
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94CC4D51C9A67497406010FEC3E6B76316A62D52.cer
File: 94CC4D51C9A67497406010FEC3E6B76316A62D52.cer (raw, json)
Hash identifier: jHEv83dJ9pcTzLbfNHVUUUzhNujIIBcciXKI0dhiv/Q=
Subject key identifier: 94:CC:4D:51:C9:A6:74:97:40:60:10:FE:C3:E6:B7:63:16:A6:2D:52
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 08DAB5A64C63C3624F111AAB6BA0AE82D6368D2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/E32009B6DA3BA40E0FCBAEEF9EF4AC50A1396CDB094D50FCFE00A66A41F34D70/0/94CC4D51C9A67497406010FEC3E6B76316A62D52.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/E32009B6DA3BA40E0FCBAEEF9EF4AC50A1396CDB094D50FCFE00A66A41F34D70/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 05 Feb 2025 14:10:19 +0000
Certificate not after: Wed 04 Feb 2026 14:15:19 +0000
Subordinate resources: AS: 265743
IP: 128.201.116.0/22
IP: 2803:b3c0::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:da:b5:a6:4c:63:c3:62:4f:11:1a:ab:6b:a0:ae:82:d6:36:8d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Feb 5 14:10:19 2025 GMT
Not After : Feb 4 14:15:19 2026 GMT
Subject: CN=94CC4D51C9A67497406010FEC3E6B76316A62D52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d0:7e:ea:48:c7:bd:4e:b3:93:1f:19:2b:0a:
bc:d9:fa:84:d7:10:26:89:7a:25:67:08:ab:7c:4c:
14:ae:38:33:28:34:04:c1:9d:1f:3b:62:e4:e7:62:
4c:4a:83:61:3c:69:e7:59:95:e3:bd:2e:02:e5:d8:
19:00:56:df:13:e6:89:66:57:06:1c:7b:e2:da:77:
1a:6f:25:be:36:fa:3f:0f:9b:42:89:29:37:40:32:
5c:9b:f3:4f:02:62:0f:39:65:5f:86:28:3e:7b:6d:
a9:ac:bb:32:1b:62:a6:e8:a8:f2:32:5a:e0:d9:69:
ca:5b:5d:77:e4:1b:c5:30:18:a2:96:5c:4e:9f:ae:
ef:2e:e7:9f:b2:67:04:04:43:93:ad:c1:2f:fc:f3:
1e:a6:5b:cb:0a:56:2d:2a:26:f6:1f:ad:32:7e:f7:
40:09:f0:5b:d4:2e:49:34:30:df:bb:72:b4:0a:04:
15:0d:fc:4a:2f:67:5a:4d:35:e5:8f:5e:5f:d4:ab:
d9:c5:ad:4b:99:7f:d2:68:9b:1a:89:2e:15:72:17:
37:7b:f4:d6:64:81:44:54:44:00:b5:59:9e:55:77:
e9:02:6a:88:b3:99:26:5b:e7:28:45:ab:27:8b:71:
ea:22:c7:42:48:1b:10:68:a5:45:0d:c8:37:58:a7:
9a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
94:CC:4D:51:C9:A6:74:97:40:60:10:FE:C3:E6:B7:63:16:A6:2D:52
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E32009B6DA3BA40E0FCBAEEF9EF4AC50A1396CDB094D50FCFE00A66A41F34D70/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E32009B6DA3BA40E0FCBAEEF9EF4AC50A1396CDB094D50FCFE00A66A41F34D70/0/94CC4D51C9A67497406010FEC3E6B76316A62D52.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.116.0/22
IPv6:
2803:b3c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265743
Signature Algorithm: sha256WithRSAEncryption
8a:66:58:09:55:5d:11:37:f4:47:63:fe:88:91:4b:7e:45:74:
d8:6b:2f:3f:2e:1a:ac:17:0c:72:bd:9a:3a:4a:f7:96:64:8c:
4d:fb:56:87:a9:8a:c9:ba:8f:4d:6a:97:0b:57:63:fd:8c:ef:
ac:b7:1c:56:29:c5:19:99:ba:70:49:3d:84:c8:46:75:a4:e6:
55:70:b7:b8:c2:06:83:24:b4:7e:8f:fc:d0:92:14:a8:0a:c4:
a5:26:e5:8a:0e:42:7a:9a:09:26:36:5d:a6:b7:28:73:8d:2d:
ed:67:e4:61:c0:59:76:b7:6d:65:5c:04:10:4e:b0:89:37:99:
cc:90:4c:9e:8a:93:05:9d:fa:fe:0d:26:9e:ca:4c:72:ff:5c:
29:15:9f:5d:d5:b6:cd:d2:3a:fd:6f:db:fe:02:ba:37:78:eb:
59:6d:e3:d4:a6:38:89:11:d6:4f:3e:7d:38:d5:1f:79:5c:38:
8b:c1:33:4f:bf:97:b8:39:f3:5c:6b:43:5f:aa:bf:45:dd:36:
f2:c1:e7:fd:8d:4c:b2:fa:e1:97:57:86:fe:32:20:b3:ef:1e:
93:58:aa:9e:6c:40:13:37:cc:79:79:64:0d:42:21:2c:5e:36:
05:c4:b0:27:09:99:6b:48:4d:90:a4:76:8d:3a:72:c7:5f:db:
77:ab:2c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 12:15:56 2025 by rpki-client