
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A1976122889A22C65D429DD2AD0DED7DF87FCFF.cer
File: 3A1976122889A22C65D429DD2AD0DED7DF87FCFF.cer (raw, json)
Hash identifier: k57BLtqLIuUtiXh8Z3LUf47ELXUx8tUtuz/or5TmgRA=
Subject key identifier: 3A:19:76:12:28:89:A2:2C:65:D4:29:DD:2A:D0:DE:D7:DF:87:FC:FF
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 4F402686FB266B5E3044C13AD456B94D861FC9F6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/8F04ADFC205D1C47A3C2349859C05EEF8A723B3CC1B657771C182C32DB858387/0/3A1976122889A22C65D429DD2AD0DED7DF87FCFF.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/8F04ADFC205D1C47A3C2349859C05EEF8A723B3CC1B657771C182C32DB858387/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Sun 24 May 2026 14:45:01 +0000
Certificate not after: Sun 23 May 2027 14:50:01 +0000
Subordinate resources: AS: 273950
IP: 2803:9f50::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 02 Jun 2026 13:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:40:26:86:fb:26:6b:5e:30:44:c1:3a:d4:56:b9:4d:86:1f:c9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: May 24 14:45:01 2026 GMT
Not After : May 23 14:50:01 2027 GMT
Subject: CN=3A1976122889A22C65D429DD2AD0DED7DF87FCFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:59:c9:ff:8b:ce:0c:dc:ac:ef:cb:9f:9c:4d:
eb:c1:54:1d:1b:71:bf:83:40:f3:4e:69:2f:04:52:
6e:ea:3d:29:75:c1:65:23:1c:64:16:7a:8d:f9:5d:
57:84:53:85:88:d9:6f:da:2b:d5:5b:3f:0f:71:6b:
f8:13:bc:b5:4a:df:5b:92:72:55:9e:39:68:fb:0d:
4a:02:d0:a0:33:8e:30:f3:95:fb:06:bf:f1:77:d8:
cb:e2:b4:a4:72:bf:a0:86:e0:13:fb:46:f4:22:42:
a1:12:5e:a7:9d:e3:0e:34:8f:7d:bb:38:df:9a:1b:
1f:26:cf:79:83:d3:e9:84:e3:d9:68:3f:eb:09:05:
5b:3a:c3:51:7a:a5:07:a4:0e:fa:78:49:e3:89:06:
56:8f:0f:81:ec:92:6b:8e:d9:f4:fa:c0:d4:58:be:
2c:b6:f8:89:58:7c:04:d9:2b:52:8a:53:03:e3:af:
83:12:49:7a:85:53:5c:c6:87:5e:82:bd:83:84:51:
91:46:f9:ee:3d:e4:7a:f1:a8:aa:e7:c2:8d:75:31:
00:4c:9e:6b:99:71:cc:5e:16:1a:d7:fc:ba:d1:aa:
0a:e5:ce:c8:d5:af:7d:5f:be:16:16:6f:eb:46:af:
ab:9a:a3:57:be:05:08:04:f3:fb:ba:e5:d5:eb:ad:
de:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3A:19:76:12:28:89:A2:2C:65:D4:29:DD:2A:D0:DE:D7:DF:87:FC:FF
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8F04ADFC205D1C47A3C2349859C05EEF8A723B3CC1B657771C182C32DB858387/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8F04ADFC205D1C47A3C2349859C05EEF8A723B3CC1B657771C182C32DB858387/0/3A1976122889A22C65D429DD2AD0DED7DF87FCFF.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:9f50::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273950
Signature Algorithm: sha256WithRSAEncryption
23:9b:bd:0c:cd:43:73:fd:af:49:45:2b:85:3f:4a:ea:fb:be:
13:70:0c:84:1a:86:e6:02:e2:35:80:bc:84:99:14:0e:34:5e:
bc:3c:f8:08:7b:23:83:38:c7:c3:91:77:d5:09:6d:0b:84:bd:
88:85:27:b9:86:54:af:83:71:e5:cc:c9:b3:93:b8:db:65:03:
74:70:b0:a9:2e:24:2f:36:02:3c:f7:f4:fa:20:6b:42:37:b1:
a8:37:0b:8a:d4:43:62:ed:63:bd:ac:d5:bd:32:00:05:b2:f7:
13:0a:c4:85:63:38:97:ee:ba:c1:ab:a8:8c:c5:40:dd:c4:9e:
5c:f2:ae:12:31:6b:7b:62:ff:d7:78:30:c9:63:e2:06:a8:76:
c7:55:74:e0:7a:dd:a1:b7:21:c9:0a:71:11:4c:d0:b3:3d:d8:
40:35:f7:c6:de:ca:67:0b:3b:d8:f8:da:f0:a1:49:0d:3d:c0:
dd:fc:73:46:a8:3a:f5:2e:52:06:b3:fb:d5:4c:3f:88:a7:f4:
9e:18:d1:fd:74:44:a3:bc:aa:ee:ad:82:8b:b1:32:68:e1:ad:
72:01:92:e7:e4:17:ec:08:b8:15:32:bb:da:9a:e8:3f:43:04:
70:a3:b3:a4:56:a7:f8:60:0b:0b:7a:49:56:de:20:c9:72:72:
75:25:67:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 03:11:18 2026 by rpki-client