
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9ECE6C39978523EA52209306DB86F504C3D56527.cer
File: 9ECE6C39978523EA52209306DB86F504C3D56527.cer (raw, json)
Hash identifier: 9Tj8N1IhsLQO7GZUF3nGwEI6TQd+l0/cCXIrjDkFDZM=
Subject key identifier: 9E:CE:6C:39:97:85:23:EA:52:20:93:06:DB:86:F5:04:C3:D5:65:27
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 3869A388B0E204D331BA206B8AF3FC56FFD5F3A3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/F7E1542D7421BECFF006C6CAAE5D9D0674EFFCA84DF0066C7F58E029E4924DDD/0/9ECE6C39978523EA52209306DB86F504C3D56527.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/F7E1542D7421BECFF006C6CAAE5D9D0674EFFCA84DF0066C7F58E029E4924DDD/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Fri 13 Feb 2026 18:40:01 +0000
Certificate not after: Fri 12 Feb 2027 18:45:01 +0000
Subordinate resources: AS: 274291
IP: 2803:e830::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 07 Mar 2026 04:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:69:a3:88:b0:e2:04:d3:31:ba:20:6b:8a:f3:fc:56:ff:d5:f3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Feb 13 18:40:01 2026 GMT
Not After : Feb 12 18:45:01 2027 GMT
Subject: CN=9ECE6C39978523EA52209306DB86F504C3D56527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5e:17:7e:cf:cc:2a:e6:dd:cd:57:64:8c:7b:
9d:af:4b:ee:a3:8a:de:c8:eb:cb:70:7a:a0:3b:82:
7a:54:44:19:ff:b5:fe:dc:ba:85:ef:14:f6:8f:35:
80:8c:eb:3f:f6:3b:d7:6d:75:cd:ab:97:d4:a4:e6:
e2:7b:1e:81:44:e7:d0:a3:4d:2e:e8:2d:9b:55:37:
42:9e:25:96:e7:18:cc:4e:bc:ba:d6:83:b3:12:f6:
09:86:51:01:d2:82:ce:9e:e7:4c:4d:11:7e:36:54:
a1:b0:2a:e0:61:50:9d:c7:12:15:80:ae:ab:e1:ff:
c5:8e:ad:a8:4c:75:c9:dd:3c:3a:61:bb:29:f2:e4:
e6:e3:77:0e:9c:e3:d8:46:76:f7:e4:79:27:33:ae:
68:2b:bb:65:bc:9e:db:ac:03:73:e2:7c:08:83:9a:
da:14:cd:cf:6f:48:9e:fa:59:85:9d:b4:14:89:22:
ed:f4:6a:4d:ac:d9:c7:43:88:ef:2a:25:3c:ad:bf:
e3:be:54:3d:e1:dc:1c:ce:a1:15:6a:22:71:1f:80:
e6:f2:ca:79:7b:94:52:1b:12:4d:ee:9a:f7:96:46:
00:86:3d:3a:b8:02:62:3a:56:ba:77:9c:b9:9f:35:
7d:b5:65:08:e7:b8:3a:f7:6f:61:08:06:50:f5:99:
26:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9E:CE:6C:39:97:85:23:EA:52:20:93:06:DB:86:F5:04:C3:D5:65:27
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F7E1542D7421BECFF006C6CAAE5D9D0674EFFCA84DF0066C7F58E029E4924DDD/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F7E1542D7421BECFF006C6CAAE5D9D0674EFFCA84DF0066C7F58E029E4924DDD/0/9ECE6C39978523EA52209306DB86F504C3D56527.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:e830::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
274291
Signature Algorithm: sha256WithRSAEncryption
2e:d2:97:1e:13:cc:b5:e0:b1:36:cd:d8:91:a7:b5:58:c2:4d:
89:a5:5a:d7:c2:4d:cd:fd:9b:4e:01:26:de:ba:a1:da:a2:06:
e9:4f:fb:50:d1:7a:a4:22:50:3e:82:1f:d6:98:a7:a7:a9:24:
dd:25:dc:f9:2b:c6:dc:d9:f9:e6:b2:48:0c:d5:10:b5:88:39:
a1:23:b6:f3:ff:cf:df:ad:39:bf:ec:2b:37:4b:32:19:f4:eb:
af:6e:b6:d2:7d:dc:f5:ee:01:6c:39:85:e6:2c:10:40:15:ac:
28:62:fb:64:c9:59:a3:37:5c:5f:c1:a5:23:b4:9f:21:cf:af:
d7:0a:64:55:40:69:45:cf:55:89:f8:dc:1c:64:02:9b:9d:c9:
ed:91:6d:0c:74:9c:dd:8d:92:2c:f9:0a:8f:f1:c3:32:5a:2b:
3b:71:02:21:95:6f:e8:83:5d:e1:fe:dd:e6:3c:5c:1c:e9:07:
68:c8:f0:c0:97:26:ef:25:30:fe:b9:51:ff:29:20:0d:06:eb:
38:2c:e1:ab:d5:fc:72:77:2b:59:d9:ac:c5:40:73:97:38:4e:
ae:28:38:12:2e:fd:e3:15:6d:03:9d:e2:c3:69:55:d8:ab:82:
b2:0a:e4:99:97:d6:da:31:b7:e4:91:9e:74:33:6b:e5:da:b3:
83:a7:df:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:24:27 2026 by rpki-client