
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.cer
File: 08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.cer (raw, json)
Hash identifier: AlU34w9LzpbVTyyr11VsfW2JoFYNrq5dyX0jwzIoGzE=
Subject key identifier: 08:52:20:00:E6:80:B6:B5:BB:AE:CA:5C:D4:D9:E5:B0:AC:EA:5B:E4
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 7BF95A251AB28DD94B953A1EBBE27EC7D160C903
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/7A25A58787EB92A021765B796FDF47BAE5C56190A4D0891C327897426FFF022D/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/7A25A58787EB92A021765B796FDF47BAE5C56190A4D0891C327897426FFF022D/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 18:09:31 +0000
Certificate not after: Wed 27 Jan 2027 18:14:31 +0000
Subordinate resources: IP: 2801:1e:e800::/48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 07 Mar 2026 04:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:f9:5a:25:1a:b2:8d:d9:4b:95:3a:1e:bb:e2:7e:c7:d1:60:c9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 18:09:31 2026 GMT
Not After : Jan 27 18:14:31 2027 GMT
Subject: CN=08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:79:82:5d:1e:64:06:2e:1b:f8:24:11:0a:
ba:82:ba:e3:1d:06:21:a2:f6:2c:2b:cd:67:eb:63:
cf:63:5f:5d:85:03:a4:11:da:03:0b:24:42:42:ab:
c1:04:5f:ce:e5:b4:b5:b4:bb:df:2e:71:33:2b:56:
9b:89:33:fd:18:06:ca:59:f5:e0:5a:4a:b4:88:f2:
7a:2a:cf:c6:71:05:7e:29:30:f6:93:e0:0c:50:81:
2a:0e:ab:32:d3:02:55:48:c5:b7:d2:3b:1b:fb:cf:
9b:a8:98:d9:b4:73:5d:5c:58:21:c4:b5:ff:ca:e4:
96:fe:c6:c5:4f:05:64:2f:d6:2a:cd:35:bf:dc:b6:
a1:9a:d6:fc:4a:b4:21:3e:d5:6c:c7:71:bd:a1:fb:
1b:1b:b3:53:24:57:5f:27:e8:98:1c:54:5b:ca:c4:
45:c3:b0:d9:e2:c4:1e:04:e8:76:0e:16:72:8a:a3:
0d:9e:b4:c6:c1:d4:13:5c:b5:14:eb:0d:6b:dc:1a:
4b:22:be:de:41:f4:78:47:e4:0c:2b:20:a6:52:85:
bc:46:14:54:20:30:f4:a9:d6:58:eb:47:fa:ca:77:
5b:ef:c7:af:9c:d4:ca:9a:0c:0e:fe:c9:73:f1:4d:
7a:dc:89:48:91:cf:4b:f9:93:55:94:b1:8e:61:00:
1c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
08:52:20:00:E6:80:B6:B5:BB:AE:CA:5C:D4:D9:E5:B0:AC:EA:5B:E4
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7A25A58787EB92A021765B796FDF47BAE5C56190A4D0891C327897426FFF022D/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7A25A58787EB92A021765B796FDF47BAE5C56190A4D0891C327897426FFF022D/0/08522000E680B6B5BBAECA5CD4D9E5B0ACEA5BE4.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1e:e800::/48
Signature Algorithm: sha256WithRSAEncryption
5f:d7:fe:8e:70:90:0f:86:ae:4a:7a:87:1f:e8:93:0e:a9:b4:
46:22:a9:20:5a:92:6c:b2:9c:8a:34:46:b4:06:5d:11:ad:a9:
2b:42:4a:c7:eb:d4:16:5c:90:c3:b6:b6:45:2e:0a:5a:50:48:
bf:5e:a2:14:30:a3:62:1f:55:50:2c:2e:a9:0d:d1:87:0c:3c:
a0:4c:32:7a:3f:0d:13:dd:92:a8:29:07:ed:34:ab:6b:84:54:
0b:97:24:80:8c:37:bc:10:21:2e:0c:3e:73:d9:13:bd:d4:94:
2d:93:64:e9:d9:e7:58:63:cc:4e:87:1e:86:b1:4b:b0:d8:25:
d1:26:c7:cf:e6:8f:cc:ed:6b:94:c5:48:b2:c5:1e:2a:16:26:
5f:43:56:a1:65:22:26:d7:58:f1:7a:30:82:bc:ca:79:1f:83:
ee:82:f1:a6:2f:d0:92:10:a0:21:ce:b9:98:b7:58:43:e9:04:
ff:b2:79:08:86:cb:2e:d5:2e:ba:90:2c:4f:35:08:39:c8:29:
38:33:b3:f2:a5:66:f2:fa:e1:a6:eb:37:d5:2e:e5:42:52:75:
0f:aa:c8:20:63:43:01:2a:94:a2:de:73:6d:5d:9b:ac:ff:17:
8f:ad:99:44:0a:a9:f0:9a:cc:11:41:d7:be:8a:89:d8:86:0c:
aa:e8:10:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:49:00 2026 by rpki-client