Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer
File:                     CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer (raw, json)
Hash identifier:          uRv6bDZoqzcxqsjh5nmslai17+IkeuPptXqcVu2VK3g=
Subject key identifier:   CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       229C6E578FC0C33EB903193A077552903B68E66B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 11:06:38 +0000
Certificate not after:    Wed 27 Jan 2027 11:11:38 +0000
Subordinate resources:    IP: 131.161.84.0/22
                          IP: 2803:7380::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 23:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:9c:6e:57:8f:c0:c3:3e:b9:03:19:3a:07:75:52:90:3b:68:e6:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 11:06:38 2026 GMT
            Not After : Jan 27 11:11:38 2027 GMT
        Subject: CN=CAE32015DF3B3628FC4046F36C155FFCBA8B398A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:35:1c:aa:90:8d:b8:7b:0b:40:86:e1:98:23:
                    9a:78:c6:08:48:2e:2f:dc:1a:66:34:03:64:7e:6b:
                    7f:76:c5:2b:75:fa:e3:9d:21:ac:bc:f5:fe:6b:05:
                    0d:f3:1c:67:eb:e5:3e:16:b0:31:53:8d:ac:1d:b1:
                    81:f0:44:87:d4:f6:1f:54:f3:11:10:a6:b0:73:80:
                    d7:5f:e6:19:2d:47:2a:7c:1d:03:37:44:83:fe:b8:
                    3c:05:9e:30:43:5b:96:52:81:c5:99:b2:d0:e8:fa:
                    13:36:c9:04:c5:cc:77:31:43:70:de:42:66:31:50:
                    23:30:24:44:76:d2:cb:45:0b:e6:b2:ff:c3:cc:e4:
                    b2:99:af:41:be:4b:4f:f9:68:9e:1f:a0:a5:d9:2c:
                    b6:c4:6e:55:3f:f5:3b:0f:80:ff:9c:f9:0f:94:bb:
                    00:86:6a:c0:6d:6a:e4:79:8f:cb:62:55:02:7a:b4:
                    55:a2:f2:84:65:15:b5:29:91:83:9c:ac:44:19:e2:
                    57:02:b5:8e:0b:2d:30:d8:17:02:02:32:4b:23:e0:
                    6e:6c:b3:09:b8:c7:df:34:9b:0f:05:a3:92:7b:c6:
                    13:26:74:45:f9:38:48:f9:e6:73:a2:f1:d0:45:d5:
                    f3:fe:17:b3:2b:57:4c:91:14:e2:12:23:d4:5a:05:
                    3e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.84.0/22
                IPv6:
                  2803:7380::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:79:6f:80:df:4d:f9:89:98:91:0c:74:dc:f3:23:ef:bc:62:
         44:bd:f6:cd:6f:28:76:a6:5f:1f:36:6f:11:fc:c2:27:bf:b5:
         a0:5c:12:de:4b:54:de:f5:b2:2b:33:ce:f9:45:19:45:c9:d0:
         64:54:ab:d1:09:9d:70:81:0e:9c:ba:a1:97:7b:06:dd:03:ab:
         59:18:ee:e1:16:3e:11:83:49:6a:8e:83:94:62:07:be:e9:5d:
         b1:00:fb:c8:a6:f5:88:5d:62:f3:87:ab:ad:a1:4c:35:ba:e6:
         cd:c0:23:da:b6:06:00:42:06:44:06:c6:76:d4:2e:88:63:87:
         78:4d:7b:ff:37:ff:0d:6d:24:c8:ca:a6:5e:aa:6c:ae:e9:60:
         c8:11:f8:7c:00:af:eb:a0:24:cb:ac:41:71:32:76:01:9a:df:
         7b:62:33:9c:81:cf:c6:db:f5:a0:86:ff:d2:0b:f3:36:ef:f3:
         24:14:80:74:54:67:21:6c:0d:3b:6d:3d:15:b2:91:03:be:d9:
         6c:1e:47:b6:18:98:d2:b5:7c:c4:4c:85:b5:57:eb:61:2f:c3:
         e3:bd:59:07:57:a0:7e:00:36:46:9b:4e:64:cb:62:e8:0b:32:
         cf:28:48:ff:17:54:25:b4:6d:79:af:3c:23:69:82:ac:15:76:
         60:85:4e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:16:25 2026 by rpki-client