
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA87016EC1BFCAE28788DCAC64E1F45D87C274C9.cer
File: EA87016EC1BFCAE28788DCAC64E1F45D87C274C9.cer (raw, json)
Hash identifier: vdTVlwSKZGvJks2QGijNZnPGQVmbJqmEKqaAYSEaT5E=
Subject key identifier: EA:87:01:6E:C1:BF:CA:E2:87:88:DC:AC:64:E1:F4:5D:87:C2:74:C9
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 411C739C43BE704EDF2054BA4C15D073B01D6108
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/DE510715E72DD0A832260988E4CD41951F92AB38E885B988F0695598FC4A9B49/0/EA87016EC1BFCAE28788DCAC64E1F45D87C274C9.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/DE510715E72DD0A832260988E4CD41951F92AB38E885B988F0695598FC4A9B49/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 22:23:30 +0000
Certificate not after: Wed 27 Jan 2027 22:28:30 +0000
Subordinate resources: AS: 273043
IP: 2803:eb90::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 07 Mar 2026 04:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:1c:73:9c:43:be:70:4e:df:20:54:ba:4c:15:d0:73:b0:1d:61:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 22:23:30 2026 GMT
Not After : Jan 27 22:28:30 2027 GMT
Subject: CN=EA87016EC1BFCAE28788DCAC64E1F45D87C274C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:60:65:1c:c5:43:c9:9a:f4:3a:8f:a4:61:c5:
bb:16:39:03:30:2f:8b:87:e4:11:32:0c:ed:3e:24:
cd:5d:94:b4:4c:5d:61:10:98:7c:78:3a:16:94:93:
d0:1a:81:54:50:76:db:4d:8b:f5:2a:c9:a1:55:81:
a4:8b:30:6d:39:5c:53:07:ee:65:ae:9c:fb:4f:ff:
6b:0c:4f:96:ab:93:35:4b:fe:2d:47:25:a0:fb:70:
95:7d:29:7c:2e:e0:e5:e3:9e:af:49:a1:74:97:6b:
61:70:af:43:35:be:ae:e5:54:ce:8a:31:50:23:41:
12:92:b5:41:d0:b3:c7:a6:26:63:c3:32:75:00:64:
76:94:18:fe:0d:73:4f:40:6d:88:9b:03:14:bd:23:
24:af:06:74:cc:e8:f0:98:dd:ea:89:b8:e6:f4:90:
68:65:a4:bc:0d:86:fc:5e:99:d8:26:0b:5d:3a:48:
f1:08:cf:f3:21:63:c0:66:24:bb:5b:4e:a6:8b:b3:
1d:4d:d5:3e:f7:6a:15:f1:78:a2:b2:d6:d4:3a:af:
2b:7d:31:e2:30:99:02:92:4c:95:9f:cc:79:8b:ed:
45:48:a0:0e:6b:62:b1:e2:df:4c:9f:ea:09:da:0a:
dd:27:ea:07:21:e9:4c:b9:90:dc:97:a0:87:57:3a:
59:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EA:87:01:6E:C1:BF:CA:E2:87:88:DC:AC:64:E1:F4:5D:87:C2:74:C9
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DE510715E72DD0A832260988E4CD41951F92AB38E885B988F0695598FC4A9B49/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DE510715E72DD0A832260988E4CD41951F92AB38E885B988F0695598FC4A9B49/0/EA87016EC1BFCAE28788DCAC64E1F45D87C274C9.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:eb90::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273043
Signature Algorithm: sha256WithRSAEncryption
34:b1:9e:3c:31:8f:cc:27:ff:ef:af:c2:bb:79:49:1a:2a:7d:
bd:3f:08:d8:c9:9e:83:55:2c:82:d1:5d:9d:94:1e:bf:2d:43:
89:d9:44:d3:fc:5d:b2:b7:8c:e9:77:f2:b6:41:3f:d3:46:26:
ff:0d:cd:7b:b4:50:86:02:d9:b1:10:e8:a9:76:1e:a1:e9:85:
cb:69:1e:78:11:7e:2c:ac:64:6e:aa:0e:27:22:b2:52:cc:2e:
d0:57:d1:49:2f:ca:3a:56:9c:ee:ce:40:19:40:ac:d9:7b:89:
be:d3:72:be:80:e9:46:2b:30:0c:68:0d:ac:1c:6e:6c:0d:21:
43:6b:70:a0:6b:dd:0e:d1:75:f7:c6:c8:60:10:3b:26:cb:e1:
56:72:91:d7:56:aa:75:ae:a9:a0:6c:d6:74:fb:02:8c:9a:5f:
9c:8d:68:aa:cf:b4:1b:2a:fb:48:c3:8e:39:ac:22:22:11:b9:
d6:51:05:6d:c2:76:5b:9c:66:9d:b4:e2:76:e2:2b:5b:1d:83:
86:57:38:0b:6f:86:a2:82:3f:30:64:60:03:59:33:33:ff:a0:
46:cc:89:c0:fe:8f:df:c2:45:8a:34:4b:73:90:4c:94:de:05:
51:c2:52:21:01:cb:9f:5a:f8:8c:20:b2:1b:3b:e3:36:13:59:
d9:4a:28:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:31:10 2026 by rpki-client