
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D56A7C417268FD26AEFA48D4F454E7B1801BCF27.cer
File: D56A7C417268FD26AEFA48D4F454E7B1801BCF27.cer (raw, json)
Hash identifier: mKzE41di9utEV/6HTDVFrQiruK6AQa3AVUU8rpigYOg=
Subject key identifier: D5:6A:7C:41:72:68:FD:26:AE:FA:48:D4:F4:54:E7:B1:80:1B:CF:27
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 23FA80C817C2CE1012575C0DF702CF84C0463667
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/4FFC4820A326A9D70DB43409E5EF36C5992A26035DE4933C2332A9365FFD505D/0/D56A7C417268FD26AEFA48D4F454E7B1801BCF27.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/4FFC4820A326A9D70DB43409E5EF36C5992A26035DE4933C2332A9365FFD505D/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 20:31:13 +0000
Certificate not after: Wed 27 Jan 2027 20:36:13 +0000
Subordinate resources: AS: 274097
IP: 2803:56d0::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 07 Mar 2026 04:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:fa:80:c8:17:c2:ce:10:12:57:5c:0d:f7:02:cf:84:c0:46:36:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 20:31:13 2026 GMT
Not After : Jan 27 20:36:13 2027 GMT
Subject: CN=D56A7C417268FD26AEFA48D4F454E7B1801BCF27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c6:bc:c5:a7:a4:0c:1f:a1:cd:80:c2:2d:fe:
0b:18:c4:c8:88:75:5a:fb:dc:cb:cf:21:f4:0f:75:
fb:85:a1:a4:37:bf:5a:c2:73:c9:85:0c:e2:31:b3:
62:76:fb:82:d6:80:e7:74:96:c8:f6:db:fe:43:06:
81:89:c9:75:7b:c0:ab:3e:24:ff:46:e2:31:b8:6f:
6a:4d:14:bf:15:b5:9d:5a:83:44:e0:a0:8b:1f:70:
9f:71:a9:15:d8:2b:0e:ca:2d:3c:e3:9f:ab:86:47:
bf:a4:16:9f:26:3d:ab:02:59:34:f9:59:03:dd:71:
17:31:a9:4a:78:f6:fa:4d:a5:c5:d4:2f:49:05:11:
a3:bf:a4:55:4e:2c:2a:e3:69:43:31:d4:1f:44:7a:
62:4c:35:4e:b6:fb:e4:8e:90:6a:1c:e2:19:b8:75:
c3:57:71:eb:2a:e1:90:a5:82:e4:28:a9:95:71:a6:
9d:1c:99:4d:01:a7:d4:cf:93:36:e5:1e:e7:e6:f1:
20:75:48:f5:87:9d:6a:da:0a:42:8d:27:56:2e:c8:
43:19:57:fa:b3:4b:e7:d2:b9:c1:48:0b:77:f7:9d:
40:be:25:89:c1:29:37:2a:85:4e:04:03:44:eb:b7:
7c:4f:59:54:20:0d:1f:d0:cd:e8:0e:d9:1b:91:ca:
19:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D5:6A:7C:41:72:68:FD:26:AE:FA:48:D4:F4:54:E7:B1:80:1B:CF:27
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4FFC4820A326A9D70DB43409E5EF36C5992A26035DE4933C2332A9365FFD505D/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4FFC4820A326A9D70DB43409E5EF36C5992A26035DE4933C2332A9365FFD505D/0/D56A7C417268FD26AEFA48D4F454E7B1801BCF27.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:56d0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
274097
Signature Algorithm: sha256WithRSAEncryption
1b:50:a1:16:13:b2:1e:a0:8b:74:63:a4:49:64:a3:49:e7:c9:
b5:12:ce:e6:4e:fc:b9:56:cd:b3:77:a8:bf:b7:f7:d9:70:05:
a8:dc:b9:5b:69:e8:e8:06:2a:79:42:99:95:34:f4:a7:31:b6:
0d:da:b0:0e:80:e2:f5:78:ff:b6:ef:72:92:32:21:54:f0:d5:
a2:d8:95:b9:bf:e2:a7:17:4e:6b:3d:97:93:c0:3f:e5:4d:00:
d4:d8:23:8e:48:e1:0a:97:9a:b7:bf:67:37:da:b5:fd:74:6b:
80:cc:89:69:b7:fa:62:ea:83:78:3b:c7:f0:61:ef:b7:93:e9:
6b:bf:7b:5d:2b:47:8d:a9:5d:ff:a8:fc:ad:3d:b0:37:61:5c:
ce:4d:96:d4:ca:dc:10:9a:28:60:f0:d6:d6:84:53:5b:d8:89:
64:f1:9f:c4:c4:a8:17:85:38:6f:50:16:c1:00:13:34:87:a9:
6d:74:34:4e:4a:e5:1c:df:6a:94:d2:63:f3:e2:40:bc:9b:c2:
7b:ea:2c:fa:b2:ae:34:bc:07:37:01:cf:e8:ec:68:9d:51:9a:
45:9d:0f:02:3b:d3:90:e0:5f:e2:1e:33:9b:ce:ff:d6:f0:11:
c9:0f:37:b6:db:54:77:68:24:7a:a9:65:5f:87:9e:71:ae:6f:
ef:6e:af:f1
-----BEGIN CERTIFICATE-----
MIIGlzCCBX+gAwIBAgIUI/qAyBfCzhASV1wN9wLPhMBGNmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE
NjA1ODY3ODAeFw0yNjAxMjgyMDMxMTNaFw0yNzAxMjcyMDM2MTNaMDMxMTAvBgNV
BAMTKEQ1NkE3QzQxNzI2OEZEMjZBRUZBNDhENEY0NTRFN0IxODAxQkNGMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoxrzFp6QMH6HNgMIt/gsYxMiI
dVr73MvPIfQPdfuFoaQ3v1rCc8mFDOIxs2J2+4LWgOd0lsj22/5DBoGJyXV7wKs+
JP9G4jG4b2pNFL8VtZ1ag0TgoIsfcJ9xqRXYKw7KLTzjn6uGR7+kFp8mPasCWTT5
WQPdcRcxqUp49vpNpcXUL0kFEaO/pFVOLCrjaUMx1B9EemJMNU62++SOkGoc4hm4
dcNXcesq4ZClguQoqZVxpp0cmU0Bp9TPkzblHufm8SB1SPWHnWraCkKNJ1YuyEMZ
V/qzS+fSucFIC3f3nUC+JYnBKTcqhU4EA0Trt3xPWVQgDR/QzegO2RuRyhm5AgMB
AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTVanxBcmj9Jq76
SNT0VOexgBvPJzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy
NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNEZGQzQ4MjBBMzI2QTlENzBEQjQzNDA5
RTVFRjM2QzU5OTJBMjYwMzVERTQ5MzNDMjMzMkE5MzY1RkZENTA1RC8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80RkZDNDgyMEEzMjZBOUQ3MERCNDM0MDlFNUVGMzZDNTk5MkEyNjAzNURF
NDkzM0MyMzMyQTkzNjVGRkQ1MDVELzAvRDU2QTdDNDE3MjY4RkQyNkFFRkE0OEQ0
RjQ1NEU3QjE4MDFCQ0YyNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANW0DAaBggr
BgEFBQcBCAEB/wQLMAmgBzAFAgMELrEwDQYJKoZIhvcNAQELBQADggEBABtQoRYT
sh6gi3RjpElko0nnybUSzuZO/LlWzbN3qL+399lwBajcuVtp6OgGKnlCmZU09Kcx
tg3asA6A4vV4/7bvcpIyIVTw1aLYlbm/4qcXTms9l5PAP+VNANTYI45I4QqXmre/
Zzfatf10a4DMiWm3+mLqg3g7x/Bh77eT6Wu/e10rR42pXf+o/K09sDdhXM5NltTK
3BCaKGDw1taEU1vYiWTxn8TEqBeFOG9QFsEAEzSHqW10NE5K5RzfapTSY/PiQLyb
wnvqLPqyrjS8BzcBz+jsaJ1RmkWdDwI705DgX+IeM5vO/9bwEckPN7bbVHdoJHqp
ZV+HnnGub+9ur/E=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:01:49 2026 by rpki-client