Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B85C072201D3DC921F121020F043E1B35429A6A.cer
File:                     0B85C072201D3DC921F121020F043E1B35429A6A.cer (raw, json)
Hash identifier:          pekjlkGPyeKaOVMkd9Dsdc7RGy4DsDxro6gFTRCt89E=
Subject key identifier:   0B:85:C0:72:20:1D:3D:C9:21:F1:21:02:0F:04:3E:1B:35:42:9A:6A
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       1A6BDB16A9EFA7EBFFF377B10F02F3D301813FF8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/CC095CDDA000AF2FF7A18C8269B982ECD02996D4E4A5EB0DC2A069A0FFAF7FEC/0/0B85C072201D3DC921F121020F043E1B35429A6A.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/CC095CDDA000AF2FF7A18C8269B982ECD02996D4E4A5EB0DC2A069A0FFAF7FEC/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 19 Feb 2026 20:35:01 +0000
Certificate not after:    Thu 18 Feb 2027 20:40:01 +0000
Subordinate resources:    AS: 61478
                          AS: 264811
                          IP: 45.237.88.0/22
                          IP: 131.72.76.0/22
                          IP: 168.195.120.0/22
                          IP: 170.246.160.0/22
                          IP: 2803:cd80::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:6b:db:16:a9:ef:a7:eb:ff:f3:77:b1:0f:02:f3:d3:01:81:3f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Feb 19 20:35:01 2026 GMT
            Not After : Feb 18 20:40:01 2027 GMT
        Subject: CN=0B85C072201D3DC921F121020F043E1B35429A6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1f:de:a5:4a:39:97:38:88:0b:2b:95:7b:9d:
                    1b:1a:93:63:54:9f:8c:01:f3:01:61:44:16:7d:b4:
                    53:4f:6d:b9:0c:78:ea:4c:1f:8d:bf:44:3d:67:1f:
                    7a:bb:c9:7b:ae:7b:51:ae:91:e3:de:82:8d:31:08:
                    a1:0c:9c:55:12:55:af:19:98:05:cb:a3:bf:ce:85:
                    d6:1d:a6:0d:c7:a0:54:12:76:11:6b:76:6e:04:25:
                    3a:4b:38:e5:72:bf:53:d6:e3:47:6b:d0:e1:1a:83:
                    a4:f0:df:66:85:98:54:58:4e:c6:13:14:4a:0a:f9:
                    6c:38:06:3f:a2:d0:47:f3:81:02:b1:54:7b:f1:f5:
                    eb:a4:97:f3:cf:f4:d0:ed:bd:06:d3:93:78:4d:34:
                    1b:b1:8e:3c:4a:4d:2d:ef:a4:57:31:b0:d7:7c:47:
                    f2:9e:55:bf:8b:6d:51:64:4a:42:9e:9a:77:a9:96:
                    de:00:2e:20:28:b3:7d:b5:2f:80:de:de:e1:bc:5b:
                    c3:eb:7e:50:bb:ae:d3:10:1b:3f:c6:00:54:04:f5:
                    ce:43:b9:c9:78:7f:7c:ba:f9:3c:e7:d3:e7:d5:c1:
                    76:63:3e:f2:1a:a1:63:32:97:84:6b:f6:68:9e:5a:
                    32:32:41:69:f0:73:f9:66:d6:df:27:10:f7:21:5c:
                    68:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:85:C0:72:20:1D:3D:C9:21:F1:21:02:0F:04:3E:1B:35:42:9A:6A
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/CC095CDDA000AF2FF7A18C8269B982ECD02996D4E4A5EB0DC2A069A0FFAF7FEC/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/CC095CDDA000AF2FF7A18C8269B982ECD02996D4E4A5EB0DC2A069A0FFAF7FEC/0/0B85C072201D3DC921F121020F043E1B35429A6A.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.88.0/22
                  131.72.76.0/22
                  168.195.120.0/22
                  170.246.160.0/22
                IPv6:
                  2803:cd80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61478
                  264811

    Signature Algorithm: sha256WithRSAEncryption
         53:52:fc:52:60:de:9b:4f:15:6a:13:c1:9a:de:3d:6b:45:9e:
         d6:85:bd:4f:5f:5a:76:8a:6c:1f:74:ed:67:fd:10:ab:54:0c:
         e3:33:3f:27:ae:4e:a7:e6:31:98:0c:bd:1e:b8:b0:af:10:6b:
         c9:6e:43:19:04:f8:aa:b1:a2:5d:f7:fa:01:4b:d5:af:da:7c:
         20:f5:8d:d1:81:53:e4:34:d9:81:54:eb:97:da:6b:a3:5a:e6:
         d5:32:23:dd:1e:91:bc:80:ae:39:05:40:c0:ef:d9:0c:f0:a8:
         4e:8e:56:61:c3:4d:e8:e6:19:70:48:e5:49:90:f2:5b:6c:8f:
         2f:7f:b5:6e:ab:f1:f2:f4:8e:d5:ca:f6:70:b0:b1:e2:75:36:
         3c:2e:a9:f8:2c:2d:0d:50:ef:3e:e0:e0:b6:60:27:e4:58:72:
         6c:a8:04:fc:a6:bd:1b:ba:fe:68:70:3d:1b:47:90:34:d7:81:
         02:a3:9d:0c:38:e9:b3:83:38:15:70:b6:30:76:1b:0e:a9:8e:
         5e:71:62:de:bf:1b:3a:5f:38:fe:5a:39:e8:41:14:28:73:10:
         f2:17:4e:06:50:af:8c:8a:41:e3:4b:d5:35:c1:25:dc:fb:16:
         2f:92:eb:fd:ac:58:29:43:ae:1c:2d:93:96:c1:3d:66:54:c8:
         87:d5:b4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:24:16 2026 by rpki-client