Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ADC274DDF9AFCB5F3B314AD5735CFEDB11BD240.cer
File:                     6ADC274DDF9AFCB5F3B314AD5735CFEDB11BD240.cer (raw, json)
Hash identifier:          O2p8coZ4C7yIYLgjdJ2uSbWoB/vbDhKrYcoQj3off1A=
Subject key identifier:   6A:DC:27:4D:DF:9A:FC:B5:F3:B3:14:AD:57:35:CF:ED:B1:1B:D2:40
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       7E5C7F881456BAAB8E80499CA7A4A12E37085AE0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/EBA3A00BA6CDF948B85996B4967AF4DE6596D82E5DF6A51557A15B8610E007C7/0/6ADC274DDF9AFCB5F3B314AD5735CFEDB11BD240.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/EBA3A00BA6CDF948B85996B4967AF4DE6596D82E5DF6A51557A15B8610E007C7/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 02 Apr 2026 16:25:02 +0000
Certificate not after:    Thu 01 Apr 2027 16:30:02 +0000
Subordinate resources:    IP: 190.110.250.0/23
                          IP: 2803:ea30::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 12:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:5c:7f:88:14:56:ba:ab:8e:80:49:9c:a7:a4:a1:2e:37:08:5a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Apr  2 16:25:02 2026 GMT
            Not After : Apr  1 16:30:02 2027 GMT
        Subject: CN=6ADC274DDF9AFCB5F3B314AD5735CFEDB11BD240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:87:11:42:bb:7b:3c:df:7f:22:5d:b2:fd:dc:
                    1b:b7:83:b1:0b:93:bc:b9:a8:09:ed:95:00:07:cb:
                    ad:f9:fc:15:08:ec:54:19:b3:eb:5c:b6:af:32:56:
                    53:ed:12:8b:64:24:2e:86:d8:e9:a8:ae:d8:ba:5e:
                    f5:72:a2:db:34:d1:83:c3:f9:51:2b:4d:db:98:28:
                    48:85:62:7e:ab:fa:85:27:c6:6a:b1:cc:ce:52:60:
                    e7:8b:cd:bf:ec:1e:c1:5c:38:46:b8:8a:f7:51:89:
                    77:77:08:45:90:16:51:f3:26:6d:38:f3:1d:06:f4:
                    22:9b:f7:c3:f1:74:f5:63:6c:bb:b8:f6:ef:9a:1d:
                    f6:86:25:73:35:9e:1b:c5:20:9b:f7:54:d5:de:0b:
                    3c:1c:d7:58:cf:9e:b5:02:a5:46:41:d3:d8:5f:23:
                    1c:72:30:96:ba:c0:a8:0e:6e:ca:89:93:ea:58:40:
                    2b:bb:64:2a:a6:e4:a1:67:53:35:2b:1d:61:30:99:
                    d2:cf:3d:08:4b:16:71:f5:1f:f1:35:6c:dc:19:13:
                    eb:29:9f:ed:01:b3:fa:cd:5b:cf:f9:4d:f2:78:86:
                    30:c7:fa:84:ec:83:38:08:1d:40:3e:f9:27:cc:68:
                    cf:27:75:35:4d:09:69:f9:1e:36:fa:ea:9d:18:f5:
                    02:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6A:DC:27:4D:DF:9A:FC:B5:F3:B3:14:AD:57:35:CF:ED:B1:1B:D2:40
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EBA3A00BA6CDF948B85996B4967AF4DE6596D82E5DF6A51557A15B8610E007C7/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EBA3A00BA6CDF948B85996B4967AF4DE6596D82E5DF6A51557A15B8610E007C7/0/6ADC274DDF9AFCB5F3B314AD5735CFEDB11BD240.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.250.0/23
                IPv6:
                  2803:ea30::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:85:b3:b1:ae:52:86:a8:4b:99:28:0e:d9:24:3b:4d:01:82:
         7f:d8:cc:e1:91:4e:b1:af:bb:21:7f:ae:f4:6a:02:b0:c4:8b:
         34:2c:e4:aa:d3:7d:e5:1a:85:41:79:2c:bb:45:82:3c:ae:f0:
         66:52:2c:46:f4:a6:67:39:ce:36:a6:52:a4:43:a3:a0:bb:b3:
         c1:68:d0:46:dc:93:dc:3c:55:d0:d2:d8:73:99:f0:c9:fa:73:
         eb:b0:fa:0c:30:ac:39:07:22:be:7d:83:fc:d5:ad:01:b9:de:
         61:37:a4:ee:e4:a5:f1:fe:f7:0f:45:04:85:8c:18:df:42:d8:
         cc:3f:3d:86:c1:7d:68:cc:7c:2e:ff:30:f7:17:2c:92:43:dc:
         96:33:54:d7:94:da:75:1e:81:8f:61:de:96:97:4b:65:37:0d:
         e4:34:ca:75:5e:68:c6:64:41:07:7b:5f:c6:f5:ca:71:45:c6:
         be:09:01:a0:da:9c:2a:09:4b:90:cf:ff:f4:0e:d4:7d:31:f0:
         f3:5c:29:9e:f4:07:bc:d4:40:05:ee:17:62:de:a6:17:3f:1c:
         e3:36:1f:20:0c:8a:f2:7e:49:8d:c3:bc:34:19:03:a1:ee:63:
         8f:93:13:9a:03:9a:f9:01:5e:86:53:59:65:ff:a6:e2:74:c9:
         5a:c9:15:81
-----BEGIN CERTIFICATE-----
MIIGiTCCBXGgAwIBAgIUflx/iBRWuquOgEmcp6ShLjcIWuAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE
NjA1ODY3ODAeFw0yNjA0MDIxNjI1MDJaFw0yNzA0MDExNjMwMDJaMDMxMTAvBgNV
BAMTKDZBREMyNzREREY5QUZDQjVGM0IzMTRBRDU3MzVDRkVEQjExQkQyNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRhxFCu3s8338iXbL93Bu3g7EL
k7y5qAntlQAHy635/BUI7FQZs+tctq8yVlPtEotkJC6G2Omorti6XvVyots00YPD
+VErTduYKEiFYn6r+oUnxmqxzM5SYOeLzb/sHsFcOEa4ivdRiXd3CEWQFlHzJm04
8x0G9CKb98PxdPVjbLu49u+aHfaGJXM1nhvFIJv3VNXeCzwc11jPnrUCpUZB09hf
IxxyMJa6wKgObsqJk+pYQCu7ZCqm5KFnUzUrHWEwmdLPPQhLFnH1H/E1bNwZE+sp
n+0Bs/rNW8/5TfJ4hjDH+oTsgzgIHUA++SfMaM8ndTVNCWn5Hjb66p0Y9QLnAgMB
AAGjggOTMIIDjzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRq3CdN35r8tfOz
FK1XNc/tsRvSQDAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy
NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRUJBM0EwMEJBNkNERjk0OEI4NTk5NkI0
OTY3QUY0REU2NTk2RDgyRTVERjZBNTE1NTdBMTVCODYxMEUwMDdDNy8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy9FQkEzQTAwQkE2Q0RGOTQ4Qjg1OTk2QjQ5NjdBRjRERTY1OTZEODJFNURG
NkE1MTU1N0ExNUI4NjEwRTAwN0M3LzAvNkFEQzI3NERERjlBRkNCNUYzQjMxNEFE
NTczNUNGRURCMTFCRDI0MC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBvm76MA0EAgAC
MAcDBQAoA+owMA0GCSqGSIb3DQEBCwUAA4IBAQCKhbOxrlKGqEuZKA7ZJDtNAYJ/
2MzhkU6xr7shf670agKwxIs0LOSq033lGoVBeSy7RYI8rvBmUixG9KZnOc42plKk
Q6Ogu7PBaNBG3JPcPFXQ0thzmfDJ+nPrsPoMMKw5ByK+fYP81a0Bud5hN6Tu5KXx
/vcPRQSFjBjfQtjMPz2GwX1ozHwu/zD3FyySQ9yWM1TXlNp1HoGPYd6Wl0tlNw3k
NMp1XmjGZEEHe1/G9cpxRca+CQGg2pwqCUuQz//0DtR9MfDzXCme9Ae81EAF7hdi
3qYXPxzjNh8gDIryfkmNw7w0GQOh7mOPkxOaA5r5AV6GU1ll/6bidMlayRWB
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:54:50 2026 by rpki-client