
$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.cer
File: CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.cer (raw, json)
Hash identifier: 30sD0m72YfeF6yCaLARna8Fp7BYM9mOEdkrAwXOAtnQ=
Subject key identifier: CD:3D:D9:73:68:EF:31:55:FD:11:7C:D3:03:8D:E9:0C:AB:31:E1:F6
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 57F4C0DD60D235AC9D0CA0F823930E8A0F06F4C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 01 Sep 2026 18:15:00 +0000
Certificate not after: Tue 31 Aug 2027 18:20:00 +0000
Subordinate resources: IP: 45.230.124.0/22
IP: 2806:2f7::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 15 Sep 2026 10:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:f4:c0:dd:60:d2:35:ac:9d:0c:a0:f8:23:93:0e:8a:0f:06:f4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Sep 1 18:15:00 2026 GMT
Not After : Aug 31 18:20:00 2027 GMT
Subject: CN=CD3DD97368EF3155FD117CD3038DE90CAB31E1F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6d:a9:14:5f:9d:c3:be:1d:29:ae:a3:38:32:
1c:61:d2:4e:08:3b:78:f8:e7:7d:0f:85:ff:6f:fc:
eb:93:ed:5b:4e:5b:35:de:ef:d3:f5:4f:ac:99:46:
85:09:a0:ab:28:3a:4c:ae:1f:a6:01:3d:07:2c:e9:
48:5b:79:a3:06:da:c2:3a:47:0d:22:36:a3:b0:04:
45:c0:01:75:89:76:22:38:d7:bf:3b:8d:3a:46:41:
4f:1e:d7:78:84:37:ed:8c:bb:a3:29:23:3e:74:1e:
cc:c9:ae:d7:7f:c0:3d:ef:3d:7f:a1:80:32:a5:47:
14:0d:75:f5:98:55:7b:5e:3b:bf:45:ce:5d:a3:72:
24:5f:d8:89:d5:2e:2e:95:15:38:9e:34:aa:b5:b3:
f5:e4:cd:7f:ff:f0:94:3c:89:f5:7d:e9:68:86:0a:
54:7c:4c:30:35:39:ec:6c:8e:c7:0d:c5:97:dd:3a:
2d:9b:89:6b:c6:15:a8:f4:3e:6e:1a:b8:0b:4b:c7:
28:55:83:f2:3f:8c:ef:23:d3:84:1f:a3:41:82:b0:
4d:34:99:26:cf:1c:e5:48:a1:06:33:b3:b8:aa:97:
fd:72:d3:b4:fc:73:2c:8a:b9:69:d0:21:2f:54:f8:
10:c0:d7:d7:b6:8a:7b:d4:42:d0:0c:38:c1:cb:b5:
80:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CD:3D:D9:73:68:EF:31:55:FD:11:7C:D3:03:8D:E9:0C:AB:31:E1:F6
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2E99B92472C9DBEDF93B6DD90CEB4EB43528039C0F8BA9AE40E78030888FBF67/0/CD3DD97368EF3155FD117CD3038DE90CAB31E1F6.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.124.0/22
IPv6:
2806:2f7::/32
Signature Algorithm: sha256WithRSAEncryption
65:4b:04:b0:0e:b5:1a:c5:53:cd:60:86:1f:9e:62:a5:0a:ea:
b1:ac:cc:18:d0:f6:0f:3f:8c:8b:38:77:10:b3:3d:70:b0:b2:
b3:39:aa:5d:12:94:e9:32:89:92:ec:10:2c:42:89:a6:c4:69:
ba:51:f0:1f:09:f1:14:3c:5e:d0:d3:be:09:7f:49:24:45:63:
b2:9f:6f:45:87:48:0b:ed:f8:4e:5b:3b:c9:06:e9:c8:94:c0:
1d:f2:1f:4e:50:58:9c:7a:63:c2:d7:06:4a:f1:b0:1a:3c:4e:
4b:ff:78:2a:09:2e:7c:0e:37:de:eb:12:92:6f:af:b2:8e:0c:
20:8b:61:74:02:d6:70:06:6f:ec:f0:93:27:c2:87:de:bb:59:
b2:ec:37:e1:7d:58:d1:41:4e:fe:7e:ed:f9:24:39:df:b5:f3:
f4:cb:6d:ba:4d:74:84:6d:e5:49:95:65:66:65:a0:e9:29:33:
de:60:19:8d:ac:b8:71:bd:02:44:66:6a:ab:86:af:a4:fd:34:
67:8a:64:de:86:b1:ec:62:26:d1:c9:7d:90:20:aa:09:f2:ef:
77:2c:a4:ca:a6:a0:14:4a:de:27:ec:89:8e:2b:14:3b:d1:c4:
da:9a:cc:f7:c6:5c:fe:bf:96:bc:7f:14:24:f6:f6:97:96:ba:
28:d2:7b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:05:57 2026 by rpki-client