3f:b5:39:dd:bc:95:
a5:23:29:d9:81:30:a1:01:3e:1d:3b:1d:34:cb:d2:
7a:c0:7b:5f:b7:02:c7:75:ea:d7:31:cd:12:7c:0e:
91:da:79:e4:9e:e1:33:3d:cd:22:64:ce:00:48:dc:
d7:bd:56:9d:9c:a5:c9:f7:8c:37:ff:bf:9c:85:d7:
6d:83:89:8e:9e:67:a7:03:75:21:67:cc:ce:1f:60:
b2:94:cb:65:bb:96:d1:58:a2:b5:98:fa:77:8a:5c:
98:c2:b5:c1:04:71:89:f8:0c:70:8a:9e:56:b1:77:
c8:4e:7b:12:38:aa:4e:e6:81:83:65:16:75:dd:28:
29:c8:8a:37:ff:5f:99:1d:da:10:28:88:61:20:12:
1b:f5:61:4e:9b:7f:63:aa:c7:8b:88:14:b8:0c:d9:
3e:34:66:af:08:e3:72:08:1c:57:e2:68:3a:48:2c:
80:23:c1:59:b6:0b:ce:9f:e7:5f:f9:6f:19:e5:ce:
8e:f4:e7:78:38:52:b3:08:5b:e5:13:a0:b3:05:05:
71:cc:22:c3:a4:f6:8c:f0:4a:30:4f:e9:71:0f:7e:
bc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.236.0/22
138.219.40.0/22
168.181.184.0/22
168.197.48.0/22
179.43.112.0/20
200.58.96.0/19
IPv6:
2800:6c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
27823
274308
Signature Algorithm: sha256WithRSAEncryption
70:10:eb:9b:4b:28:fa:05:66:75:b9:f5:58:38:a5:8c:e9:51:
0c:31:45:b4:2c:62:1e:56:6c:6d:35:b5:ee:f9:69:d2:47:bd:
48:d3:59:e9:ed:22:ba:21:97:5e:74:41:de:c9:28:0c:0a:be:
3d:3a:fd:f9:2b:f1:67:54:41:44:72:71:4b:2a:68:54:87:56:
92:d7:a6:67:4b:1d:af:7f:b0:19:64:89:4f:e2:46:d3:61:e2:
a3:53:d0:8a:87:20:d3:50:47:fc:6d:31:ae:6b:8f:b0:93:d2:
d2:89:3b:b9:65:dc:66:0b:58:2c:75:2f:c6:06:67:02:72:a3:
d7:06:8a:ae:13:97:bf:b0:7e:9f:95:2c:e3:31:e6:72:6a:39:
6f:c3:7f:2d:49:45:6c:11:d3:4e:c2:63:0f:74:e0:b6:60:b2:
2a:92:5d:51:92:0d:76:36:65:e7:25:0b:00:c5:47:3d:98:58:
45:41:4d:cb:cf:85:f4:f5:6a:c2:6f:2f:69:d5:1b:ab:76:4f:
2d:62:c9:a4:69:30:ea:17:32:6f:87:00:2f:50:d8:2c:b8:ba:
74:33:93:85:2f:07:a6:17:50:c4:7d:7f:02:91:0c:89:ac:eb:
0b:e2:c0:a0:c2:ce:2c:e6:39:f7:00:d5:36:08:14:8a:a8:a1:
1b:c6:2d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:10:04 2026 by rpki-client