Certificate

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
File:                     5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer (raw, json)
Hash identifier:          MmVBy/iGiRNOT0hm4Y8zMjwY++WHmm32My//WJkJ4uo=
Subject key identifier:   5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       0A129123912FD0CD62D7E2EFA299FCA40D679C18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 24 Aug 2026 13:05:10 +0000
Certificate not after:    Mon 23 Aug 2027 13:10:10 +0000
Subordinate resources:    AS: 52471
                          IP: 2.152.6.0/23
                          IP: 2.152.32.0/24
                          IP: 2.152.58.0 -- 2.152.63.255
                          IP: 5.183.80.0/22
                          IP: 103.7.135.0/24
                          IP: 103.8.92.0/22
                          IP: 103.71.62.0/23
                          IP: 103.207.44.0/22
                          IP: 138.99.236.0/22
                          IP: 168.205.170.0/23
                          IP: 168.228.232.0/22
                          IP: 170.244.40.0/22
                          IP: 179.51.64.0/20
                          IP: 186.148.88.0/21
                          IP: 191.97.104.0/22
                          IP: 201.49.186.0/23
                          IP: 2803:ab00::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:12:91:23:91:2f:d0:cd:62:d7:e2:ef:a2:99:fc:a4:0d:67:9c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Aug 24 13:05:10 2026 GMT
            Not After : Aug 23 13:10:10 2027 GMT
        Subject: CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b1:2d:6f:b2:71:36:7a:61:16:92:ff:b0:e0:
                    84:1e:f0:f5:f9:a1:f1:2f:9c:a0:6b:6a:c4:2c:00:
                    64:77:eb:24:10:01:d8:43:7d:d2:2f:43:a2:e4:a4:
                    db:a1:7e:3d:88:9b:d5:a5:2e:1f:db:62:30:15:24:
                    c4:55:78:ca:0b:b6:ee:06:64:55:d8:67:6a:f3:c0:
                    cf:4b:11:90:9e:3c:bf:b2:ce:43:ba:7b:92:ad:33:
                    41:24:7a:f1:fa:31:98:8c:50:82:25:7d:5e:bb:8d:
                    b7:76:a4:9a:df:10:fc:09:17:fc:9b:cd:8d:f7:e8:
                    7c:78:05:a7:e8:97:da:59:a2:0a:7f:9a:d4:86:37:
                    a5:b4:cd:e3:7b:63:8b:12:fb:17:9c:11:60:4f:d6:
                    41:88:bb:52:3d:91:b1:08:64:34:6b:07:8e:96:e0:
                    39:6d:94:d6:c6:97:3a:1c:3d:38:bb:6f:16:62:4f:
                    45:0f:65:c2:0b:99:56:6f:4d:c3:8a:09:2f:a3:e5:
                    da:51:a7:e6:06:52:2a:a0:a5:cc:ec:d1:8a:0c:9e:
                    a3:fb:dd:17:62:64:6c:a0:b9:17:21:cc:8e:f6:73:
                    5b:bf:7d:ab:3e:3f:01:c3:88:01:e5:9f:29:b1:6f:
                    f5:0e:72:db:22:32:cc:6b:34:d2:c2:1f:fd:49:09:
                    5f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.152.6.0/23
                  2.152.32.0/24
                  2.152.58.0-2.152.63.255
                  5.183.80.0/22
                  103.7.135.0/24
                  103.8.92.0/22
                  103.71.62.0/23
                  103.207.44.0/22
                  138.99.236.0/22
                  168.205.170.0/23
                  168.228.232.0/22
                  170.244.40.0/22
                  179.51.64.0/20
                  186.148.88.0/21
                  191.97.104.0/22
                  201.49.186.0/23
                IPv6:
                  2803:ab00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52471

    Signature Algorithm: sha256WithRSAEncryption
         4f:bd:f5:08:92:a6:c3:d0:75:0b:58:30:b5:eb:84:f9:c6:4c:
         8a:1c:86:97:d7:08:5d:91:f9:56:4f:f8:b4:61:bb:5d:00:64:
         81:c7:52:6d:2e:98:d8:2f:61:61:5a:7f:92:ca:fe:de:91:1f:
         57:43:a4:3b:15:8d:6f:92:b7:bd:cd:82:f0:85:4f:46:4c:b3:
         d9:67:88:7f:79:3d:ce:49:31:7e:94:33:7c:1d:f5:07:e0:c9:
         a7:dc:50:55:d6:14:99:4c:16:90:e6:38:46:61:e5:eb:ce:c5:
         77:93:f8:11:c1:96:24:37:08:9e:b4:e5:3c:45:a9:90:3d:4d:
         03:22:7a:08:77:bf:7a:5c:53:d8:75:09:3c:05:8b:31:f3:e5:
         06:e8:fa:80:85:e8:aa:a9:ed:36:e5:64:4a:a7:10:b0:55:f6:
         fc:70:1d:90:ce:2d:fa:3b:e4:14:7c:a5:35:19:06:74:97:52:
         7b:36:8f:a1:7e:98:f2:05:e3:46:a9:52:66:10:00:40:f7:e6:
         63:45:05:66:a3:fc:3f:6f:79:ea:a9:5e:0a:72:94:3a:6f:1a:
         10:8a:b2:5e:cc:4b:fe:09:6a:86:27:c2:31:33:3f:8f:88:8e:
         5c:c7:6d:40:1c:a9:ac:17:5a:17:a0:e0:03:fd:ef:54:cc:2f:
         05:9e:86:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:29:57 2026 by rpki-client