
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer
File: 125A2BB1C08E302BAC233C8E1060AE7CA97F327C.cer (raw, json)
Hash identifier: G7VbRmbyHedJxeHCvLULCwf8O+DCizudXr+OLk2vWLs=
Subject key identifier: 12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 6AFB5C9704969880672B9F4974079B47F6E4D882
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Fri 24 Oct 2025 19:25:00 +0000
Certificate not after: Fri 23 Oct 2026 19:30:00 +0000
Subordinate resources: AS: 273134
IP: 2803:5450::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 29 Oct 2025 22:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:fb:5c:97:04:96:98:80:67:2b:9f:49:74:07:9b:47:f6:e4:d8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Oct 24 19:25:00 2025 GMT
Not After : Oct 23 19:30:00 2026 GMT
Subject: CN=125A2BB1C08E302BAC233C8E1060AE7CA97F327C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:50:fe:89:ac:16:06:15:fb:0b:a0:26:62:
5d:de:13:07:76:b3:7b:3c:0a:d0:f2:03:50:b5:06:
e9:5c:3e:62:81:3e:cf:18:b4:24:f5:49:b6:eb:13:
e8:e0:26:93:58:59:6f:45:cd:b5:93:10:11:da:a2:
3a:bd:9b:04:70:79:9c:c8:2d:58:0d:b1:55:a6:ca:
74:f7:00:a9:c8:68:95:24:70:a7:38:12:86:52:00:
f1:ba:a9:a4:a2:af:4a:43:35:de:01:38:f1:08:95:
5a:3a:77:a5:20:b6:01:32:63:19:ac:13:ed:58:dc:
fd:79:5e:96:5d:57:7d:c8:e7:3e:7c:26:cc:de:82:
39:e6:1a:01:73:8e:cb:82:09:0e:27:5d:8c:2a:2c:
be:dd:37:1a:51:43:f1:44:34:af:d2:34:4f:4a:a7:
1c:d1:33:af:83:77:ed:c9:22:a1:bf:c8:ef:32:05:
75:2d:ce:7a:e5:40:fb:c8:c0:94:41:f5:54:fc:0a:
8c:b3:d6:ca:d9:59:0c:d0:9b:dc:5c:31:70:8d:89:
f8:cb:a3:54:79:e0:87:e2:9c:16:e2:af:43:7d:6a:
79:fb:cc:6d:fd:d1:59:08:fc:18:9c:0f:bb:7c:69:
26:83:b8:06:72:b8:4f:75:64:f4:ec:95:91:4a:84:
09:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
12:5A:2B:B1:C0:8E:30:2B:AC:23:3C:8E:10:60:AE:7C:A9:7F:32:7C
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BE34255981C65285B462BD37CF376111843E73B0A394F64B22A97A43FC869B9D/0/125A2BB1C08E302BAC233C8E1060AE7CA97F327C.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:5450::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273134
Signature Algorithm: sha256WithRSAEncryption
85:f0:af:82:dd:c4:4d:db:1d:ea:f0:43:6c:f8:c3:24:7a:c4:
a1:50:6d:24:e4:02:ca:2d:af:80:53:b2:40:0e:37:d5:26:b9:
34:e3:5c:c3:a1:0a:07:e3:ee:f6:73:9e:a2:b3:41:54:a5:fc:
86:81:50:65:d4:73:e7:fa:66:d7:c3:7d:08:e7:81:b5:82:55:
31:94:8c:5b:a8:5c:f3:26:9d:d1:25:11:1d:c5:9e:91:c9:43:
f2:83:a7:bb:03:c6:d9:34:c4:a0:71:b2:30:3c:77:93:dd:7a:
c7:48:44:e8:38:8d:b8:44:40:4b:11:99:81:5e:af:a2:47:d7:
4b:7f:ad:bd:29:62:2a:fa:3c:f9:fb:92:cf:55:05:57:c2:ca:
87:c0:20:1b:1d:2f:40:3f:e1:6d:9f:8b:c0:66:bb:29:c3:7c:
05:d5:c9:31:65:a9:b2:b1:fe:84:e5:56:00:d8:d6:81:32:b0:
4f:16:a4:39:26:fb:39:00:7a:04:b6:4c:e2:5d:ab:46:34:2d:
fb:42:17:fd:cf:78:66:a7:eb:45:96:36:a5:1e:b7:48:5f:99:
e6:96:ce:10:b1:80:ef:31:3d:ad:07:08:5c:d6:ee:2c:8b:b9:
4d:1f:82:6f:8a:fa:17:ac:8c:0e:88:de:20:8d:05:39:1d:11:
09:a7:d3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 09:00:12 2025 by rpki-client