
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC121F7A2F5847D63452275EE667C5A03D867975.cer
File: CC121F7A2F5847D63452275EE667C5A03D867975.cer (raw, json)
Hash identifier: TgMwqfJKfvDPEIJwWU06RXerI/8ZSScBgrrONMsWHKE=
Subject key identifier: CC:12:1F:7A:2F:58:47:D6:34:52:27:5E:E6:67:C5:A0:3D:86:79:75
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 62BDE4953F3407F025D99B7CC42090C0BA0C8015
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/CC121F7A2F5847D63452275EE667C5A03D867975.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Thu 29 Jan 2026 02:53:33 +0000
Certificate not after: Thu 28 Jan 2027 02:58:33 +0000
Subordinate resources: IP: 170.238.64.0/23
IP: 2801:1f8::/44
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 07 Mar 2026 04:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:bd:e4:95:3f:34:07:f0:25:d9:9b:7c:c4:20:90:c0:ba:0c:80:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 29 02:53:33 2026 GMT
Not After : Jan 28 02:58:33 2027 GMT
Subject: CN=CC121F7A2F5847D63452275EE667C5A03D867975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:38:33:23:2f:04:5e:80:cc:b2:a0:28:e9:
23:90:bb:77:d5:d2:18:1f:d4:42:7e:04:90:80:a5:
dd:0d:3d:1c:0e:a5:a6:a5:bd:8f:8b:3f:3a:45:d3:
50:ee:86:0a:c7:9a:ab:1d:aa:24:55:69:be:dc:59:
27:5b:a0:a1:09:5f:1d:1d:82:f2:4e:15:70:88:04:
29:46:dd:41:cc:81:c3:4b:b3:c6:f8:e3:2c:b3:53:
e6:aa:68:6a:c2:d2:42:84:9c:5d:48:a3:7a:a1:cf:
99:ff:4a:5a:e8:28:e5:24:81:86:9c:c2:61:0c:13:
33:b2:5d:88:f5:ab:ba:53:f0:d6:4f:7b:e9:04:e4:
be:4b:ad:98:a7:df:c4:d2:a7:e1:8a:c1:7e:7c:db:
4a:46:ce:3b:05:db:fc:66:36:9a:41:72:bb:21:11:
c9:71:45:5e:be:86:db:fb:4a:b5:f6:23:54:eb:e6:
bb:30:a0:ee:1b:a5:e5:8a:b9:28:ed:45:b8:23:9f:
9d:55:04:7f:73:72:e4:08:72:b4:bb:a6:66:11:22:
80:34:09:46:e3:ee:b4:d5:20:eb:68:94:9c:ff:88:
54:cb:88:ee:d4:f7:43:df:03:a8:c0:1b:4d:59:98:
d5:bb:3a:44:83:15:c7:b1:a2:50:ad:70:59:01:c3:
c1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CC:12:1F:7A:2F:58:47:D6:34:52:27:5E:E6:67:C5:A0:3D:86:79:75
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/CC121F7A2F5847D63452275EE667C5A03D867975.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.64.0/23
IPv6:
2801:1f8::/44
Signature Algorithm: sha256WithRSAEncryption
16:77:1e:7c:5b:16:a8:1d:a3:ff:89:08:34:0f:f8:c5:b7:9b:
4b:64:76:a3:8c:76:96:b6:8b:6d:ae:2a:ae:0f:48:12:3e:94:
a4:0b:7f:a1:b4:ca:61:40:ac:4e:f0:ef:e0:b4:1f:69:88:70:
68:1e:04:b7:e4:60:f3:e1:0e:f0:03:55:f7:05:90:82:5e:39:
c1:0c:06:22:e9:38:95:0d:b9:9b:90:93:6b:6d:d6:4d:a7:bc:
02:a0:ff:1c:14:12:ef:58:43:0d:bf:d9:70:e0:c0:2c:43:c7:
cf:70:e4:0c:11:fe:e6:cb:72:72:83:20:fa:ff:4a:10:df:2c:
f8:0b:72:b6:cc:0c:09:d0:b3:b9:36:d4:cb:14:13:15:5f:02:
14:a9:55:06:f9:f4:e1:e2:53:3a:55:5f:71:e1:ab:ea:79:dd:
67:75:2f:b8:3a:4f:66:9b:50:07:92:cf:ec:dd:4f:01:72:0e:
8a:1c:22:c7:34:bb:90:4e:a9:6d:f5:7d:58:c7:e5:63:30:e2:
65:de:7e:93:ea:ea:4d:38:d4:b7:83:f5:e6:1b:37:b1:e5:c6:
c7:15:e9:0f:eb:a4:5d:21:17:6a:92:55:70:87:5d:d3:e3:84:
81:a8:82:d2:b9:48:bb:7e:1b:92:bf:a6:8d:ba:0d:20:ab:71:
ac:59:36:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:25:27 2026 by rpki-client