
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer
File: BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer (raw, json)
Hash identifier: KyNJEntJnINZSbLolvvjNRNDTijc7z14BC4lzZLaVEQ=
Subject key identifier: BC:8F:94:CC:F6:EF:DE:44:04:33:A6:CA:0A:4F:42:5A:3C:74:A1:A4
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 5B5FA26A14F960B82E6F7669C33D8AAEBDD53961
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Thu 29 Jan 2026 02:06:57 +0000
Certificate not after: Thu 28 Jan 2027 02:11:57 +0000
Subordinate resources: AS: 265693
IP: 143.137.96.0/22
IP: 2803:7640::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 22 Feb 2026 23:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:5f:a2:6a:14:f9:60:b8:2e:6f:76:69:c3:3d:8a:ae:bd:d5:39:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 29 02:06:57 2026 GMT
Not After : Jan 28 02:11:57 2027 GMT
Subject: CN=BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2d:a3:0e:10:57:d9:14:a9:cc:09:60:a3:97:
d6:0c:9b:e5:23:d7:1a:7c:3c:24:91:d2:33:d0:e8:
91:1f:4c:9d:42:00:0d:90:7a:53:a5:a0:f7:00:ef:
0f:e3:c2:93:4e:f1:bc:66:22:3b:21:d2:00:0b:0d:
3c:4b:2d:29:4a:68:80:d9:bd:bf:61:8f:cb:78:c6:
ad:af:68:43:63:db:20:45:13:67:34:8f:2c:f9:eb:
91:8f:05:02:17:f8:ab:b8:16:86:3d:2e:ee:82:30:
1e:63:3e:49:c5:b1:15:51:23:ad:ec:14:2d:c5:7c:
c0:05:fb:f9:f6:54:ee:e9:5f:67:47:d2:8b:fd:29:
c4:30:1e:68:18:af:15:01:2f:ed:f8:b5:b7:34:e2:
86:6c:62:fe:12:26:cf:ac:6e:ff:57:9a:7f:9d:3f:
47:77:4d:62:65:99:53:9b:c1:d7:e8:d8:6b:7f:94:
8f:f3:5b:fa:47:e0:75:d3:cf:a1:ec:a1:af:4e:34:
50:27:57:b0:32:3c:f2:1b:e1:4b:45:9d:98:71:38:
66:cb:e3:55:52:3f:70:30:85:47:a5:c2:29:d4:61:
48:ec:6c:15:f6:f4:0b:5a:fb:77:d5:8f:2d:57:20:
26:54:fd:bd:21:f2:c8:59:97:1a:b3:23:25:1f:ad:
62:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BC:8F:94:CC:F6:EF:DE:44:04:33:A6:CA:0A:4F:42:5A:3C:74:A1:A4
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.137.96.0/22
IPv6:
2803:7640::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
265693
Signature Algorithm: sha256WithRSAEncryption
1d:27:7a:9c:61:80:86:1d:fa:86:10:53:74:7f:27:62:89:78:
cf:37:9c:d2:39:4f:6f:96:a4:51:53:bc:33:a5:e0:a3:73:66:
e2:76:e2:fa:f2:ef:fa:9c:d0:24:4f:01:2d:71:2b:fc:83:fd:
aa:dc:05:3a:0e:16:14:89:0f:c8:14:80:9a:05:2b:25:70:cd:
8a:11:e8:b2:7c:cf:b1:07:d5:0e:5c:29:88:a0:fc:7a:2e:47:
a3:e4:b0:3f:64:c4:2b:21:66:7b:37:13:f8:c9:c3:2e:56:c5:
59:c7:93:f6:d4:7e:1f:cc:d3:42:bf:86:3a:1f:ae:0f:77:62:
94:1e:57:02:7d:85:ed:f9:ff:d2:31:7b:db:cb:f3:b7:8c:70:
70:56:ee:6f:75:85:43:91:19:26:6d:75:fb:76:7d:79:95:4a:
1e:bc:8c:0a:d1:24:6a:c4:dc:51:a0:4c:bc:50:d4:94:b8:22:
47:ad:2e:8e:a6:fb:fa:d3:89:f2:12:ba:f1:11:02:ba:9d:81:
91:5c:32:37:3f:0c:23:5b:27:f5:24:e3:62:6a:11:72:09:18:
ec:3f:5a:e4:66:08:d2:fe:78:d0:af:63:4c:8a:36:34:40:86:
ef:0e:a3:48:c6:4a:2b:a0:a1:07:ef:41:59:f0:d1:0b:2c:b2:
47:68:98:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:49:37 2026 by rpki-client