
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/095281E7773EF9220227BA0577F9658AA2375637.cer
File: 095281E7773EF9220227BA0577F9658AA2375637.cer (raw, json)
Hash identifier: O5BEY367aVxN9Gs2biwwXUjYUfNAPCVOK00o05GeF60=
Subject key identifier: 09:52:81:E7:77:3E:F9:22:02:27:BA:05:77:F9:65:8A:A2:37:56:37
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 18ADC16888D808E98489DA146F4C9F163EFD35AF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/902011A8E5E268773B5BB048B9BF36F2DF6E6251F69F9B6072938F685108ECB9/0/095281E7773EF9220227BA0577F9658AA2375637.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/902011A8E5E268773B5BB048B9BF36F2DF6E6251F69F9B6072938F685108ECB9/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Thu 03 Sep 2026 19:30:03 +0000
Certificate not after: Thu 02 Sep 2027 19:35:03 +0000
Subordinate resources: AS: 275021
IP: 2803:5b30::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 22 Sep 2026 08:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:ad:c1:68:88:d8:08:e9:84:89:da:14:6f:4c:9f:16:3e:fd:35:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Sep 3 19:30:03 2026 GMT
Not After : Sep 2 19:35:03 2027 GMT
Subject: CN=095281E7773EF9220227BA0577F9658AA2375637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c8:94:09:96:20:41:03:a2:f0:b1:cd:95:4b:
e7:5d:9f:05:61:22:3e:d7:aa:9a:9e:6a:da:11:07:
c2:02:23:35:6e:7b:c8:55:c2:cf:3f:c0:4d:69:82:
27:bf:50:97:96:a9:01:d3:c3:00:51:bb:37:24:30:
c1:04:b7:f6:86:e6:29:90:16:0b:6b:cd:e1:da:1d:
f5:fd:07:34:39:df:e7:fc:3d:f6:de:33:90:d9:33:
1f:38:21:1c:6c:2a:a9:d8:2e:7a:a3:92:88:3f:3f:
12:f8:1f:ef:d9:6b:d0:3f:5a:9e:5e:4d:03:cf:aa:
51:fc:ee:b9:50:19:bd:a1:0b:be:9b:6b:13:14:67:
91:de:3e:9a:10:c7:1d:e4:82:39:b4:21:2b:a1:81:
c5:43:64:c8:03:99:1a:b0:62:0a:a6:ad:2b:b4:06:
69:07:bb:5e:8e:d9:e3:37:8d:e4:b6:6b:20:ad:a5:
b2:63:35:25:b9:7a:09:7a:1e:19:59:07:8a:f2:d4:
31:be:ea:6a:0e:e9:02:db:a2:5e:2e:f0:b5:c9:da:
c4:0f:15:98:72:f1:05:47:6c:6b:2e:82:ae:6c:cb:
ce:ff:c0:1f:40:f0:7d:0b:3d:7b:8c:37:4c:52:e8:
17:2b:2b:bd:92:eb:bd:43:e8:c8:94:61:fd:be:10:
cd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
09:52:81:E7:77:3E:F9:22:02:27:BA:05:77:F9:65:8A:A2:37:56:37
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/902011A8E5E268773B5BB048B9BF36F2DF6E6251F69F9B6072938F685108ECB9/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/902011A8E5E268773B5BB048B9BF36F2DF6E6251F69F9B6072938F685108ECB9/0/095281E7773EF9220227BA0577F9658AA2375637.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:5b30::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
275021
Signature Algorithm: sha256WithRSAEncryption
5d:78:b6:c9:ca:d5:6b:1f:e3:46:1c:15:02:56:fc:6e:9e:05:
4f:bb:c0:0a:6a:5e:37:3d:7f:87:4c:4f:da:a0:c1:0f:f2:f9:
07:a9:e9:29:13:67:7a:e9:f2:92:d7:67:f0:fe:f7:41:8f:72:
d5:cf:fa:63:26:fb:1b:5b:5c:66:a1:93:5b:8c:0b:e2:0f:78:
7d:8d:67:1e:ec:ab:d0:e2:74:84:61:b9:ea:2c:5e:95:96:86:
14:bb:63:2c:ed:76:84:59:1e:6e:96:2c:07:7d:1f:a2:07:0e:
82:8f:ba:0d:7d:ed:d1:a5:94:3e:66:0f:fc:87:e4:ee:4e:19:
88:48:85:15:e9:55:4e:8d:d4:31:c6:be:bc:6a:4f:ef:22:5f:
77:32:96:c7:ef:c0:fe:b3:56:46:11:89:b7:a3:d6:ea:f3:83:
b0:2c:f7:f1:aa:44:d6:76:7b:d6:46:be:66:5d:5a:cb:04:9c:
32:9f:6c:af:14:c2:c7:26:7d:45:a0:31:1d:55:bb:c3:d1:3b:
59:c2:4d:62:2a:2e:9b:52:cf:aa:4e:fe:0c:51:52:ae:f9:92:
94:a6:fc:ca:3a:f6:96:f2:42:c1:6b:23:bb:ab:14:f7:29:59:
f0:31:91:4b:12:61:4c:56:cc:7e:f1:ba:27:5f:57:f0:ee:2b:
55:4a:72:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:54:31 2026 by rpki-client