
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AD3BF5DB62AA231E2EA005427E92CDBEB3A2A9.cer
File: B1AD3BF5DB62AA231E2EA005427E92CDBEB3A2A9.cer (raw, json)
Hash identifier: 3OZfVu6RPWfZ9MYkTXTzOyEDlmd33SpB3fozvoL3kAg=
Subject key identifier: B1:AD:3B:F5:DB:62:AA:23:1E:2E:A0:05:42:7E:92:CD:BE:B3:A2:A9
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 65C68ECB002A58C3C4F6B2F70139758C1B84AA03
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/100A72EE6A05880B26399589E39D29CEEF8902A606E07965C7671B5FE2B42277/0/B1AD3BF5DB62AA231E2EA005427E92CDBEB3A2A9.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/100A72EE6A05880B26399589E39D29CEEF8902A606E07965C7671B5FE2B42277/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 09:33:01 +0000
Certificate not after: Wed 27 Jan 2027 09:38:01 +0000
Subordinate resources: IP: 2801:164::/40
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 05 Mar 2026 11:41:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:c6:8e:cb:00:2a:58:c3:c4:f6:b2:f7:01:39:75:8c:1b:84:aa:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 09:33:01 2026 GMT
Not After : Jan 27 09:38:01 2027 GMT
Subject: CN=B1AD3BF5DB62AA231E2EA005427E92CDBEB3A2A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c2:24:c9:60:16:30:5f:eb:7d:34:19:3f:3c:
ae:2a:dc:15:20:d7:6c:a2:33:37:df:ad:a2:53:18:
76:32:3f:18:a0:47:2a:e9:9a:4b:97:ab:4d:32:c6:
af:e7:36:54:f9:cb:2b:60:10:9b:d3:c6:e0:ce:f2:
10:8a:2a:92:66:3c:82:c7:19:d2:0d:87:64:e5:24:
6f:1f:2b:83:1a:b7:20:69:2e:d6:a5:7b:d7:31:a0:
af:88:39:1b:9a:e5:b8:25:6c:f5:40:90:b7:11:8b:
fb:27:45:86:a8:9f:0f:f6:19:cd:45:e3:ad:09:73:
21:e2:4c:ea:c7:ed:57:4a:f8:d8:ba:b3:de:b8:34:
e4:cf:75:e8:ef:41:4f:61:75:52:bb:7b:b8:88:e0:
2b:84:d1:86:96:ae:df:67:30:5b:26:b3:d4:6d:cb:
36:02:37:f2:68:c5:9c:0f:59:95:6f:20:49:ac:2e:
2d:b0:db:68:a4:d6:f2:2c:cb:1e:3d:a3:8b:af:dd:
94:7d:ff:58:43:4a:c9:16:8c:e6:f1:d9:d1:5e:8f:
dc:9a:4c:46:62:cf:e9:b4:d4:fc:b5:c6:ee:8b:50:
bf:b0:a6:cb:2e:55:dd:07:d6:d7:f6:ef:97:6c:05:
a4:6c:72:c5:3e:09:28:a4:fb:d6:d2:ef:0e:f5:7b:
d9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B1:AD:3B:F5:DB:62:AA:23:1E:2E:A0:05:42:7E:92:CD:BE:B3:A2:A9
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/100A72EE6A05880B26399589E39D29CEEF8902A606E07965C7671B5FE2B42277/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/100A72EE6A05880B26399589E39D29CEEF8902A606E07965C7671B5FE2B42277/0/B1AD3BF5DB62AA231E2EA005427E92CDBEB3A2A9.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:164::/40
Signature Algorithm: sha256WithRSAEncryption
82:f4:df:9f:31:64:1f:f2:cf:07:7f:b0:42:4d:af:de:64:67:
31:a5:36:e9:59:f6:31:39:7f:a8:2d:98:ae:46:13:3a:bc:7b:
03:9d:88:e1:a5:be:7c:e0:6c:ba:f1:77:52:f7:1f:6d:77:49:
47:b9:6a:3d:fe:58:3b:54:da:f8:34:5a:ff:93:e7:06:c6:5c:
e2:5b:ac:03:72:27:a6:a7:c2:1b:fd:0b:6c:c8:c7:40:d3:2b:
fd:4c:3d:4d:7e:ea:81:f7:17:3c:3b:a7:ea:74:be:ea:cf:0b:
e8:6b:1d:be:28:4f:87:67:04:8f:64:75:85:0d:c4:62:2e:79:
a8:f8:77:2b:0e:28:81:ad:52:60:6a:1a:96:38:00:a6:08:2d:
a5:65:a7:57:86:01:0f:04:0e:15:5b:65:07:72:1b:2e:3a:71:
89:9c:55:23:c1:c1:5f:11:52:8e:8f:06:3a:84:0b:4c:ab:da:
1b:8b:02:5c:64:8e:6f:88:8e:68:74:03:18:80:18:7f:59:88:
49:f8:88:2a:c6:5b:06:57:76:82:b3:9d:30:90:b1:ea:b1:d0:
a4:08:6c:4b:42:e9:2a:ae:b1:99:17:d7:9b:e3:8d:4d:e1:85:
bc:88:a2:33:af:5c:4d:05:c6:43:64:89:36:cf:56:77:c0:37:
60:84:74:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:21 2026 by rpki-client