$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B58248DFCF834DEBC85955FE54DE2DE44E802015.cer File: B58248DFCF834DEBC85955FE54DE2DE44E802015.cer (raw, json) Hash identifier: pwimkMnLH8bc3ocJuyao0tnq8ljNfUXTvlgh2uNAacU= Subject key identifier: B5:82:48:DF:CF:83:4D:EB:C8:59:55:FE:54:DE:2D:E4:4E:80:20:15 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 50757A79AA4DE0AC224BF9F666E14F8889D94375 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/321533D2B5F1667CCE4818DF32B5FDE3968D5B5104D5108416AD3C089622C836/0/B58248DFCF834DEBC85955FE54DE2DE44E802015.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/321533D2B5F1667CCE4818DF32B5FDE3968D5B5104D5108416AD3C089622C836/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 17 Jun 2026 23:15:01 +0000 Certificate not after: Wed 16 Jun 2027 23:20:01 +0000 Subordinate resources: AS: 274276 IP: 45.237.64.0/22 IP: 2803:e030::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 Jul 2026 03:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:75:7a:79:aa:4d:e0:ac:22:4b:f9:f6:66:e1:4f:88:89:d9:43:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jun 17 23:15:01 2026 GMT Not After : Jun 16 23:20:01 2027 GMT Subject: CN=B58248DFCF834DEBC85955FE54DE2DE44E802015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:26:4c:2b:4b:d3:41:fa:d4:ef:05:6e:36:5d: ef:87:4c:17:37:5c:94:ce:15:27:19:44:2f:94:06: 08:b3:d7:8a:1c:aa:0d:a3:00:73:f1:00:c0:9b:72: dc:45:7e:f9:c5:04:42:85:45:71:6e:a3:5e:e4:33: a5:63:92:f0:e8:c6:dc:05:88:f1:6b:1a:7d:65:68: d7:0f:85:eb:22:b9:d6:e3:67:9a:f3:4e:13:80:a4: 27:73:cf:b7:e1:ab:5d:71:0a:e0:36:6e:04:e6:4b: fc:ad:8a:b5:cc:03:13:70:a5:98:7b:7d:21:24:eb: bb:c6:50:bd:03:19:77:3e:b0:25:98:8c:6a:ed:68: 79:23:6f:ab:62:fd:99:c3:ec:9d:f9:f2:d0:c4:da: bc:20:c3:d5:dc:c9:11:50:24:1f:81:d5:b0:6d:9e: 2a:2c:de:00:97:65:96:2a:59:a2:51:ed:4a:1d:d9: 00:60:69:b9:ee:5c:fb:6f:f7:b4:a1:3d:dc:dd:62: 3e:34:0c:86:da:01:e9:d4:0e:87:b3:b5:e9:93:d2: 28:a1:d1:67:a0:83:88:8e:a6:99:a5:4a:bc:d6:2f: bb:f8:f3:f9:f0:55:dd:02:af:16:6a:74:3b:dd:60: c2:8f:bb:fd:75:e4:54:60:1e:b7:07:05:2b:52:86: 37:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:82:48:DF:CF:83:4D:EB:C8:59:55:FE:54:DE:2D:E4:4E:80:20:15 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/321533D2B5F1667CCE4818DF32B5FDE3968D5B5104D5108416AD3C089622C836/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/321533D2B5F1667CCE4818DF32B5FDE3968D5B5104D5108416AD3C089622C836/0/B58248DFCF834DEBC85955FE54DE2DE44E802015.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.237.64.0/22 IPv6: 2803:e030::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274276 Signature Algorithm: sha256WithRSAEncryption 28:59:d6:63:2a:df:3b:75:4b:b8:8a:16:a9:e5:5e:87:da:16: 5f:0e:20:22:de:c6:3b:11:db:b0:85:0b:b7:f3:75:68:4f:b6: c4:f4:08:50:58:b1:0e:4d:15:df:de:c0:63:a4:11:f5:5a:dc: 75:57:33:ae:f7:aa:9d:d7:ca:49:7e:81:ba:3b:12:23:e5:aa: 07:ab:a3:ae:b1:81:50:32:31:26:c0:73:4a:1c:58:ae:82:03: 51:b0:c4:4c:91:a5:81:3d:45:1f:9c:b3:de:4a:37:0d:85:e2: 98:70:1e:44:e7:fa:20:2b:a7:d5:45:b5:79:e1:54:b9:15:e1: 7a:e8:8a:e2:21:85:8d:15:26:b4:b7:ed:d0:e2:15:16:33:50: 99:2e:c2:de:45:0f:c5:29:02:78:f0:c3:ba:5e:37:cf:f1:3d: 0f:5a:83:9d:63:d8:14:dc:ea:e6:c1:45:50:79:b1:1c:a4:37: eb:e0:e1:cc:be:47:c4:1f:b8:d2:4f:ab:26:94:8d:28:88:5a: 39:46:90:eb:e2:d4:cc:d1:f5:93:a2:eb:27:e3:64:da:e9:bc: 56:98:ce:f1:45:49:b8:d1:f2:a6:ef:0d:77:26:a9:9b:6d:d4: b5:24:9a:84:45:4a:43:a9:20:19:4b:4b:28:d0:91:91:f7:28: 05:a3:4f:4f -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUUHV6eapN4KwiS/n2ZuFPiInZQ3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA2MTcyMzE1MDFaFw0yNzA2MTYyMzIwMDFaMDMxMTAvBgNV BAMTKEI1ODI0OERGQ0Y4MzRERUJDODU5NTVGRTU0REUyREU0NEU4MDIwMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYJkwrS9NB+tTvBW42Xe+HTBc3 XJTOFScZRC+UBgiz14ocqg2jAHPxAMCbctxFfvnFBEKFRXFuo17kM6VjkvDoxtwF iPFrGn1laNcPhesiudbjZ5rzThOApCdzz7fhq11xCuA2bgTmS/ytirXMAxNwpZh7 fSEk67vGUL0DGXc+sCWYjGrtaHkjb6ti/ZnD7J358tDE2rwgw9XcyRFQJB+B1bBt nios3gCXZZYqWaJR7Uod2QBgabnuXPtv97ShPdzdYj40DIbaAenUDoeztemT0iih 0Wegg4iOppmlSrzWL7v48/nwVd0CrxZqdDvdYMKPu/115FRgHrcHBStShjcbAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS1gkjfz4NN68hZ Vf5U3i3kToAgFTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzIxNTMzRDJCNUYxNjY3Q0NFNDgxOERG MzJCNUZERTM5NjhENUI1MTA0RDUxMDg0MTZBRDNDMDg5NjIyQzgzNi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zMjE1MzNEMkI1RjE2NjdDQ0U0ODE4REYzMkI1RkRFMzk2OEQ1QjUxMDRE NTEwODQxNkFEM0MwODk2MjJDODM2LzAvQjU4MjQ4REZDRjgzNERFQkM4NTk1NUZF NTRERTJERTQ0RTgwMjAxNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLe1AMA0EAgAC MAcDBQAoA+AwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQvZDANBgkqhkiG9w0B AQsFAAOCAQEAKFnWYyrfO3VLuIoWqeVeh9oWXw4gIt7GOxHbsIULt/N1aE+2xPQI UFixDk0V397AY6QR9VrcdVczrveqndfKSX6BujsSI+WqB6ujrrGBUDIxJsBzShxY roIDUbDETJGlgT1FH5yz3ko3DYXimHAeROf6ICun1UW1eeFUuRXheuiK4iGFjRUm tLft0OIVFjNQmS7C3kUPxSkCePDDul43z/E9D1qDnWPYFNzq5sFFUHmxHKQ36+Dh zL5HxB+40k+rJpSNKIhaOUaQ6+LUzNH1k6LrJ+Nk2um8VpjO8UVJuNHypu8Ndyap m23UtSSahEVKQ6kgGUtLKNCRkfcoBaNPTw== -----END CERTIFICATE-----Generated at Thu Jul 23 23:26:22 2026 by rpki-client