Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/58ACAB42341C160A5A43D86C667DCC02CD1E3C2C.cer
File:                     58ACAB42341C160A5A43D86C667DCC02CD1E3C2C.cer (raw, json)
Hash identifier:          UU/izk3VDZ4OOMfc65N+Sm58D67yGhVyDiezSVsu73c=
Subject key identifier:   58:AC:AB:42:34:1C:16:0A:5A:43:D8:6C:66:7D:CC:02:CD:1E:3C:2C
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       433860521EA72C2E5936A44E1AC122966893F1AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/531CE890DD1875BA44BE25787D2CE56085139C2E4EDB95C40CD57F96314DD8EA/0/58ACAB42341C160A5A43D86C667DCC02CD1E3C2C.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/531CE890DD1875BA44BE25787D2CE56085139C2E4EDB95C40CD57F96314DD8EA/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 27 Jul 2026 13:55:01 +0000
Certificate not after:    Mon 26 Jul 2027 14:00:01 +0000
Subordinate resources:    IP: 200.0.144.0/23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Aug 2026 06:05:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:38:60:52:1e:a7:2c:2e:59:36:a4:4e:1a:c1:22:96:68:93:f1:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jul 27 13:55:01 2026 GMT
            Not After : Jul 26 14:00:01 2027 GMT
        Subject: CN=58ACAB42341C160A5A43D86C667DCC02CD1E3C2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:45:63:bb:20:31:bb:d3:f8:ff:af:89:ae:96:
                    6c:93:c6:ee:12:52:f3:d3:47:e4:a2:64:0f:34:01:
                    60:65:3a:5d:26:96:3f:2b:9a:57:dc:99:b3:91:2a:
                    a0:21:68:e6:f9:f1:53:b1:89:8a:ba:70:11:a8:19:
                    64:f9:40:74:e5:ee:fa:b8:ab:71:ad:ae:26:10:f8:
                    cf:fb:0f:fd:4c:15:db:54:ba:ab:ee:e4:97:2b:ae:
                    a9:fc:e6:a5:b7:ed:37:f3:08:03:cd:47:65:46:bf:
                    b2:31:a5:9d:89:23:3e:ad:58:31:17:b5:e8:5e:ab:
                    aa:ca:60:63:30:a8:d8:84:d7:c3:2d:7b:f6:81:d6:
                    86:1e:12:37:fd:d6:ea:49:9f:19:5f:e6:71:59:9a:
                    64:94:a4:f2:c3:f8:4d:e8:84:3b:ab:8b:d8:d6:3a:
                    4a:d5:72:5a:60:13:f3:82:39:7f:41:ba:63:96:0c:
                    42:49:6b:80:03:d9:03:3c:b8:da:73:a5:a7:ce:fa:
                    15:43:6c:d6:e2:e0:d0:7a:6c:ac:dd:98:cc:dc:8c:
                    9d:de:f7:3c:c0:a5:0d:87:7b:19:73:49:f0:f5:89:
                    c4:b0:47:7c:e2:10:a2:88:9d:b1:ef:74:fb:43:68:
                    83:df:e7:e5:c2:28:96:75:54:d9:4f:16:0a:f6:2d:
                    e4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                58:AC:AB:42:34:1C:16:0A:5A:43:D8:6C:66:7D:CC:02:CD:1E:3C:2C
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/531CE890DD1875BA44BE25787D2CE56085139C2E4EDB95C40CD57F96314DD8EA/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/531CE890DD1875BA44BE25787D2CE56085139C2E4EDB95C40CD57F96314DD8EA/0/58ACAB42341C160A5A43D86C667DCC02CD1E3C2C.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:63:17:51:6d:f5:26:ed:dd:c9:e8:ed:f6:e0:f0:d0:2b:6c:
         35:6b:c1:6c:d6:6d:6b:d2:0b:af:c5:51:cd:40:c7:48:4a:67:
         ad:19:97:9b:1c:df:12:41:08:1f:df:d5:68:4a:72:4a:a2:45:
         b1:4b:ac:5c:91:e7:62:39:d6:83:59:2d:aa:11:6a:44:e9:a3:
         65:a4:5f:f2:07:02:04:36:0e:bd:20:41:e1:65:66:f3:87:7f:
         c5:1f:f9:71:95:5f:31:9d:52:84:02:46:bf:6e:ee:25:e0:d6:
         b0:ae:55:45:ed:f5:2f:60:b4:ff:7f:96:5e:5d:9a:64:c8:27:
         7b:1c:52:d1:78:e7:1f:be:7f:eb:a3:b8:cb:e1:3a:16:88:bd:
         c4:97:80:88:d7:d3:02:7c:f5:e7:c4:62:74:9d:ab:bc:18:75:
         1d:76:76:13:dc:d7:8a:3a:bc:59:ef:f1:eb:ea:84:be:5a:39:
         84:4c:aa:3b:0f:bc:e2:ff:04:67:37:10:d1:c3:43:7f:e4:71:
         bc:ef:71:bc:c9:5a:39:48:9b:38:a3:52:33:90:e0:8c:04:c3:
         4c:80:3f:64:8d:15:95:60:dc:57:76:76:ae:2b:4d:2e:81:80:
         e7:3f:a3:84:90:bc:66:21:7e:dd:14:f2:8a:7b:7e:8d:f4:59:
         46:b3:15:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:59:03 2026 by rpki-client