
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5D7026E874D177C427C77F8F8DC63B896F33387.cer
File: C5D7026E874D177C427C77F8F8DC63B896F33387.cer (raw, json)
Hash identifier: t3K6ZMeA8DsVaz5KjbXqVblazIX+Ss+IeNGL6l2vVrQ=
Subject key identifier: C5:D7:02:6E:87:4D:17:7C:42:7C:77:F8:F8:DC:63:B8:96:F3:33:87
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 086C061D936A74962F9DA2623DE167F27053CA43
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/969C6F184828F06C86A6997075F2FF3271FD36196323B178C1517B5579126C06/0/C5D7026E874D177C427C77F8F8DC63B896F33387.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/969C6F184828F06C86A6997075F2FF3271FD36196323B178C1517B5579126C06/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 04 Aug 2026 00:20:00 +0000
Certificate not after: Tue 03 Aug 2027 00:25:00 +0000
Subordinate resources: AS: 274422
IP: 2001:1272::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 22 Sep 2026 08:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:6c:06:1d:93:6a:74:96:2f:9d:a2:62:3d:e1:67:f2:70:53:ca:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Aug 4 00:20:00 2026 GMT
Not After : Aug 3 00:25:00 2027 GMT
Subject: CN=C5D7026E874D177C427C77F8F8DC63B896F33387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b2:4e:92:a0:08:d2:8c:a3:69:5b:47:5d:40:
e3:db:3c:b4:7c:c6:6e:e2:47:a1:c2:b9:a4:dc:f2:
ea:12:a7:c9:56:97:70:b6:a0:52:4f:6c:be:41:aa:
9d:db:e5:a3:d6:d0:9f:de:7b:c1:cb:f0:3b:8d:0e:
b3:94:2e:64:74:b0:48:78:4f:71:cf:29:9d:72:79:
df:7b:ab:56:e8:51:e5:3d:9c:20:6d:35:69:d8:ce:
3b:bf:89:23:cf:12:e7:8d:15:6c:d4:7c:64:b7:af:
e6:a8:ae:2b:13:fb:4d:75:15:3d:cd:0c:f7:92:8d:
a0:28:bc:95:c1:7e:e9:b3:91:b4:0e:39:ec:85:e5:
f2:9c:73:5a:08:c5:1d:b4:4f:d8:5d:63:84:e5:f4:
ba:da:86:65:52:bc:37:2a:cb:9c:2c:5a:b9:88:91:
0c:1f:0f:31:e4:10:9b:2e:a9:e8:14:24:67:b1:36:
86:08:83:1e:4b:db:a1:87:d2:00:9f:df:bc:69:11:
e1:6a:16:7b:99:ef:0f:14:4e:ec:35:06:01:36:7d:
79:b5:12:3d:12:bb:1b:64:e8:f5:c6:2f:c9:79:d9:
fe:77:4f:e7:28:e8:f1:db:4d:66:94:58:ec:47:5b:
5f:90:3b:b6:0b:4c:d2:02:ea:cf:b7:c3:ea:d6:3a:
a4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C5:D7:02:6E:87:4D:17:7C:42:7C:77:F8:F8:DC:63:B8:96:F3:33:87
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/969C6F184828F06C86A6997075F2FF3271FD36196323B178C1517B5579126C06/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/969C6F184828F06C86A6997075F2FF3271FD36196323B178C1517B5579126C06/0/C5D7026E874D177C427C77F8F8DC63B896F33387.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1272::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
274422
Signature Algorithm: sha256WithRSAEncryption
31:44:b9:a6:3d:e4:29:8d:ad:48:ee:b5:3f:b8:96:ca:31:0d:
16:0a:3c:e7:59:5c:f1:f8:61:5a:81:be:a5:fd:4e:29:21:0b:
e7:90:1f:e4:c9:cc:77:3d:41:63:f8:17:fc:83:c2:9a:10:8a:
e7:26:9c:d9:53:2a:55:65:0c:1d:e1:ca:2a:e4:1b:da:c4:f1:
dd:ac:7c:52:62:31:cc:7f:ab:aa:0a:9e:fa:69:80:85:fe:1f:
7f:7c:1f:dc:eb:ed:e0:a1:78:7d:c3:37:96:7d:56:1a:bb:40:
ce:06:f9:c4:77:bc:4a:34:b2:eb:07:25:d3:d7:d0:26:41:62:
9e:fa:f6:ca:b5:79:63:2f:c0:87:30:09:23:8b:3c:b6:f4:cb:
0a:93:aa:4e:79:5c:bc:c5:de:16:f1:68:8d:b8:5d:31:db:cd:
3c:13:b6:be:c3:6f:c3:0d:60:18:9d:c8:31:c0:e6:49:6e:a3:
11:3e:c6:39:be:0d:e3:3b:c1:76:b9:05:8d:19:30:cd:67:c4:
60:69:cc:56:a8:cf:3f:45:be:d7:4e:62:93:75:33:5a:fd:0b:
4d:cd:fc:39:0b:2b:51:5a:82:39:af:76:d4:08:14:a5:a1:d0:
be:fe:51:7b:7b:63:03:41:f9:44:aa:94:bd:bd:a5:20:5b:4c:
e5:f6:26:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:53:21 2026 by rpki-client