
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/034DA06A17798D09AD979CFE10AFF121B88F7CC9.cer
File: 034DA06A17798D09AD979CFE10AFF121B88F7CC9.cer (raw, json)
Hash identifier: 3kIFAdKwthkHMlydJU5Jii//U6v13WtSiA2S+Sb9mOo=
Subject key identifier: 03:4D:A0:6A:17:79:8D:09:AD:97:9C:FE:10:AF:F1:21:B8:8F:7C:C9
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 4CEC5D52A6EC466FFFC681462F75936208151D95
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/5DAAC04569162230900711C5498CB3781A39B941A0334B0C3618715AB2F58FD8/0/034DA06A17798D09AD979CFE10AFF121B88F7CC9.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/5DAAC04569162230900711C5498CB3781A39B941A0334B0C3618715AB2F58FD8/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 31 Mar 2026 13:35:01 +0000
Certificate not after: Tue 30 Mar 2027 13:40:01 +0000
Subordinate resources: AS: 274154
IP: 2803:e9d0::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 22 Apr 2026 04:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ec:5d:52:a6:ec:46:6f:ff:c6:81:46:2f:75:93:62:08:15:1d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Mar 31 13:35:01 2026 GMT
Not After : Mar 30 13:40:01 2027 GMT
Subject: CN=034DA06A17798D09AD979CFE10AFF121B88F7CC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:03:06:b5:97:8e:36:21:16:4d:2d:4a:40:83:
c4:b1:6c:53:25:d3:9f:75:08:50:93:9c:5b:86:f3:
b9:c3:92:0c:a2:8f:21:eb:2e:24:f1:b7:81:21:c2:
38:80:b8:c2:2b:71:3f:da:59:43:93:06:2a:5c:98:
3b:57:dd:42:b4:93:24:91:16:25:6e:97:a9:55:94:
26:b5:f9:10:5c:e8:7f:07:56:78:f8:6b:e5:9e:f9:
59:2d:b7:d5:37:37:68:14:50:67:65:6b:62:09:ec:
0e:d0:6c:ff:2d:c5:81:a3:b7:52:9e:ad:a8:69:91:
77:82:dc:bb:a2:b7:48:39:ce:9c:fd:3e:3e:4e:97:
c0:22:0c:62:57:35:06:d2:47:fc:8a:1b:30:31:64:
f5:2f:07:ed:ac:96:20:ff:3e:86:53:36:9e:c7:a1:
dc:c3:99:0a:1f:4e:d8:e8:23:82:b2:4e:b4:22:16:
7b:73:a7:ae:63:18:79:a7:ac:82:16:5f:a7:e2:e4:
ca:1d:ab:81:23:12:40:eb:01:86:c4:cd:e8:5c:5c:
dd:97:5e:d3:c6:ba:bb:79:6b:54:92:3a:cd:cb:46:
06:37:19:2f:61:5a:6c:f5:f8:c2:a1:4f:6c:7c:18:
c4:94:01:a9:a1:0b:8e:b4:3d:af:7d:c2:96:ca:f9:
92:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
03:4D:A0:6A:17:79:8D:09:AD:97:9C:FE:10:AF:F1:21:B8:8F:7C:C9
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5DAAC04569162230900711C5498CB3781A39B941A0334B0C3618715AB2F58FD8/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5DAAC04569162230900711C5498CB3781A39B941A0334B0C3618715AB2F58FD8/0/034DA06A17798D09AD979CFE10AFF121B88F7CC9.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:e9d0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
274154
Signature Algorithm: sha256WithRSAEncryption
3c:a4:a2:58:59:b1:69:93:0b:bb:48:53:ae:81:04:94:05:03:
a2:0e:b1:0e:d5:32:66:aa:9e:e1:7f:f6:ac:2c:86:f7:6e:34:
b2:45:75:fe:b9:aa:34:c9:e4:5b:36:89:61:dc:2f:53:ce:1c:
1f:98:1e:b4:f7:d5:a4:47:89:7a:ea:7d:d4:d6:08:3f:9d:30:
cb:bd:f3:51:f5:72:87:79:d4:f6:7c:73:d3:09:27:a9:3e:fe:
3e:7c:cb:b0:e0:6a:4d:8f:57:16:6b:82:bc:8b:77:af:48:20:
87:fd:a0:33:a4:6b:5f:91:f8:44:27:27:13:13:e3:21:3c:19:
6a:aa:d9:0f:05:d5:64:eb:8a:ec:ed:71:17:b1:8f:08:0f:0e:
af:d0:17:3c:1e:8d:ef:f5:a7:24:2c:0f:0c:cc:ed:1f:35:f1:
7c:64:a6:d9:df:8d:4e:bb:9d:0b:6b:dd:8e:7f:c8:40:d1:2d:
9a:37:8c:14:5e:da:61:e4:10:76:fd:7a:fb:68:b2:9b:30:02:
35:89:c2:b2:a5:26:a3:4e:85:dc:7f:5c:22:9e:98:04:b3:53:
13:8d:e5:13:f5:ca:aa:0f:c0:33:7e:6b:2d:d6:83:e3:8d:7f:
c0:b4:e7:f7:53:ad:96:d5:cb:70:95:e4:e9:e7:89:df:32:05:
a7:e4:97:74
-----BEGIN CERTIFICATE-----
MIIGlzCCBX+gAwIBAgIUTOxdUqbsRm//xoFGL3WTYggVHZUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE
NjA1ODY3ODAeFw0yNjAzMzExMzM1MDFaFw0yNzAzMzAxMzQwMDFaMDMxMTAvBgNV
BAMTKDAzNERBMDZBMTc3OThEMDlBRDk3OUNGRTEwQUZGMTIxQjg4RjdDQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWAwa1l442IRZNLUpAg8SxbFMl
0591CFCTnFuG87nDkgyijyHrLiTxt4EhwjiAuMIrcT/aWUOTBipcmDtX3UK0kySR
FiVul6lVlCa1+RBc6H8HVnj4a+We+Vktt9U3N2gUUGdla2IJ7A7QbP8txYGjt1Ke
rahpkXeC3Luit0g5zpz9Pj5Ol8AiDGJXNQbSR/yKGzAxZPUvB+2sliD/PoZTNp7H
odzDmQofTtjoI4KyTrQiFntzp65jGHmnrIIWX6fi5Modq4EjEkDrAYbEzehcXN2X
XtPGurt5a1SSOs3LRgY3GS9hWmz1+MKhT2x8GMSUAamhC460Pa99wpbK+ZKjAgMB
AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQDTaBqF3mNCa2X
nP4Qr/EhuI98yTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy
NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNURBQUMwNDU2OTE2MjIzMDkwMDcxMUM1
NDk4Q0IzNzgxQTM5Qjk0MUEwMzM0QjBDMzYxODcxNUFCMkY1OEZEOC8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy81REFBQzA0NTY5MTYyMjMwOTAwNzExQzU0OThDQjM3ODFBMzlCOTQxQTAz
MzRCMEMzNjE4NzE1QUIyRjU4RkQ4LzAvMDM0REEwNkExNzc5OEQwOUFEOTc5Q0ZF
MTBBRkYxMjFCODhGN0NDOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPp0DAaBggr
BgEFBQcBCAEB/wQLMAmgBzAFAgMELuowDQYJKoZIhvcNAQELBQADggEBADykolhZ
sWmTC7tIU66BBJQFA6IOsQ7VMmaqnuF/9qwshvduNLJFdf65qjTJ5Fs2iWHcL1PO
HB+YHrT31aRHiXrqfdTWCD+dMMu981H1cod51PZ8c9MJJ6k+/j58y7Dgak2PVxZr
gryLd69IIIf9oDOka1+R+EQnJxMT4yE8GWqq2Q8F1WTriuztcRexjwgPDq/QFzwe
je/1pyQsDwzM7R818XxkptnfjU67nQtr3Y5/yEDRLZo3jBRe2mHkEHb9evtospsw
AjWJwrKlJqNOhdx/XCKemASzUxON5RP1yqoPwDN+ay3Wg+ONf8C05/dTrZbVy3CV
5Onnid8yBafkl3Q=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:56:12 2026 by rpki-client