This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
File: 22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer (raw, json)
Hash identifier: fWMVIqj3br9V3198Q54Z+0Ft+ai/SmXWk4SKlBFIERo=
Subject key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 2A8AA053F7E489C7B0283E445E3D470AEF032F62
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 27 Jan 2026 17:50:42 +0000
Certificate not after: Tue 26 Jan 2027 17:55:42 +0000
Subordinate resources: AS: 4270
IP: 170.210.0.0/16
IP: 2800:110::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:8a:a0:53:f7:e4:89:c7:b0:28:3e:44:5e:3d:47:0a:ef:03:2f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 27 17:50:42 2026 GMT
Not After : Jan 26 17:55:42 2027 GMT
Subject: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:67:9f:e8:a4:fe:09:2b:fe:92:dd:a9:93:7d:
ae:a8:c5:b0:32:ea:37:be:1a:ed:5e:c9:88:ab:07:
ba:70:ba:7d:ed:46:04:27:cb:25:24:49:6f:fb:bf:
6b:d4:34:46:2d:03:70:15:1f:35:ee:46:58:5a:f5:
39:4b:7e:82:f0:73:ae:97:6d:58:4f:6b:d2:f0:fb:
12:f4:74:d8:26:43:83:f4:0e:0b:b9:16:c9:d2:73:
2a:db:7e:d6:74:27:65:af:87:9d:eb:f2:c9:ff:66:
b6:da:74:12:6a:8f:66:85:72:49:a5:57:e0:47:44:
e7:60:f7:76:95:97:ea:c2:95:83:5b:75:1c:57:7c:
2f:98:f6:e4:bf:ca:1f:a1:60:4a:de:61:fb:a8:aa:
7b:fc:b2:70:20:24:8f:90:2a:d2:39:0d:27:d2:a9:
74:c8:53:5f:62:63:49:11:0a:85:a5:ce:5a:a0:1b:
f9:55:6f:07:89:e4:d4:ba:4f:b9:35:e4:f9:3f:07:
49:cb:17:42:1f:5e:e9:0b:29:ff:62:2c:d0:11:66:
ac:57:42:7b:76:ff:2d:8f:18:88:80:e2:4e:e5:c1:
fb:04:a0:35:15:7f:b5:a8:ee:c4:95:83:74:da:87:
28:6e:c6:22:dc:b3:6c:c9:30:d3:66:50:ea:14:13:
f0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.0.0/16
IPv6:
2800:110::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4270
Signature Algorithm: sha256WithRSAEncryption
15:28:23:0e:35:00:73:86:d0:dd:66:8c:10:db:55:ff:33:57:
f8:16:2e:3d:d3:04:a4:d6:d3:76:5d:f3:5f:0f:e7:3c:7c:8d:
bd:42:37:4c:88:0e:d3:65:0e:d0:23:e7:4f:74:75:b4:da:0e:
50:cb:b4:18:76:62:78:7d:bb:33:41:7c:6b:52:7f:4c:5c:9f:
0c:25:73:0a:78:e8:e7:ad:07:eb:00:68:1d:d7:bb:88:fe:e8:
59:02:90:e7:53:34:d0:58:78:81:65:24:de:04:d9:e2:ea:ae:
65:58:cd:15:89:c0:8f:bd:bf:8e:7d:27:24:4a:62:cc:31:ca:
f8:1e:e0:3f:6c:22:1e:e7:3d:60:a4:e8:e8:df:a7:d4:df:61:
79:36:51:91:d8:c5:ec:b0:75:27:04:ad:43:53:4a:d5:ac:d2:
c9:dc:dc:0f:f6:cb:67:2d:3a:04:29:8f:2a:61:e1:99:4a:42:
89:a0:a7:36:0e:9a:53:74:1f:44:35:44:0d:ab:86:97:0e:7c:
78:2f:af:be:4c:58:b7:43:9c:88:7e:09:69:bc:27:c5:74:24:
b6:22:5d:a0:3a:74:f8:6a:4c:71:6d:4b:91:e4:ae:4e:0f:0e:
5a:7c:ce:b4:d9:38:ea:75:a8:15:cf:07:8b:e8:75:8d:91:c5:
2c:8f:76:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 07:20:46 2026 by rpki-client