
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0624E244FD8AC04C703F2D8B56CFCFA0C47004C9.cer
File: 0624E244FD8AC04C703F2D8B56CFCFA0C47004C9.cer (raw, json)
Hash identifier: Xwwb6fEDeZz7vcYAiOpfHmq9m02Bywsf2XNgUp4EFbg=
Subject key identifier: 06:24:E2:44:FD:8A:C0:4C:70:3F:2D:8B:56:CF:CF:A0:C4:70:04:C9
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 66656D03C67EE1397B63A26A8492A1A88168A65C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/4C08BDB63BFFA2902053E04DFAA10D8AFA7BA51B74A4562A7565C1C1967D9085/0/0624E244FD8AC04C703F2D8B56CFCFA0C47004C9.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/4C08BDB63BFFA2902053E04DFAA10D8AFA7BA51B74A4562A7565C1C1967D9085/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Thu 03 Sep 2026 03:40:03 +0000
Certificate not after: Thu 02 Sep 2027 03:45:03 +0000
Subordinate resources: AS: 274093
IP: 2803:6b30::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 22 Sep 2026 08:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:65:6d:03:c6:7e:e1:39:7b:63:a2:6a:84:92:a1:a8:81:68:a6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Sep 3 03:40:03 2026 GMT
Not After : Sep 2 03:45:03 2027 GMT
Subject: CN=0624E244FD8AC04C703F2D8B56CFCFA0C47004C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:e0:91:34:50:ad:43:95:3a:bc:0b:ba:c2:
e6:2f:a9:f6:99:15:d9:91:d2:d8:f4:01:dc:ca:0c:
d9:cc:d9:46:f0:ac:b9:8f:3a:14:f8:69:a5:25:b1:
5b:e0:00:5e:91:80:c2:21:e6:db:fb:2c:fa:52:84:
ff:21:6c:cf:7e:b5:28:ca:ac:a8:2b:79:9c:ce:07:
83:03:2b:b7:d3:d5:a9:36:a2:8b:a5:c5:f8:47:e9:
39:11:08:1b:1b:3f:d9:ef:eb:c8:42:fe:dc:18:98:
1e:6c:af:58:ff:c0:14:54:ff:e0:5e:f3:bb:8e:e9:
71:c7:d0:91:80:e6:80:f6:c3:75:fb:0c:12:c7:9a:
4e:40:fe:95:d9:67:81:14:c6:bc:db:02:95:7d:0a:
54:c9:d1:df:49:d6:ba:d4:1b:b5:e8:c8:a5:d5:c9:
ab:6e:85:63:0a:4f:39:b8:75:06:5e:f3:55:cc:0b:
74:fc:bc:03:c3:b4:61:cf:6a:bf:d3:d4:29:41:c9:
0c:04:39:97:5f:80:ce:2d:e7:a7:91:eb:5e:5f:02:
bd:be:20:01:6c:9d:94:b3:41:b3:7e:03:7d:7a:26:
21:41:9b:dd:68:6f:ba:c2:d2:d8:a4:83:cf:8c:bb:
a0:c5:0c:d1:f9:91:b9:23:8f:d2:91:fc:c8:51:80:
c7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
06:24:E2:44:FD:8A:C0:4C:70:3F:2D:8B:56:CF:CF:A0:C4:70:04:C9
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4C08BDB63BFFA2902053E04DFAA10D8AFA7BA51B74A4562A7565C1C1967D9085/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4C08BDB63BFFA2902053E04DFAA10D8AFA7BA51B74A4562A7565C1C1967D9085/0/0624E244FD8AC04C703F2D8B56CFCFA0C47004C9.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:6b30::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
274093
Signature Algorithm: sha256WithRSAEncryption
6b:06:16:21:e2:ab:78:1c:7a:86:35:7f:5a:70:af:8d:52:1f:
8b:df:a3:03:4d:45:92:a6:eb:5d:e4:3b:be:71:52:a6:4b:df:
40:1c:13:1e:9c:7a:ed:ee:de:4f:33:fe:f4:d4:e5:75:16:6a:
70:6c:c0:8e:54:3c:7f:1a:27:3d:52:66:70:a4:64:d2:0b:d7:
fa:82:32:d2:bc:a2:96:82:cd:b8:c0:ec:98:9b:0d:c6:7f:e3:
dc:22:d4:9f:5e:f7:43:4d:79:c7:51:a6:a8:a5:fc:73:c1:46:
b9:72:44:d1:c3:72:0a:9d:61:84:fb:c6:d4:d0:21:03:59:55:
f2:75:7b:76:2e:a3:af:89:c4:90:06:ff:b2:c0:4f:b8:00:dd:
60:3a:8c:1e:b9:fa:a1:d4:d6:1a:8a:04:3c:65:1e:7b:45:d2:
74:c3:5b:c3:00:e4:42:34:b9:f0:a2:4b:4b:36:3d:d7:0c:29:
78:53:c1:2c:1a:21:19:80:d6:55:90:7f:c2:21:60:c1:ae:61:
ef:37:3e:64:9f:df:2b:37:3d:51:37:2d:44:de:c8:67:6b:7f:
e3:22:3a:57:ee:ba:ce:18:74:67:e1:83:df:8a:3b:6b:b9:e5:
b9:89:4c:19:38:5c:2c:bc:1d:4d:bb:38:0f:5b:4d:7c:4f:c1:
9b:8c:23:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:04:38 2026 by rpki-client