
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
File: C87C55A4481F19C9B6184944B187B3813B7CEC56.cer (raw, json)
Hash identifier: KFCB6u4e+Yqwkd4YbheoTNmLRcRuPsUVvOpnvkceJZ0=
Subject key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 6A48179B585CED7332AAA7527161B108DF1BF363
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 05 Feb 2025 15:44:38 +0000
Certificate not after: Wed 04 Feb 2026 15:49:38 +0000
Subordinate resources: AS: 13835
AS: 16528
AS: 19583
AS: 19978
AS: 20363
AS: 21838
IP: 131.0.52.0/22
IP: 190.216.0.0 -- 190.217.127.255
IP: 200.0.194.0 -- 200.0.197.255
IP: 200.31.0.0/19
IP: 200.32.64.0/18
IP: 200.41.0.0/17
IP: 200.49.0.0/20
IP: 200.55.0.0/18
IP: 201.234.0.0/16
IP: 2001:13b0::/29
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:48:17:9b:58:5c:ed:73:32:aa:a7:52:71:61:b1:08:df:1b:f3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Feb 5 15:44:38 2025 GMT
Not After : Feb 4 15:49:38 2026 GMT
Subject: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:db:c0:d9:f7:cf:7e:54:9b:fe:4e:f5:d4:
1c:ec:26:8d:cc:d4:af:fb:62:91:2d:05:35:3b:75:
e9:4e:cc:ae:bb:71:8a:0b:60:79:26:de:95:66:27:
f1:8a:25:0b:a9:89:a9:c2:b7:bd:71:82:b4:5d:5b:
a7:be:86:d2:0a:94:17:f5:39:28:72:e0:26:6f:81:
50:f7:c7:f9:ff:6c:7d:5d:de:c3:a5:fb:e2:7c:1a:
b6:8d:9a:17:3c:ec:f1:f7:76:c1:64:d5:a9:fc:ba:
ac:c7:f0:ac:59:c1:aa:af:49:c8:26:2e:05:3b:41:
a4:0e:73:7d:39:40:b3:1b:8e:25:1d:19:df:03:f7:
0b:0f:95:67:d0:63:24:ba:5d:3d:c5:0b:34:96:f2:
12:e8:42:9d:d3:7e:f9:69:ff:cf:4b:db:e1:98:9c:
7d:ed:e8:e9:6b:0d:ea:70:0d:18:d8:c9:f7:2a:ef:
44:e3:cb:a8:f1:4a:64:12:cc:73:99:46:a7:99:16:
bb:8b:7a:6d:0d:eb:c9:58:26:68:b2:9d:b0:1f:f8:
3b:f8:3e:59:a8:2c:7e:4b:2b:cc:ab:20:d2:b8:b0:
36:87:7d:58:a6:53:50:7f:40:60:15:13:5b:f5:83:
7a:97:2e:95:25:e4:49:ff:24:7f:d6:79:ce:83:dc:
18:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.52.0/22
190.216.0.0-190.217.127.255
200.0.194.0-200.0.197.255
200.31.0.0/19
200.32.64.0/18
200.41.0.0/17
200.49.0.0/20
200.55.0.0/18
201.234.0.0/16
IPv6:
2001:13b0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13835
16528
19583
19978
20363
21838
Signature Algorithm: sha256WithRSAEncryption
71:61:b2:5f:34:72:50:df:81:45:55:f7:c9:b2:49:66:2f:be:
4b:dd:b5:b5:81:c0:85:e6:99:ce:e6:e7:5e:04:06:48:08:4c:
1b:b2:5c:ec:1b:4d:b1:f2:2d:fe:55:8c:a9:c2:e4:94:41:47:
7f:98:7b:fa:9b:5c:ff:cd:4b:ed:83:60:b9:99:2e:51:84:ed:
94:19:4d:b2:63:d8:2f:aa:38:c9:1a:17:9d:8c:85:05:d1:53:
17:f7:72:59:bb:7d:0f:de:25:ce:55:7a:1b:28:76:96:c9:07:
a1:c7:78:39:1e:c8:99:c2:5e:17:b3:a9:19:42:0c:09:ea:d8:
8f:59:fa:7d:41:87:c3:2a:3c:bf:3d:ff:12:e0:ed:99:ee:e1:
1f:3a:5b:50:2c:f2:ac:06:7e:03:bf:12:26:d4:7d:81:4c:d8:
12:be:f8:18:27:6f:9a:0a:6b:9f:48:f1:ab:84:9c:69:da:20:
27:92:e9:39:44:9a:cc:08:45:86:bd:8f:e9:a8:44:46:97:71:
21:0e:8a:8b:ea:4d:fd:14:0a:aa:66:a5:eb:bf:fc:0e:e4:24:
da:8b:33:2d:e6:3b:82:19:c0:7e:e1:11:9a:7a:24:b9:fe:5a:
3b:77:ad:22:82:01:32:40:b9:f7:2f:93:f2:81:44:10:1a:6c:
3e:f6:fc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:38:58 2025 by rpki-client