
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46254632F56662E9A39D8158FD30A4ACCA2C51F7.cer
File: 46254632F56662E9A39D8158FD30A4ACCA2C51F7.cer (raw, json)
Hash identifier: XVodoPJh+I03Hn6ewzuVvANTDj/cad2izW2QKj73JUI=
Subject key identifier: 46:25:46:32:F5:66:62:E9:A3:9D:81:58:FD:30:A4:AC:CA:2C:51:F7
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 5C3365F7DFF829833441496C57DE450BE541F8E2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/7E3F6AEFF4104C98E277FD1E6FE1C244A895CD7F73AAFA8CD697A7F043A5E0A5/0/46254632F56662E9A39D8158FD30A4ACCA2C51F7.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/7E3F6AEFF4104C98E277FD1E6FE1C244A895CD7F73AAFA8CD697A7F043A5E0A5/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Fri 31 Oct 2025 05:15:01 +0000
Certificate not after: Fri 30 Oct 2026 05:20:01 +0000
Subordinate resources: AS: 274225
IP: 2803:1bd0::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:33:65:f7:df:f8:29:83:34:41:49:6c:57:de:45:0b:e5:41:f8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Oct 31 05:15:01 2025 GMT
Not After : Oct 30 05:20:01 2026 GMT
Subject: CN=46254632F56662E9A39D8158FD30A4ACCA2C51F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:94:3f:50:7f:ea:c7:87:ea:f0:c7:d5:d5:fd:
9c:ad:d0:56:58:56:60:14:a1:c0:c1:db:ca:e3:42:
97:26:9b:8b:bc:89:22:a5:2d:9a:48:b0:22:41:4d:
9d:d6:36:5e:45:b1:cb:48:a8:df:1f:4f:e2:ca:31:
9a:93:8e:b0:de:5e:a2:64:a9:22:ff:f5:09:7e:59:
4e:32:70:1d:a7:30:d6:70:49:00:0a:4c:f9:07:89:
ba:0a:32:0f:a4:ac:30:ab:37:91:a4:67:a7:76:41:
55:0a:86:25:8c:48:3c:e4:4e:48:f8:76:21:5c:63:
82:e4:8d:e5:75:fe:10:02:11:e2:3d:7f:b0:fb:3d:
33:be:87:c1:a3:5c:8c:7f:82:19:25:91:43:b3:f8:
f6:a8:c6:24:81:dc:48:c6:4d:fd:69:21:3c:bc:90:
83:78:b0:78:68:c6:08:15:f3:4c:f4:20:de:f7:2f:
8b:1f:c1:83:9a:25:06:ae:7d:5a:f9:10:e8:9f:59:
68:4a:b5:a2:89:65:98:f0:b5:c1:fb:2d:d8:6f:33:
f0:64:77:ef:b6:3f:12:f7:a8:06:73:30:1d:a5:43:
d6:eb:fc:84:b6:9e:d3:ba:46:a2:4c:fd:1a:a7:43:
54:63:35:3e:51:54:0c:d3:61:92:c3:c6:48:59:bd:
a9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
46:25:46:32:F5:66:62:E9:A3:9D:81:58:FD:30:A4:AC:CA:2C:51:F7
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7E3F6AEFF4104C98E277FD1E6FE1C244A895CD7F73AAFA8CD697A7F043A5E0A5/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7E3F6AEFF4104C98E277FD1E6FE1C244A895CD7F73AAFA8CD697A7F043A5E0A5/0/46254632F56662E9A39D8158FD30A4ACCA2C51F7.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:1bd0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
274225
Signature Algorithm: sha256WithRSAEncryption
21:04:d9:bd:1b:2e:57:50:be:37:43:f7:63:7a:f4:7c:c7:dd:
50:be:99:26:68:4c:ad:69:44:18:f0:41:a4:6d:3d:50:c0:22:
c3:ee:cd:6b:55:55:a8:c5:15:db:7a:5d:7f:32:17:ea:04:a3:
cf:fe:3c:ce:d2:df:49:23:3a:04:62:49:de:06:cd:a7:a9:9e:
a3:ed:94:30:05:cc:bf:ce:11:44:69:7f:e2:46:e4:a9:ee:1e:
41:d9:1b:10:ec:5f:3b:48:7e:58:80:0c:c2:bc:10:15:59:c8:
40:08:1e:6a:66:0b:ff:8b:b3:35:35:d9:3d:09:1a:fd:b4:0d:
93:1f:d0:36:7f:7c:08:df:83:1a:7b:de:0f:6a:fd:73:23:dd:
2e:30:99:bf:89:f9:e1:72:a3:a0:d2:1a:44:7d:55:89:cf:25:
ce:8d:03:15:4b:6e:ae:5f:36:b5:57:0b:fe:9a:71:f4:22:73:
d0:79:f7:e8:c9:35:4c:33:97:7d:d2:d0:d4:7a:5b:9f:38:eb:
12:57:c3:9a:1d:cb:8c:91:30:86:99:18:36:00:18:83:9e:cf:
f7:5f:47:17:18:01:b0:13:8c:ce:27:7f:9b:d6:b0:2b:a4:46:
35:ea:86:d7:c8:c5:d1:d0:b9:a8:5c:38:91:ab:f0:06:a9:1b:
1b:b2:20:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:57:57 2025 by rpki-client