
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53512CAE02E118CFF4C8BC1D1EC96BA266543240.cer
File: 53512CAE02E118CFF4C8BC1D1EC96BA266543240.cer (raw, json)
Hash identifier: wtXFBa7f3naKf7RsGsxpCWkm+mT9HycfHEjhufq87kM=
Subject key identifier: 53:51:2C:AE:02:E1:18:CF:F4:C8:BC:1D:1E:C9:6B:A2:66:54:32:40
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 5299A07B470BD7F9D8A9EF30CC8BB642B04D10B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/D616FE36AF1AEED00DCE18C71A885FAADEFEA7CE5F8A9FDE65A346C10FDA612D/0/53512CAE02E118CFF4C8BC1D1EC96BA266543240.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/D616FE36AF1AEED00DCE18C71A885FAADEFEA7CE5F8A9FDE65A346C10FDA612D/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Thu 20 Aug 2026 17:15:01 +0000
Certificate not after: Thu 19 Aug 2027 17:20:01 +0000
Subordinate resources: IP: 168.195.200.0/22
IP: 168.205.4.0/22
IP: 2806:281::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 27 Aug 2026 11:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:99:a0:7b:47:0b:d7:f9:d8:a9:ef:30:cc:8b:b6:42:b0:4d:10:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Aug 20 17:15:01 2026 GMT
Not After : Aug 19 17:20:01 2027 GMT
Subject: CN=53512CAE02E118CFF4C8BC1D1EC96BA266543240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a1:03:8f:67:68:cc:44:eb:44:f7:8c:60:b7:
38:d6:19:59:de:35:8c:68:6f:62:b3:f3:95:30:1d:
41:4b:a3:f6:a4:0b:70:4a:fc:d7:63:00:4d:92:be:
7c:8d:6b:02:33:a7:4d:97:65:b4:67:eb:ab:e9:7b:
da:0f:cc:ec:f7:eb:91:a8:1f:87:5f:41:07:f9:89:
0d:a3:d4:36:b6:81:f5:f1:ef:cb:49:49:ae:8a:91:
c0:9b:e9:8c:ee:86:ba:d8:5d:b9:37:7a:1e:97:ed:
16:9a:6c:44:01:05:7f:7f:be:47:2e:1e:f7:04:44:
14:6a:b0:00:77:20:6e:62:98:9f:fe:d3:9a:ad:a3:
73:de:63:3b:cd:2e:bb:09:fa:61:28:44:44:d6:52:
bc:77:e1:b2:0a:33:12:bf:b6:76:c2:76:ac:46:19:
43:af:f3:50:5f:21:f4:1d:78:43:a4:e3:5c:ab:00:
f9:a5:80:ac:f8:44:04:b4:d2:0c:91:0a:68:76:44:
94:5a:4b:90:f5:8a:1c:b3:8f:b6:50:4f:e0:6b:f4:
4b:9e:c9:db:29:6a:82:dc:0e:f0:c7:4a:2f:a7:8e:
5d:2b:bb:66:5e:28:29:ff:95:8c:a6:b8:0b:78:69:
a6:ca:46:6a:dc:53:e1:4b:20:c8:d2:1c:5b:74:1a:
c9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
53:51:2C:AE:02:E1:18:CF:F4:C8:BC:1D:1E:C9:6B:A2:66:54:32:40
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D616FE36AF1AEED00DCE18C71A885FAADEFEA7CE5F8A9FDE65A346C10FDA612D/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D616FE36AF1AEED00DCE18C71A885FAADEFEA7CE5F8A9FDE65A346C10FDA612D/0/53512CAE02E118CFF4C8BC1D1EC96BA266543240.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.200.0/22
168.205.4.0/22
IPv6:
2806:281::/32
Signature Algorithm: sha256WithRSAEncryption
25:ae:2e:01:c3:2b:b3:b6:bc:fe:47:7f:d2:40:07:6d:3c:f8:
2e:bf:86:60:6d:1f:20:42:0f:03:c1:40:b8:a0:d2:4e:e7:a1:
81:18:00:ae:75:50:2e:82:89:e7:19:17:e1:72:89:cc:05:b7:
56:c6:4d:01:e9:67:45:e6:56:fb:71:23:ac:ab:4e:21:77:92:
62:7d:8b:9a:fb:42:87:e3:66:ea:b0:8d:61:87:04:3b:8e:48:
f2:e9:e4:03:73:c1:8b:07:cb:bb:ea:88:50:c7:f5:5a:27:e3:
d2:2b:4a:78:d8:d4:6d:91:ba:e5:e6:93:76:be:6f:a9:a3:b7:
c9:68:d6:70:2d:8e:4c:90:f8:96:e9:8b:5b:42:5c:1d:7c:64:
ae:d3:3d:98:5a:04:be:8e:1b:c6:4f:e6:2d:bf:37:db:f4:37:
47:56:d8:81:2b:d0:24:9a:0a:ef:28:51:11:ea:4b:7b:da:bd:
a4:f2:0f:e0:03:d5:af:3b:9b:da:84:8f:ed:ff:29:36:0c:65:
66:f2:c2:29:30:1d:18:3c:49:a9:8e:db:07:88:33:75:0b:50:
4c:23:84:d4:7b:30:3b:f3:da:1b:e9:58:1c:12:3f:06:50:53:
8b:59:f0:0a:c3:ff:ce:0e:e4:cb:e9:62:a2:3e:54:e8:86:b1:
40:0e:22:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 12:07:04 2026 by rpki-client