Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E72389DB363677115A40632E0F358D0066C2BC82.cer
File:                     E72389DB363677115A40632E0F358D0066C2BC82.cer (raw, json)
Hash identifier:          mR132MPIsanetchngAB2aMe9Z6jGIeoPvA5qEoKJ7kY=
Subject key identifier:   E7:23:89:DB:36:36:77:11:5A:40:63:2E:0F:35:8D:00:66:C2:BC:82
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       4283625042A8E7E39A06E16E47C83BC9CA411E42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/E72389DB363677115A40632E0F358D0066C2BC82.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 10:36:33 +0000
Certificate not after:    Wed 27 Jan 2027 10:41:33 +0000
Subordinate resources:    IP: 45.235.128.0/22
                          IP: 2806:301::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:83:62:50:42:a8:e7:e3:9a:06:e1:6e:47:c8:3b:c9:ca:41:1e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 10:36:33 2026 GMT
            Not After : Jan 27 10:41:33 2027 GMT
        Subject: CN=E72389DB363677115A40632E0F358D0066C2BC82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bf:6a:5f:43:ec:bf:b1:29:2e:38:60:a9:61:
                    32:ac:0e:f0:6b:31:2a:77:58:74:8b:cb:ac:a3:41:
                    95:ea:3e:ef:a6:8d:c6:f9:37:64:cc:e0:4c:72:6d:
                    73:6c:bf:c8:35:b6:cd:4a:04:c6:32:f4:5a:0c:68:
                    36:d0:2d:ed:b1:55:34:ef:9b:f5:bd:7c:83:fe:d0:
                    08:01:fb:89:cc:b6:c1:02:06:92:15:f8:51:35:c8:
                    ca:99:3a:83:db:2d:4a:89:78:88:25:e4:b1:c2:39:
                    60:34:d8:66:32:cf:98:9d:45:50:ac:c6:4d:8d:e2:
                    c6:ab:64:8f:74:14:85:48:74:b1:a9:58:ee:c8:f5:
                    52:32:fa:c8:52:7f:68:42:9e:88:12:71:e9:a0:f8:
                    82:a1:eb:e1:25:d4:e7:60:ab:2f:ec:6e:12:7b:8c:
                    24:f2:c1:db:23:05:4e:71:50:51:60:33:f5:94:b8:
                    e0:62:a9:15:ab:49:53:ad:87:55:f1:36:e0:7a:4c:
                    fc:15:30:b5:c9:ca:29:54:f1:d6:4e:25:10:bc:05:
                    f3:da:3f:fc:ee:88:41:e8:e1:f2:ef:31:42:12:e7:
                    1f:9c:2b:40:44:9b:84:5f:04:43:ec:a2:dc:e2:46:
                    b7:08:7a:d8:f5:ab:c1:de:4e:63:68:ab:6d:18:0c:
                    08:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E7:23:89:DB:36:36:77:11:5A:40:63:2E:0F:35:8D:00:66:C2:BC:82
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/E72389DB363677115A40632E0F358D0066C2BC82.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.128.0/22
                IPv6:
                  2806:301::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:c4:01:0d:19:48:90:df:15:53:11:fa:13:bf:ae:b6:08:26:
         67:12:b4:da:38:d0:ed:b7:4d:e2:aa:c5:99:c2:ad:14:20:3f:
         21:2b:2e:29:42:c8:ff:a0:94:c2:05:79:7f:a7:c3:23:1e:bb:
         0a:0f:e7:7f:03:8c:64:2e:c8:07:74:bc:46:0e:32:33:19:aa:
         4b:db:f5:e5:58:a7:3d:a7:0b:cf:28:3e:f9:f5:f0:ad:3b:41:
         6d:ec:3c:fc:72:30:02:8f:93:d2:ea:d6:c0:f6:a7:b5:e0:a1:
         cd:e5:e6:34:9c:72:7e:95:a9:7a:95:85:ce:12:4e:b7:b4:c0:
         92:9a:fd:72:de:cc:1e:e9:35:d8:6c:2b:9f:81:d4:33:36:4e:
         8a:35:eb:94:e8:49:40:f7:a7:e3:b6:75:0a:c4:dd:bf:db:3d:
         79:da:a4:32:99:00:69:77:0b:22:29:b5:86:b7:d0:8b:d1:38:
         44:df:36:0c:a0:a0:03:00:b8:23:d0:91:bd:80:c9:62:cd:59:
         3d:85:db:2b:64:47:e2:00:c8:b3:00:ed:98:24:58:88:65:c3:
         50:5d:6f:d9:01:7c:fd:e9:a9:a8:a7:fb:f6:bf:22:64:7f:fb:
         38:f5:33:76:d9:bf:99:63:0e:c6:92:47:53:18:c4:b8:85:a1:
         66:20:f8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:20 2026 by rpki-client