
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8515BA177D973C9F02F4F65B1263F5127DF7AA64.cer
File: 8515BA177D973C9F02F4F65B1263F5127DF7AA64.cer (raw, json)
Hash identifier: kFGORVtoCTlQl5R4FNzRlLrQqKakjVYmE6CO7QrNwiQ=
Subject key identifier: 85:15:BA:17:7D:97:3C:9F:02:F4:F6:5B:12:63:F5:12:7D:F7:AA:64
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 7528307B0B9E18FFF9A3215CEB437CD7B180E786
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/3EAE9A5F699793CFBACA9E2BBDA8BA2733346FC66D487F8C683F72D81440D9E2/0/8515BA177D973C9F02F4F65B1263F5127DF7AA64.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/3EAE9A5F699793CFBACA9E2BBDA8BA2733346FC66D487F8C683F72D81440D9E2/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 11:37:26 +0000
Certificate not after: Wed 27 Jan 2027 11:42:26 +0000
Subordinate resources: IP: 45.237.176.0/22
IP: 2803:94a0::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 24 Feb 2026 02:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:28:30:7b:0b:9e:18:ff:f9:a3:21:5c:eb:43:7c:d7:b1:80:e7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 11:37:26 2026 GMT
Not After : Jan 27 11:42:26 2027 GMT
Subject: CN=8515BA177D973C9F02F4F65B1263F5127DF7AA64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:c6:5d:de:58:32:b0:1d:08:6e:11:29:e5:
78:0e:4e:7c:82:30:d0:bc:e9:c8:8c:d7:01:83:1d:
a9:d3:a4:d4:45:86:b9:c0:af:30:a9:10:f4:22:6f:
de:ab:59:3f:58:c4:97:16:dc:f0:81:37:0b:26:fb:
be:dd:c3:58:62:fc:23:06:37:92:c6:b8:97:23:45:
79:19:07:27:49:5c:97:29:70:33:88:66:30:1e:08:
56:66:a9:57:45:6f:e0:3b:7c:a2:73:39:35:92:c2:
e3:87:e4:50:76:a7:85:0c:b6:d7:27:bd:b5:e5:27:
71:e4:4f:b6:c2:55:1c:da:c0:c7:2e:a1:f6:e9:29:
8d:70:ee:0f:85:08:06:37:e7:a6:63:6c:e0:5c:ca:
15:e3:30:65:8d:6b:d1:37:6c:1b:53:54:d8:8e:1c:
9a:b4:b7:e3:b9:3f:a3:2e:e0:d6:9c:81:79:11:54:
61:2f:97:73:00:3f:63:89:60:59:dc:67:13:4e:50:
b1:3f:b0:cd:78:6c:25:8f:95:d9:23:7f:bd:ba:93:
57:b5:71:02:cc:18:56:ab:aa:1c:f9:84:5d:90:96:
6b:9f:8b:8d:3e:9a:74:ca:94:10:8e:94:2a:02:30:
36:97:b3:31:35:6d:cd:96:e9:95:d9:58:61:51:df:
cf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
85:15:BA:17:7D:97:3C:9F:02:F4:F6:5B:12:63:F5:12:7D:F7:AA:64
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3EAE9A5F699793CFBACA9E2BBDA8BA2733346FC66D487F8C683F72D81440D9E2/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3EAE9A5F699793CFBACA9E2BBDA8BA2733346FC66D487F8C683F72D81440D9E2/0/8515BA177D973C9F02F4F65B1263F5127DF7AA64.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.176.0/22
IPv6:
2803:94a0::/32
Signature Algorithm: sha256WithRSAEncryption
1b:aa:c9:dc:c5:7f:55:b1:b6:e8:1d:f8:6e:90:2f:4b:d9:be:
2b:45:0c:0e:75:e6:73:a2:02:9a:e9:ba:f4:a8:ad:97:a1:0f:
fa:09:02:0e:f0:2f:51:21:cb:cd:d2:9e:3b:0b:4d:6a:8c:1b:
ff:d5:fc:37:a7:a9:c7:99:ab:be:9b:fa:60:c1:7e:23:8e:2f:
7b:22:bc:f4:9f:a6:dd:7f:a5:9c:cd:42:b8:82:15:ea:3e:1b:
ad:5d:f5:6b:50:34:87:13:a9:3e:55:90:d3:25:59:67:1b:15:
72:f4:10:93:dc:45:65:a3:11:15:21:e2:ff:4c:df:51:8b:a5:
b0:13:b0:3e:0a:d5:50:91:5b:00:01:25:98:0f:64:1a:b6:34:
0d:fb:73:0f:06:29:b4:7b:92:6d:73:c5:87:49:81:cf:56:b5:
1c:ab:3a:0f:11:c7:bb:36:f3:e1:f5:e2:f4:77:e2:fe:a8:ec:
9d:4e:62:c7:92:6b:c5:f7:a1:31:8a:19:6a:8a:e3:31:20:d4:
da:4d:2f:bf:a4:5f:be:89:6f:ce:a4:5c:34:8d:f5:02:36:30:
d7:b0:8d:56:d1:c0:be:fc:50:0d:06:bc:8f:b0:ad:7c:c2:bd:
04:9e:da:58:b8:3a:53:fb:d7:a8:3d:de:61:2f:21:45:fa:4e:
7c:e6:f8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 01:42:53 2026 by rpki-client