$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/215E3B4AF91411C78298DA8F2841F086743DEF91.cer File: 215E3B4AF91411C78298DA8F2841F086743DEF91.cer (raw, json) Hash identifier: 658nbaVnaA1bI7bckuaxfgZZehonzARvAFOvoMxIS9k= Subject key identifier: 21:5E:3B:4A:F9:14:11:C7:82:98:DA:8F:28:41:F0:86:74:3D:EF:91 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 5115A259F7F6D060633E87A422B7842860ADB5A7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/0F86D537A26EC915B95146BE9BDBE65B165A39364801937ACC26B2D02ACB1D4E/0/215E3B4AF91411C78298DA8F2841F086743DEF91.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/0F86D537A26EC915B95146BE9BDBE65B165A39364801937ACC26B2D02ACB1D4E/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 15 May 2026 00:30:01 +0000 Certificate not after: Fri 14 May 2027 00:35:01 +0000 Subordinate resources: AS: 267786 IP: 45.171.224.0/22 IP: 2803:8fa0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 17 Jun 2026 16:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:15:a2:59:f7:f6:d0:60:63:3e:87:a4:22:b7:84:28:60:ad:b5:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: May 15 00:30:01 2026 GMT Not After : May 14 00:35:01 2027 GMT Subject: CN=215E3B4AF91411C78298DA8F2841F086743DEF91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:95:05:fd:37:8e:7e:9f:e5:b4:9a:3e:0a:f5: 08:24:dc:da:bb:b2:ae:66:87:c3:56:b4:98:a1:c4: 8c:74:ca:d5:0e:f3:a0:52:c6:ff:f9:2e:82:e3:90: 05:6d:e6:9b:ef:9e:bf:97:bd:23:82:3c:43:d3:47: 9d:b9:cf:7d:99:60:93:04:57:20:6a:d3:39:90:08: 2f:75:c5:f1:2f:44:d6:3e:8e:78:d0:17:d5:19:90: 53:7e:fa:7d:8c:c3:e0:e6:37:27:f2:58:c4:ca:14: cd:71:e9:ec:23:f9:b2:23:7c:bb:d1:ec:ba:a1:96: 1d:35:33:e8:51:94:d1:a2:52:73:5a:45:41:f6:c0: 10:24:23:4a:c3:e7:d3:13:8e:66:15:fd:93:0b:d8: e8:2e:35:72:8e:54:55:18:53:9a:87:8a:5c:53:f1: 6e:f4:cf:6f:c0:b3:6e:09:2a:97:ad:31:ba:81:16: c8:ca:a0:29:53:bd:72:21:32:18:fb:2d:62:0f:33: 9a:83:a3:b4:28:9b:5a:8f:6c:b7:06:99:45:db:da: ea:67:6e:88:88:e7:a1:f1:63:b2:38:88:c5:2f:96: b9:0e:4a:34:df:b7:b9:a7:f7:98:34:98:1a:f2:8c: c0:c0:94:ef:54:73:1e:9e:77:45:22:62:de:d9:fb: fc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:5E:3B:4A:F9:14:11:C7:82:98:DA:8F:28:41:F0:86:74:3D:EF:91 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0F86D537A26EC915B95146BE9BDBE65B165A39364801937ACC26B2D02ACB1D4E/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0F86D537A26EC915B95146BE9BDBE65B165A39364801937ACC26B2D02ACB1D4E/0/215E3B4AF91411C78298DA8F2841F086743DEF91.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.171.224.0/22 IPv6: 2803:8fa0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267786 Signature Algorithm: sha256WithRSAEncryption 35:2e:bc:e7:2f:55:62:62:fe:26:bc:06:4f:81:e4:f8:7d:55: d0:22:5c:31:22:07:dd:b7:ef:1b:32:f1:a7:6d:61:2c:20:76: a1:d8:63:cf:56:2d:a8:d5:f8:86:cf:e3:dd:f6:2a:66:8c:87: 97:df:7d:7c:b8:59:ba:8e:4c:24:14:d9:ce:cd:17:65:ce:d4: 5b:ef:20:90:c8:c7:18:e9:88:ce:da:52:ea:96:fc:70:f2:57: e5:0a:2b:ea:42:69:8b:22:3a:3e:f9:01:39:36:29:d7:09:06: a6:9f:46:71:b7:62:c8:99:5c:a0:43:8d:38:b7:27:93:a6:42: 2a:4e:42:70:ae:a1:a1:0a:18:c7:6c:7d:33:b1:9e:60:cb:76: 85:d2:75:55:6c:86:c3:d6:04:3d:10:e5:ea:83:12:eb:a9:15: 94:4f:c7:bd:be:78:2c:71:c0:d5:be:0b:0f:21:8b:26:58:28: 96:86:54:92:58:64:10:88:91:e4:f7:fa:86:c4:02:0b:61:6a: 2d:5a:65:2e:be:2a:6e:ac:44:f3:94:c5:66:23:3d:a6:47:b9: a0:a9:c6:ed:dd:f2:16:95:8b:d3:50:2e:05:c1:f3:f3:83:9e: 18:69:b4:bb:82:08:08:cd:96:13:09:d4:ef:88:9c:40:32:88: f0:be:5e:9b -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUURWiWff20GBjPoekIreEKGCttacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA1MTUwMDMwMDFaFw0yNzA1MTQwMDM1MDFaMDMxMTAvBgNV BAMTKDIxNUUzQjRBRjkxNDExQzc4Mjk4REE4RjI4NDFGMDg2NzQzREVGOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnlQX9N45+n+W0mj4K9Qgk3Nq7 sq5mh8NWtJihxIx0ytUO86BSxv/5LoLjkAVt5pvvnr+XvSOCPEPTR525z32ZYJME VyBq0zmQCC91xfEvRNY+jnjQF9UZkFN++n2Mw+DmNyfyWMTKFM1x6ewj+bIjfLvR 7Lqhlh01M+hRlNGiUnNaRUH2wBAkI0rD59MTjmYV/ZML2OguNXKOVFUYU5qHilxT 8W70z2/As24JKpetMbqBFsjKoClTvXIhMhj7LWIPM5qDo7Qom1qPbLcGmUXb2upn boiI56HxY7I4iMUvlrkOSjTft7mn95g0mBryjMDAlO9Ucx6ed0UiYt7Z+/ypAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhXjtK+RQRx4KY 2o8oQfCGdD3vkTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMEY4NkQ1MzdBMjZFQzkxNUI5NTE0NkJF OUJEQkU2NUIxNjVBMzkzNjQ4MDE5MzdBQ0MyNkIyRDAyQUNCMUQ0RS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wRjg2RDUzN0EyNkVDOTE1Qjk1MTQ2QkU5QkRCRTY1QjE2NUEzOTM2NDgw MTkzN0FDQzI2QjJEMDJBQ0IxRDRFLzAvMjE1RTNCNEFGOTE0MTFDNzgyOThEQThG Mjg0MUYwODY3NDNERUY5MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLavgMA0EAgAC MAcDBQAoA4+gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQWCjANBgkqhkiG9w0B AQsFAAOCAQEANS685y9VYmL+JrwGT4Hk+H1V0CJcMSIH3bfvGzLxp21hLCB2odhj z1YtqNX4hs/j3fYqZoyHl999fLhZuo5MJBTZzs0XZc7UW+8gkMjHGOmIztpS6pb8 cPJX5Qor6kJpiyI6PvkBOTYp1wkGpp9GcbdiyJlcoEONOLcnk6ZCKk5CcK6hoQoY x2x9M7GeYMt2hdJ1VWyGw9YEPRDl6oMS66kVlE/Hvb54LHHA1b4LDyGLJlgoloZU klhkEIiR5Pf6hsQCC2FqLVplLr4qbqxE85TFZiM9pke5oKnG7d3yFpWL01AuBcHz 84OeGGm0u4IICM2WEwnU74icQDKI8L5emw== -----END CERTIFICATE-----Generated at Sat Jun 13 20:16:53 2026 by rpki-client