Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81384A93C6E6952115926F1C88CDC5866A02DF8F.cer
File:                     81384A93C6E6952115926F1C88CDC5866A02DF8F.cer (raw, json)
Hash identifier:          7GcbVcdy8yKvRHXSyj9EyX8tocJSKd3vpLdoFnLsVZw=
Subject key identifier:   81:38:4A:93:C6:E6:95:21:15:92:6F:1C:88:CD:C5:86:6A:02:DF:8F
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       22FE2EF53A394576964BE627E9A74E878B0DD7BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/F5A2BC656B29F7BE7830D483660384B2FC7DC3E56DA031D73E59AAC754F017F2/0/81384A93C6E6952115926F1C88CDC5866A02DF8F.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/F5A2BC656B29F7BE7830D483660384B2FC7DC3E56DA031D73E59AAC754F017F2/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 02 Apr 2026 17:20:01 +0000
Certificate not after:    Thu 01 Apr 2027 17:25:01 +0000
Subordinate resources:    IP: 45.174.200.0/22
                          IP: 2806:328::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 05:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:fe:2e:f5:3a:39:45:76:96:4b:e6:27:e9:a7:4e:87:8b:0d:d7:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Apr  2 17:20:01 2026 GMT
            Not After : Apr  1 17:25:01 2027 GMT
        Subject: CN=81384A93C6E6952115926F1C88CDC5866A02DF8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:23:98:ec:10:d2:de:88:7e:ae:af:89:a8:a0:
                    37:0f:e9:b9:81:8f:0a:ad:d5:1b:89:13:d1:31:a3:
                    95:cc:f9:e5:e9:d5:c4:c2:56:51:17:91:3a:64:72:
                    c8:4d:7b:b9:65:43:88:c8:1b:d3:04:e7:6a:93:b3:
                    cb:d5:3d:61:9b:64:6b:ae:a6:3e:80:f7:c0:e5:89:
                    b6:42:86:3f:ff:93:77:7c:17:8d:31:83:40:41:59:
                    cb:6b:d4:3b:d0:65:47:f3:85:c1:28:6f:1a:96:ad:
                    7a:61:cc:74:bb:33:a4:ab:86:83:3d:9c:49:e5:8f:
                    24:c8:07:2b:f4:59:39:17:2c:9e:2f:fd:45:70:9b:
                    e2:99:13:19:40:73:b8:38:d6:47:57:46:da:98:62:
                    12:a0:8c:10:4e:8f:10:9e:6a:ee:83:71:1c:7d:87:
                    b3:b0:ac:d9:dc:81:25:15:14:c8:64:1c:5c:e1:dd:
                    b2:2d:5b:f8:c3:e8:3a:21:1c:38:12:10:cd:8f:07:
                    0c:eb:80:ab:68:c3:da:53:be:48:72:6d:ce:b9:28:
                    23:4d:a9:c0:b9:2a:6e:4a:13:c3:68:9f:1e:b6:6c:
                    99:c0:33:4c:09:8d:d9:a1:97:4f:18:ac:72:de:5e:
                    03:b8:64:63:39:77:36:40:02:0b:b8:b1:e9:47:09:
                    a3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:38:4A:93:C6:E6:95:21:15:92:6F:1C:88:CD:C5:86:6A:02:DF:8F
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F5A2BC656B29F7BE7830D483660384B2FC7DC3E56DA031D73E59AAC754F017F2/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F5A2BC656B29F7BE7830D483660384B2FC7DC3E56DA031D73E59AAC754F017F2/0/81384A93C6E6952115926F1C88CDC5866A02DF8F.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.200.0/22
                IPv6:
                  2806:328::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:f6:14:bf:b2:3f:37:4f:a2:c6:88:31:36:b8:76:ad:15:80:
         6c:eb:4c:21:44:fd:1c:5a:aa:fa:d8:40:81:ca:2b:65:84:2d:
         c7:1c:d3:c7:8b:89:b3:27:9b:b8:14:a2:9b:32:c0:99:0f:b6:
         28:3c:28:94:a8:ef:fb:c7:44:d3:6a:0c:1a:27:8d:ef:69:34:
         30:6a:41:16:6c:5b:e0:93:ca:20:cc:52:83:8c:5b:c7:9f:74:
         f1:05:f4:5e:32:2e:f6:33:11:e0:84:b6:59:d2:20:11:ce:33:
         c6:f3:0d:8c:d0:cb:ab:0f:1e:b2:f3:fa:0b:d6:0f:4f:71:ff:
         3b:d5:dc:69:fe:d8:fb:82:f8:09:28:8f:08:6a:56:4f:8c:7b:
         2d:60:32:3d:21:b0:d8:15:8f:9f:81:77:c0:f2:61:c1:72:0a:
         42:cb:ba:1f:eb:3d:cd:fd:da:05:ca:db:9b:cf:5f:8d:01:07:
         68:17:08:c8:a1:66:f2:ec:a7:d0:6b:04:47:94:95:2f:af:98:
         d9:b2:53:95:3c:b1:27:12:55:72:3d:d4:2b:85:a6:ce:6d:84:
         94:8d:51:2d:12:6f:4e:03:9d:32:1c:7a:a6:7d:cb:59:d0:53:
         f4:c0:13:4e:50:37:01:37:d9:fd:45:c4:57:89:7f:6a:1a:f6:
         c9:66:6a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 09:15:46 2026 by rpki-client