
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95E37AF69A83C08434029C69C204722B775FB22D.cer
File: 95E37AF69A83C08434029C69C204722B775FB22D.cer (raw, json)
Hash identifier: 6r6kyfkbBWsXA8iUmIgN/K6DVjlAvQ9obj2RrymKqNg=
Subject key identifier: 95:E3:7A:F6:9A:83:C0:84:34:02:9C:69:C2:04:72:2B:77:5F:B2:2D
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 377A1E5FBAD322F84283405092FC43DE011524E4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/BD7B73EF4B7AB13D25A80BAEC2E69CDDB4BF36966F5508AB605E07739A202D43/0/95E37AF69A83C08434029C69C204722B775FB22D.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/BD7B73EF4B7AB13D25A80BAEC2E69CDDB4BF36966F5508AB605E07739A202D43/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 14:44:20 +0000
Certificate not after: Wed 27 Jan 2027 14:49:20 +0000
Subordinate resources: AS: 273232
IP: 2803:3e50::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 20 Feb 2026 11:59:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:7a:1e:5f:ba:d3:22:f8:42:83:40:50:92:fc:43:de:01:15:24:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 14:44:20 2026 GMT
Not After : Jan 27 14:49:20 2027 GMT
Subject: CN=95E37AF69A83C08434029C69C204722B775FB22D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:aa:20:2d:3a:15:ab:88:d9:f0:25:ce:a5:ff:
78:4c:49:59:2a:07:9f:02:38:a5:f0:5c:97:b7:ff:
61:7b:e7:1d:06:34:e4:a3:8f:e5:6c:88:1c:e6:25:
4e:a0:c0:59:f5:e7:ba:ba:7d:f1:77:0a:4e:fc:78:
29:25:ed:29:bf:61:bb:55:c4:66:08:bb:62:04:9b:
9d:3e:96:a2:9b:b0:10:f1:5c:4e:7c:0e:20:9a:ee:
c4:3a:97:f6:d3:95:c1:fd:fc:8d:ef:3f:04:3b:ca:
df:d3:29:13:31:f2:19:b2:3f:d1:9a:b2:21:dc:dd:
91:61:47:84:c4:0e:a6:ed:7b:db:9f:a6:84:f9:51:
b0:42:94:2f:56:4e:23:4a:ff:9b:de:45:2d:0e:ac:
0d:67:c0:b2:e0:0f:71:6f:f7:78:27:0c:ee:28:da:
31:24:e1:5f:38:a5:a0:e6:e6:3e:da:72:88:ab:64:
c0:a0:90:0c:f0:bd:c4:92:d3:c3:87:be:ca:1c:82:
79:02:df:17:06:2b:41:14:87:72:89:11:4d:fd:90:
6b:4d:2c:1a:04:20:5e:c2:38:a0:24:56:f4:91:26:
e3:24:ca:e1:aa:bd:dd:8f:40:2f:81:83:b9:37:3a:
58:4e:f9:61:fa:0f:36:74:92:2e:d3:09:b7:47:af:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
95:E3:7A:F6:9A:83:C0:84:34:02:9C:69:C2:04:72:2B:77:5F:B2:2D
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BD7B73EF4B7AB13D25A80BAEC2E69CDDB4BF36966F5508AB605E07739A202D43/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BD7B73EF4B7AB13D25A80BAEC2E69CDDB4BF36966F5508AB605E07739A202D43/0/95E37AF69A83C08434029C69C204722B775FB22D.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:3e50::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273232
Signature Algorithm: sha256WithRSAEncryption
44:11:f9:c1:ac:85:cb:0a:64:c6:7f:9e:67:d9:fd:6a:99:86:
55:d5:e6:c6:fa:5c:6a:95:0d:bf:c1:b3:e7:20:65:61:29:df:
cb:52:9f:db:8e:74:3d:57:ef:24:38:16:58:33:23:4f:ce:ba:
8a:25:6f:c4:b9:75:aa:bd:3d:48:59:16:c1:ba:db:0a:d3:fd:
7b:7a:9c:d3:66:87:5c:94:4d:b9:d6:16:f1:f6:3b:33:5c:b7:
aa:e5:58:24:ce:4b:c2:39:e9:0d:10:0d:b3:19:f5:b9:63:d0:
ef:88:89:d5:95:e4:48:00:dd:db:6a:11:4d:90:c0:87:b9:80:
34:1a:1d:1d:7f:6d:ba:cd:c5:3b:36:89:22:1a:19:b9:a1:45:
75:d3:f8:c3:d0:e3:c6:7b:16:88:6c:0a:07:01:63:d0:9a:a7:
80:56:6a:5c:ff:4b:44:76:95:71:a4:04:83:75:78:69:10:8e:
56:4d:f2:f4:11:f2:64:34:09:a5:64:16:1b:a0:3e:c5:d7:3e:
3f:f0:48:58:6e:fd:43:95:ce:b3:cd:09:df:0e:8e:0a:52:ef:
75:f3:9c:51:86:b3:07:e3:10:5d:da:82:28:a6:db:3a:e2:3e:
c2:3e:9f:85:38:7f:bb:35:6c:05:03:48:8c:e7:04:da:9c:92:
0d:e6:9d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 10:54:39 2026 by rpki-client