
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.cer
File: EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.cer (raw, json)
Hash identifier: mF39IL56ajoKjUeIt6gFJjCyElM607BVyLOljLShjzc=
Subject key identifier: EC:1F:06:8A:A5:7B:BF:89:BA:3D:7D:5A:D3:2A:93:EC:44:7D:C5:7B
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 5C24FB6CC98EF98B33A76F85AD34F8158E0C8AD8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 23:47:49 +0000
Certificate not after: Wed 27 Jan 2027 23:52:49 +0000
Subordinate resources: IP: 200.90.144.0/21
IP: 200.110.48.0/20
IP: 2803:5c00::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 05 Mar 2026 11:41:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:24:fb:6c:c9:8e:f9:8b:33:a7:6f:85:ad:34:f8:15:8e:0c:8a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 23:47:49 2026 GMT
Not After : Jan 27 23:52:49 2027 GMT
Subject: CN=EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:32:3c:10:0a:e1:ce:47:53:10:bc:4b:c1:4e:
7d:59:4e:19:8f:82:24:74:ce:18:3f:2a:0d:cb:b8:
f4:25:77:b6:2e:1c:cd:eb:92:a0:c3:9b:fc:d8:39:
f8:a4:8b:df:47:d1:a7:eb:36:ce:37:10:52:c0:1b:
ca:12:80:85:f9:d1:5b:d4:b1:f7:2e:6d:3d:86:4f:
73:32:08:28:7f:0c:22:5b:08:19:9a:fc:58:39:c1:
a2:c2:bf:f2:da:b6:2d:97:13:6c:8c:0b:ba:59:d7:
4c:37:00:a7:b4:c9:4e:4b:84:6f:1f:b7:46:a9:da:
2c:60:1c:bb:c1:e2:de:82:b1:60:27:97:a9:92:ba:
1d:fd:9c:ec:ed:a8:6d:ea:95:f4:88:04:5f:a1:06:
8c:30:d1:f8:14:03:6a:28:eb:9b:e8:8c:04:55:51:
81:e9:01:d8:e7:f2:01:49:dd:88:61:1a:79:34:b4:
6d:77:ae:6c:ee:76:0e:82:e9:e8:0b:6a:35:28:7f:
7a:2d:cf:a4:50:4e:4a:5f:09:3c:47:dd:53:f2:1c:
99:80:d8:02:f4:e4:51:28:f8:d5:65:6e:bf:f1:a8:
0e:e9:7c:b5:83:c4:31:eb:09:2c:db:be:37:5f:6f:
9d:3a:c3:df:50:b5:3b:49:cb:a0:fb:f7:9c:fd:a8:
c7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EC:1F:06:8A:A5:7B:BF:89:BA:3D:7D:5A:D3:2A:93:EC:44:7D:C5:7B
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.90.144.0/21
200.110.48.0/20
IPv6:
2803:5c00::/32
Signature Algorithm: sha256WithRSAEncryption
68:5c:7a:ad:f3:b3:66:b6:db:12:58:4b:ca:b7:55:ef:45:f1:
b9:d2:42:58:e8:5a:d8:d1:97:cf:c0:88:24:8a:64:6f:9e:a7:
6d:c8:7b:93:5b:2f:c8:37:b1:7a:52:9a:3c:60:06:ea:77:43:
e4:33:13:17:16:d5:6e:f1:ad:38:58:23:e8:91:ac:7d:4c:db:
56:15:fd:50:f6:e5:97:ff:97:c6:2b:d1:c2:4b:18:25:1b:e2:
c4:ee:95:8b:f8:a2:98:99:5e:6f:e2:5a:c0:aa:17:f8:42:5e:
0c:7b:5b:39:20:69:52:8e:8d:5f:5d:4b:27:20:5d:bc:bd:e0:
9e:9f:b2:7e:4d:2d:41:f8:41:78:c1:87:9f:4f:48:6c:23:34:
3d:5f:c2:f7:49:84:ff:9a:35:ba:0f:2f:0b:ae:e9:23:c4:ac:
bd:4a:51:fd:1d:d1:24:81:e3:53:63:b3:d0:53:5f:a9:e1:db:
a8:71:77:bb:03:aa:66:65:e4:55:4f:2c:3b:c1:7a:55:7d:94:
53:ff:74:48:6e:9a:92:d1:ef:bf:06:68:0e:aa:22:d1:f0:13:
4b:40:c5:d3:09:e0:cf:a0:70:a3:52:00:9c:1e:94:db:5d:11:
44:a5:11:1c:e7:5a:c1:82:e1:d4:76:48:44:b5:28:d2:9c:4b:
97:10:c0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:49:30 2026 by rpki-client