
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/60588DB2E72DBFDF89F0924A95C774D72EA4C12F.cer
File: 60588DB2E72DBFDF89F0924A95C774D72EA4C12F.cer (raw, json)
Hash identifier: dFtAn1vyB9DmFPk9AAriB66cPx4ZxIjJrddGBGTgpvM=
Subject key identifier: 60:58:8D:B2:E7:2D:BF:DF:89:F0:92:4A:95:C7:74:D7:2E:A4:C1:2F
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 0F4250162E6A93BA906C4ED8BC578351FDE5A0CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/4CAB1437C33FCB9C01EB529345288502DB5C4EF050203929F8CB2C709FE50606/0/60588DB2E72DBFDF89F0924A95C774D72EA4C12F.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/4CAB1437C33FCB9C01EB529345288502DB5C4EF050203929F8CB2C709FE50606/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Mon 15 Jun 2026 21:15:01 +0000
Certificate not after: Mon 14 Jun 2027 21:20:01 +0000
Subordinate resources: AS: 273909
IP: 2803:ab50::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 28 Jul 2026 01:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:42:50:16:2e:6a:93:ba:90:6c:4e:d8:bc:57:83:51:fd:e5:a0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jun 15 21:15:01 2026 GMT
Not After : Jun 14 21:20:01 2027 GMT
Subject: CN=60588DB2E72DBFDF89F0924A95C774D72EA4C12F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a2:4c:df:a6:e7:4d:51:2d:56:ab:4b:75:19:
05:c1:f3:05:92:f5:c3:7f:de:6f:6b:db:95:5a:0b:
f0:e3:e0:81:6a:35:82:09:91:49:65:fc:b2:0d:70:
e2:65:28:93:d6:db:17:7b:97:d1:32:3e:6f:2e:4d:
06:5f:59:8a:84:c3:6e:a4:e2:68:44:63:8d:f4:00:
64:f6:e7:f2:87:d3:ad:d7:a0:4f:2d:47:0a:b1:d5:
e3:bf:e2:6b:89:89:d1:58:95:10:58:f2:64:ef:24:
39:08:5b:a4:de:a1:9c:be:8e:5d:09:2d:03:bf:24:
6a:c4:30:ff:86:39:47:50:e9:d1:b6:81:47:1a:3a:
8d:cd:a5:b8:1d:1e:ec:60:fa:40:15:6c:43:3c:fc:
b9:92:ab:05:2d:ee:cd:85:4e:e1:e9:3c:d0:0c:c7:
1c:d5:13:a8:ed:71:7a:34:82:b3:7a:38:f6:7d:ac:
dd:26:6e:39:b8:13:87:ed:04:3d:27:71:81:87:cb:
84:db:b6:54:ee:b3:d6:a7:11:39:c8:fc:75:ea:16:
15:f0:4c:8d:f3:0f:08:e4:2b:74:68:50:89:66:d0:
71:c7:6d:02:b8:ca:9a:a8:b2:75:08:f7:bf:bb:0e:
c5:75:60:af:e4:05:e2:dd:25:ae:ba:6a:0a:69:44:
ab:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
60:58:8D:B2:E7:2D:BF:DF:89:F0:92:4A:95:C7:74:D7:2E:A4:C1:2F
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4CAB1437C33FCB9C01EB529345288502DB5C4EF050203929F8CB2C709FE50606/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4CAB1437C33FCB9C01EB529345288502DB5C4EF050203929F8CB2C709FE50606/0/60588DB2E72DBFDF89F0924A95C774D72EA4C12F.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:ab50::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273909
Signature Algorithm: sha256WithRSAEncryption
39:e6:eb:46:49:76:2d:47:92:29:b0:56:8e:4d:d7:d3:36:c3:
97:50:39:ac:5c:2e:ec:41:e8:ae:fa:02:9b:60:40:1d:b7:94:
c3:89:b5:75:3c:f4:41:e3:dc:7e:09:64:58:79:5b:8f:ec:83:
e3:cb:6b:8a:b1:89:9a:00:16:24:95:a8:55:7a:4d:51:41:c8:
5b:aa:ff:52:5d:22:1d:7e:f1:0e:95:9f:db:f4:ab:0c:a9:93:
bb:f1:4f:f3:e4:a0:ab:6a:2a:5b:60:8a:75:da:22:df:2d:0b:
b5:7f:86:fc:62:e8:00:54:fa:93:58:da:f8:54:f3:ec:14:82:
ab:64:f8:95:c2:9b:d8:87:06:83:74:b6:57:f3:1a:43:3f:89:
5a:17:df:b4:83:29:27:35:5d:9c:d7:ab:e9:68:e9:c5:21:60:
f8:8b:c0:8f:0a:52:62:be:f8:d1:56:d1:e8:60:d3:77:66:f2:
09:2c:6b:70:0d:c4:aa:c1:42:c0:c1:27:5d:37:cb:3c:ee:78:
fb:88:70:53:4e:71:e3:30:44:49:07:ca:fb:77:40:e8:40:f7:
1f:b9:53:08:8b:e7:69:5f:21:43:8e:53:b9:66:64:6f:0b:ae:
05:58:35:65:96:a7:60:24:73:4a:37:e9:fd:6f:45:5d:d7:14:
46:8c:5e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:21:08 2026 by rpki-client