
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.cer
File: 0127A09EA99ADE58C0CCD84F18C499C45EC12185.cer (raw, json)
Hash identifier: mFZkjfzXMQ2wkMFpek/C4Mi5aWyHRginYtceks49z9s=
Subject key identifier: 01:27:A0:9E:A9:9A:DE:58:C0:CC:D8:4F:18:C4:99:C4:5E:C1:21:85
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 30B7EA05C3417A96E466CD09210A9692FFBA5DB3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 03 Sep 2025 10:12:26 +0000
Certificate not after: Wed 02 Sep 2026 10:17:26 +0000
Subordinate resources: AS: 269946
IP: 45.189.234.0/24
IP: 74.123.48.0/22
IP: 2803:3850::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:b7:ea:05:c3:41:7a:96:e4:66:cd:09:21:0a:96:92:ff:ba:5d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Sep 3 10:12:26 2025 GMT
Not After : Sep 2 10:17:26 2026 GMT
Subject: CN=0127A09EA99ADE58C0CCD84F18C499C45EC12185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:36:35:a1:50:b0:e2:83:6e:de:8e:35:39:f4:
1f:a1:ff:7e:69:7e:9d:c5:b0:16:0a:29:e5:f0:32:
bc:42:60:53:84:ce:f7:bb:13:90:0d:a5:34:17:54:
47:54:de:80:90:dd:70:11:05:44:ad:0a:fa:47:01:
82:42:20:8c:70:3e:64:69:a2:b0:04:94:22:a4:08:
7d:5d:a7:77:dc:88:6a:6a:3d:a5:3a:60:12:c3:0d:
1a:70:e3:11:95:fc:4d:90:dc:39:fa:a7:87:e2:15:
f8:32:e8:72:c6:5c:d8:5d:9c:9a:ef:9f:9e:3f:63:
5e:bf:12:e2:5d:03:e4:19:9e:be:2a:33:62:57:a0:
d4:13:3d:02:d3:6f:c9:f7:73:a5:5a:37:5e:ee:be:
aa:48:02:40:52:df:06:b5:76:c1:3b:0b:b7:91:62:
f1:fe:22:09:f4:58:bc:db:0b:ae:67:00:57:27:7b:
bc:e7:4c:e0:93:a3:39:e8:94:1c:f8:03:ee:05:69:
d5:6b:e1:b5:11:57:ac:2e:f3:78:06:ec:0d:d5:00:
2d:15:8e:7a:79:a4:dd:c2:ab:a6:af:a6:cb:1a:9f:
e2:8d:02:91:d6:d2:ea:45:c7:3c:a5:6b:6e:80:0a:
b0:1d:da:2d:fa:00:82:a3:b5:57:7b:2d:e2:57:e7:
6a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
01:27:A0:9E:A9:9A:DE:58:C0:CC:D8:4F:18:C4:99:C4:5E:C1:21:85
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.234.0/24
74.123.48.0/22
IPv6:
2803:3850::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
269946
Signature Algorithm: sha256WithRSAEncryption
0c:30:95:b4:cd:78:60:7a:62:5e:77:a6:bc:e3:c4:c6:03:9d:
5d:fa:00:1a:d7:21:52:87:95:1e:e2:71:c1:bb:16:27:8e:72:
13:34:4f:21:0a:7a:f7:fa:ac:36:8c:08:75:b8:a4:0c:10:27:
a1:a2:5a:fc:72:54:cf:8e:dd:3c:9f:62:b0:f3:2c:eb:9e:17:
3b:39:2a:93:87:43:19:77:9c:92:ca:aa:bb:93:8b:60:c0:bc:
dc:4a:01:15:d5:f1:ff:f8:19:b6:56:26:9b:d3:49:6f:5c:76:
a1:95:08:fd:63:ee:3e:75:0d:c5:fa:19:71:6e:10:6f:c4:a3:
b3:25:3d:ca:89:c7:de:4f:f8:45:38:63:a4:39:9c:71:a9:69:
d6:db:49:c1:e4:92:67:88:18:17:40:d1:b3:4a:3a:5e:cb:c1:
3a:fa:f8:82:f6:ab:8a:a2:79:54:7c:55:f0:bc:8c:99:fd:6a:
b0:ad:01:9d:bb:c4:db:df:35:6d:95:0d:78:4b:b0:a6:ba:03:
1d:a1:7d:c4:2e:c5:2f:28:19:39:8d:aa:e5:71:f8:0e:98:99:
29:99:aa:b7:ef:bb:ac:1d:89:03:31:37:31:d8:c4:69:88:67:
9b:70:3a:3e:51:5d:b3:cb:2a:43:ae:69:de:dc:72:6e:01:e8:
98:23:7c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:26:10 2025 by rpki-client