
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E85915E02D841E4A68BDB3CBC7258DCD26F929.cer
File: 94E85915E02D841E4A68BDB3CBC7258DCD26F929.cer (raw, json)
Hash identifier: MluDTRCnQqu5ebxOCsMreUJtYuL2XE2ZXNtO8ZULJig=
Subject key identifier: 94:E8:59:15:E0:2D:84:1E:4A:68:BD:B3:CB:C7:25:8D:CD:26:F9:29
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 0C4F06FD129A0C6813322BE987839D6338F146D8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/2133379ACCCE5A12AB55DF06FCE22251AE0DE73C154A30C94AB39A96FF765127/0/94E85915E02D841E4A68BDB3CBC7258DCD26F929.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/2133379ACCCE5A12AB55DF06FCE22251AE0DE73C154A30C94AB39A96FF765127/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 27 Jan 2026 17:50:47 +0000
Certificate not after: Tue 26 Jan 2027 17:55:47 +0000
Subordinate resources: AS: 271990
IP: 2803:e110::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 07 Mar 2026 04:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:4f:06:fd:12:9a:0c:68:13:32:2b:e9:87:83:9d:63:38:f1:46:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 27 17:50:47 2026 GMT
Not After : Jan 26 17:55:47 2027 GMT
Subject: CN=94E85915E02D841E4A68BDB3CBC7258DCD26F929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:31:c7:9d:63:17:85:8a:f3:ff:03:82:df:
86:79:55:88:50:12:a3:71:c5:73:1f:ce:c7:20:c1:
fd:49:69:ab:79:a3:3e:e0:08:6a:45:1d:f9:08:87:
1c:bc:2f:35:53:24:81:0d:ab:75:74:10:7b:68:22:
17:c8:7f:4e:d8:b3:47:73:ad:0b:fa:93:e7:37:b7:
2b:a0:7c:a5:b4:01:d1:4a:bc:d5:00:26:c3:01:2d:
4d:d8:4d:e9:57:9e:76:5f:ca:f5:ab:53:90:db:ba:
8f:3e:6d:4c:c6:1c:e6:32:5d:6a:d0:79:d9:6b:f3:
6e:d2:dd:c7:93:d5:63:33:43:26:b1:3e:ed:ab:0e:
46:a3:80:2d:c0:d2:79:62:52:ca:a2:ab:40:0a:0f:
79:5c:81:b7:c3:b2:c3:9a:f1:2c:b8:86:ec:1f:cd:
f7:5b:02:c5:e2:8e:45:49:1e:3b:85:db:a1:8d:51:
ba:43:ca:88:bd:37:26:a2:a9:bc:cd:37:47:d0:37:
29:c8:69:9e:0b:ba:93:a9:5f:1f:54:42:65:3b:b5:
88:09:1f:13:1a:02:8d:03:82:01:bd:0d:46:3d:ae:
6a:6b:72:63:80:89:26:a8:29:19:5a:3d:6d:91:b6:
e6:c5:09:f5:76:09:71:89:95:14:f7:0d:16:0a:21:
65:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
94:E8:59:15:E0:2D:84:1E:4A:68:BD:B3:CB:C7:25:8D:CD:26:F9:29
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2133379ACCCE5A12AB55DF06FCE22251AE0DE73C154A30C94AB39A96FF765127/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2133379ACCCE5A12AB55DF06FCE22251AE0DE73C154A30C94AB39A96FF765127/0/94E85915E02D841E4A68BDB3CBC7258DCD26F929.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:e110::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
271990
Signature Algorithm: sha256WithRSAEncryption
80:31:84:a4:c4:a4:2c:e5:1d:fb:85:e4:63:8a:88:a6:6a:61:
a0:d3:00:1e:12:8b:b8:45:31:ec:1a:99:d0:60:45:fc:e1:6b:
f2:37:df:ce:22:07:18:f6:c5:98:87:fd:18:5e:30:15:39:74:
1a:41:9f:75:c3:fe:bc:6c:72:b1:46:18:2e:2b:fb:68:38:1e:
c4:6d:73:a7:9f:f3:19:a8:4c:12:35:ea:29:3f:db:e8:9d:f5:
46:54:65:d7:a1:6c:a8:9b:85:b0:5d:3c:7d:e7:60:da:13:74:
5a:42:1a:7c:58:6c:8c:da:33:85:03:f0:43:c8:cc:de:b6:69:
59:22:8b:a5:41:db:f3:36:1b:43:d3:6f:03:b4:29:28:92:81:
ba:69:2f:68:84:aa:15:c6:e2:e3:66:99:cd:17:9a:69:07:7b:
41:73:fd:3b:0f:83:13:73:f0:eb:4b:87:df:54:fe:d5:79:ff:
ab:a6:ac:f4:eb:4c:d3:a1:5c:02:d7:73:08:bd:5e:59:6e:ad:
f6:09:b1:49:bb:9f:ae:dd:21:1e:33:95:11:f1:65:f1:e4:48:
87:cd:b8:fe:df:45:4a:59:33:61:24:8f:71:6b:9d:65:8f:b3:
4e:06:4e:ea:88:4b:7d:d7:84:ce:d4:ac:d2:cd:cc:6e:5c:6a:
8c:6c:70:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:43:33 2026 by rpki-client