
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.cer
File: A92A99A5E63D1DE5AF4E61219C731D7933DCC394.cer (raw, json)
Hash identifier: ywrp7XzElgcI3CbbN6Prh0J8dP7vW1cZsb5Y+MV2s4s=
Subject key identifier: A9:2A:99:A5:E6:3D:1D:E5:AF:4E:61:21:9C:73:1D:79:33:DC:C3:94
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 1DF5A4053C1FC48896234B9F38ABACB73ECFDBC4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 05 Feb 2025 14:57:01 +0000
Certificate not after: Wed 04 Feb 2026 15:02:01 +0000
Subordinate resources: AS: 27750
IP: 138.59.12.0/22
IP: 200.0.204.0/22
IP: 2001:1348::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:f5:a4:05:3c:1f:c4:88:96:23:4b:9f:38:ab:ac:b7:3e:cf:db:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Feb 5 14:57:01 2025 GMT
Not After : Feb 4 15:02:01 2026 GMT
Subject: CN=A92A99A5E63D1DE5AF4E61219C731D7933DCC394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d0:c7:9f:e7:89:dd:e9:35:f2:55:ad:a9:65:
68:89:c4:f6:02:bc:ec:c2:f0:e7:4f:ca:f2:40:32:
a8:00:88:b0:ad:06:b2:23:28:75:34:2a:5b:a3:47:
5b:46:be:fc:fc:5e:56:c4:32:0c:77:79:ef:74:2e:
2e:70:4b:c8:ec:bd:49:27:bc:4d:b2:45:76:e5:ef:
23:13:77:00:ba:7f:50:b9:47:ae:4d:53:ea:a9:30:
64:f9:83:12:9c:f2:97:01:f9:61:53:35:02:73:ac:
42:5b:16:e2:2a:58:ec:6e:96:62:fa:02:6d:39:90:
b0:a3:79:7c:00:a0:03:7f:d0:d9:4e:17:bd:3f:f9:
fd:ee:fe:7d:74:68:25:5d:6e:9c:08:d4:f8:fa:24:
c4:6d:23:51:9a:40:c4:10:65:0c:93:62:22:ec:0a:
89:64:2a:d7:a9:1d:56:1d:6d:78:7b:39:e6:e5:be:
4b:a8:01:56:1d:2f:64:a6:23:68:0a:2a:cd:42:b8:
f5:7e:18:12:b1:ae:94:dc:fe:e6:bf:56:5d:e8:d1:
ab:19:5a:d2:ae:3b:1b:89:c6:8e:1a:d7:df:d5:4f:
16:e2:bd:fd:da:b6:2b:98:1b:65:72:b7:32:5f:31:
c9:96:28:d5:69:fb:ee:72:52:82:54:15:b8:d2:13:
aa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A9:2A:99:A5:E6:3D:1D:E5:AF:4E:61:21:9C:73:1D:79:33:DC:C3:94
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.12.0/22
200.0.204.0/22
IPv6:
2001:1348::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
27750
Signature Algorithm: sha256WithRSAEncryption
8a:35:7b:28:03:78:74:ed:13:3c:13:8f:90:02:88:f2:b0:56:
7c:22:84:7c:15:83:2b:7b:0d:f7:3a:8c:81:f2:c8:1b:4a:99:
50:e5:c1:5c:5c:f1:43:2f:8f:27:27:8d:2b:89:96:cf:8c:16:
98:54:c1:de:94:41:b5:6f:dd:9e:a1:e8:27:d4:a8:57:39:22:
6a:41:78:d0:a4:21:88:6e:87:66:20:99:8d:2e:7f:53:c6:38:
63:59:8c:47:d5:24:59:97:ca:23:4d:ad:15:43:02:de:ac:4f:
cf:b7:0d:51:98:e9:cd:64:3a:0a:8d:e5:59:9e:05:69:07:39:
41:d8:26:ae:13:cc:aa:75:4b:55:33:bb:44:d4:3f:3d:f1:ec:
c0:c5:d7:0a:c1:60:34:4d:93:57:34:0f:2e:98:08:19:73:6c:
a3:ca:8a:d1:78:ab:44:e3:d9:fe:0c:29:e1:ce:e6:2f:6c:7b:
cc:20:5e:65:67:7a:e8:92:ae:55:3e:28:98:00:82:f0:bb:53:
7a:2d:56:c5:a6:ff:56:fb:4e:ad:79:7d:94:fe:11:61:2a:18:
b8:e4:91:a0:e6:90:c4:e7:a2:2a:3e:e1:47:30:ba:49:99:f5:
58:0d:fb:49:f2:68:fc:e4:52:07:89:2b:60:e8:76:39:69:44:
05:a1:6c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:36:45 2025 by rpki-client