
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.cer
File: A6E3E992F10C16F74B23F741B96CFA7F84656F28.cer (raw, json)
Hash identifier: cath+ZvNzTxVTxKUWbhXXA1Sz9uxLmY52jL1vDAgJ+E=
Subject key identifier: A6:E3:E9:92:F1:0C:16:F7:4B:23:F7:41:B9:6C:FA:7F:84:65:6F:28
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 67515D2078EE404F6C3857BACADA5383CEB6F7F5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Sun 09 Feb 2025 11:31:39 +0000
Certificate not after: Sun 08 Feb 2026 11:36:39 +0000
Subordinate resources: AS: 272141
IP: 45.171.164.0/22
IP: 2803:1090::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 21:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:51:5d:20:78:ee:40:4f:6c:38:57:ba:ca:da:53:83:ce:b6:f7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Feb 9 11:31:39 2025 GMT
Not After : Feb 8 11:36:39 2026 GMT
Subject: CN=A6E3E992F10C16F74B23F741B96CFA7F84656F28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:87:08:67:13:23:0a:c6:f4:5d:79:cb:0b:56:
f8:3a:03:50:25:79:95:b1:f9:21:9d:e8:2c:30:84:
03:78:e4:c0:af:03:60:71:88:d0:23:47:db:c6:1a:
7a:26:6f:56:c6:9f:91:48:e4:d2:b4:d0:64:1d:2b:
69:16:9c:de:46:86:87:cf:7e:e9:9c:f5:e1:cf:6d:
a7:d7:5f:a0:99:00:4f:49:cd:37:e0:17:db:b1:25:
66:c4:0d:83:e5:52:b3:c0:ef:d8:bb:8d:02:c1:33:
82:a9:66:07:3c:f7:d7:15:2d:94:dc:01:4d:a4:81:
b1:4b:af:87:e2:c8:6f:41:ec:6c:12:fa:61:98:dc:
a0:4c:07:8b:d3:20:76:4d:b2:44:25:31:b6:35:e1:
8a:95:ad:fd:7c:d9:ce:33:3c:fc:71:61:d2:3e:ef:
c9:b3:67:72:21:6d:fc:44:28:25:b8:f9:06:28:5d:
42:14:ce:ae:5d:a6:01:b7:0f:6a:ca:da:6c:0d:ad:
c7:7a:5e:36:46:d4:f2:ed:87:49:e5:dd:4c:a9:95:
45:4e:b1:b3:c2:f4:ab:28:c2:f0:38:ab:7d:36:81:
56:aa:69:d0:32:1f:82:1c:fc:9c:90:e6:07:6f:b4:
fd:d3:ec:b6:ed:92:f0:10:65:06:a9:25:06:5a:aa:
04:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A6:E3:E9:92:F1:0C:16:F7:4B:23:F7:41:B9:6C:FA:7F:84:65:6F:28
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.164.0/22
IPv6:
2803:1090::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
272141
Signature Algorithm: sha256WithRSAEncryption
df:28:aa:bd:29:14:2e:46:3c:fb:5a:12:c0:c8:91:28:0b:65:
2f:4d:6e:f2:ac:9c:d6:ac:e8:99:f2:59:a8:18:3d:32:02:a7:
48:22:62:30:37:85:1d:a4:1b:db:a6:21:a0:23:de:af:15:40:
d4:7c:20:11:d3:2d:c4:de:3b:2f:0c:0e:65:80:75:4e:1f:d9:
3d:47:ea:83:f1:ad:3b:79:de:b7:af:21:e4:c5:b4:3b:f3:91:
55:ed:b0:18:59:94:d7:6a:31:8c:2d:50:f5:9e:54:ee:8f:c4:
ba:da:84:e1:ed:81:8e:e7:20:b3:31:94:d4:21:a0:d5:bd:18:
68:94:91:82:08:ce:03:d1:4c:10:29:64:d7:42:84:d5:89:bd:
ec:77:92:0a:ac:25:52:23:1e:ec:7c:f6:7b:8a:2e:36:bc:c0:
52:07:45:2f:c7:f6:9e:6a:3a:24:60:41:88:8d:7c:8b:fb:f8:
95:a2:b4:a0:06:3a:90:df:66:ce:63:c0:39:94:c6:c3:38:29:
f8:97:37:ad:22:29:42:44:7b:42:a1:c1:b9:6a:d0:7f:fc:df:
c9:4c:e9:ee:b5:23:0a:33:9b:67:04:03:07:32:76:ae:e1:39:
0c:f6:22:a9:66:1d:1c:46:f0:90:4e:6e:b5:a1:35:d2:24:df:
34:c4:26:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 11:33:10 2025 by rpki-client