This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FE17014E75975FCF1540FF846074AB18777F866.cer
File: 2FE17014E75975FCF1540FF846074AB18777F866.cer (raw, json)
Hash identifier: Nm2zUi1YEMJ3qWTaZHZfc+SXs1jGAnfiPkN0MtNHVAA=
Subject key identifier: 2F:E1:70:14:E7:59:75:FC:F1:54:0F:F8:46:07:4A:B1:87:77:F8:66
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 696CE752D0EC5FCA8AB8D2ACBDEADB192D9A9185
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/C761092FF4F4177DB34837A5B09415B478BD4FDB01C797383F0E83A899DC480A/0/2FE17014E75975FCF1540FF846074AB18777F866.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/C761092FF4F4177DB34837A5B09415B478BD4FDB01C797383F0E83A899DC480A/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 22:14:46 +0000
Certificate not after: Wed 27 Jan 2027 22:19:46 +0000
Subordinate resources: AS: 264659
IP: 179.43.104.0/21
IP: 190.211.140.0/22
IP: 2800:ae0::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:6c:e7:52:d0:ec:5f:ca:8a:b8:d2:ac:bd:ea:db:19:2d:9a:91:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 22:14:46 2026 GMT
Not After : Jan 27 22:19:46 2027 GMT
Subject: CN=2FE17014E75975FCF1540FF846074AB18777F866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ce:b8:a0:67:bc:cc:5f:c5:1d:9c:1f:d6:ce:
06:44:c8:5b:bf:eb:c0:aa:c7:84:47:fa:1f:78:5c:
ff:92:11:5e:21:55:e1:16:db:f3:ca:98:67:1c:15:
54:6b:c8:06:37:8e:27:32:0b:de:c0:e4:c7:f1:0f:
22:4b:f4:c1:d8:5b:96:10:30:f8:31:e0:9f:5d:f7:
b7:d3:db:a0:18:21:c2:17:a8:6d:69:31:b9:f3:5f:
e4:d8:51:ce:d6:76:a5:f9:72:9d:16:f4:b1:a5:86:
e0:15:79:61:51:8d:46:18:17:76:ef:f8:54:4f:ee:
77:d9:26:9b:74:2b:8c:1b:a5:94:e9:1c:03:19:86:
49:3e:d5:9d:c8:60:39:01:ea:cf:a2:d0:cc:60:9a:
c3:52:a7:c5:98:a5:4f:b4:7c:47:9a:e0:ac:e3:e6:
11:66:12:ed:2b:b2:8e:d2:f0:e7:43:80:fb:90:ec:
0b:97:5d:cf:02:b6:38:e5:76:0d:e2:d1:c9:7a:53:
ca:07:1e:c5:df:f9:c7:12:99:55:6b:b1:6c:07:fd:
e4:2e:c6:81:9e:9b:7b:79:af:48:b5:81:0d:5b:01:
ea:09:d4:ee:ea:79:92:b4:87:19:d6:b3:76:30:16:
4a:8f:0c:ca:4e:83:8f:5c:44:c7:82:33:50:0c:06:
5e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2F:E1:70:14:E7:59:75:FC:F1:54:0F:F8:46:07:4A:B1:87:77:F8:66
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C761092FF4F4177DB34837A5B09415B478BD4FDB01C797383F0E83A899DC480A/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C761092FF4F4177DB34837A5B09415B478BD4FDB01C797383F0E83A899DC480A/0/2FE17014E75975FCF1540FF846074AB18777F866.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.43.104.0/21
190.211.140.0/22
IPv6:
2800:ae0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
264659
Signature Algorithm: sha256WithRSAEncryption
4b:a0:c1:e8:d4:e6:a5:c6:40:0c:39:81:87:74:93:00:ce:71:
19:5c:b6:b6:a2:fd:36:e2:dc:27:ba:e8:bb:ad:38:73:5d:01:
a9:d5:f6:40:35:f7:86:f2:4d:d9:a3:10:5d:9d:a7:63:a3:d6:
20:a4:47:b6:c1:2b:42:3c:3d:fb:a3:fa:65:33:d2:ff:49:00:
a1:dc:dc:7c:6c:58:4a:cb:04:a0:aa:da:64:23:ee:03:64:04:
b8:81:d7:d6:47:31:06:c3:0c:e2:01:d3:38:e8:45:1d:82:a3:
c0:99:82:2f:5f:e3:a8:57:fd:8b:2a:57:ff:bb:74:9a:c6:ea:
c6:63:f3:71:22:8a:28:a2:1a:23:84:a6:00:2a:95:29:2c:63:
91:89:d9:6c:68:70:95:ad:1f:4e:09:f7:5c:97:cb:01:28:71:
65:05:17:e3:4f:75:c6:d6:38:45:bb:08:26:23:a0:4a:45:ec:
98:b1:a5:42:22:99:2d:7a:13:db:ea:d1:06:f4:c0:b7:84:68:
10:2d:fc:ad:1f:ba:03:f9:93:96:c4:f8:ed:29:14:06:68:9d:
02:cb:fe:c6:16:99:41:51:ae:3f:44:c6:1b:c4:52:b8:39:46:
cf:b7:64:46:32:17:d1:2e:29:bf:3e:4c:be:d0:4f:60:29:a4:
c3:6c:bc:ca
-----BEGIN CERTIFICATE-----
MIIGqzCCBZOgAwIBAgIUaWznUtDsX8qKuNKsverbGS2akYUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE
NjA1ODY3ODAeFw0yNjAxMjgyMjE0NDZaFw0yNzAxMjcyMjE5NDZaMDMxMTAvBgNV
BAMTKDJGRTE3MDE0RTc1OTc1RkNGMTU0MEZGODQ2MDc0QUIxODc3N0Y4NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUzrigZ7zMX8UdnB/WzgZEyFu/
68Cqx4RH+h94XP+SEV4hVeEW2/PKmGccFVRryAY3jicyC97A5MfxDyJL9MHYW5YQ
MPgx4J9d97fT26AYIcIXqG1pMbnzX+TYUc7WdqX5cp0W9LGlhuAVeWFRjUYYF3bv
+FRP7nfZJpt0K4wbpZTpHAMZhkk+1Z3IYDkB6s+i0MxgmsNSp8WYpU+0fEea4Kzj
5hFmEu0rso7S8OdDgPuQ7AuXXc8Ctjjldg3i0cl6U8oHHsXf+ccSmVVrsWwH/eQu
xoGem3t5r0i1gQ1bAeoJ1O7qeZK0hxnWs3YwFkqPDMpOg49cRMeCM1AMBl6rAgMB
AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQv4XAU51l1/PFU
D/hGB0qxh3f4ZjAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy
NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzc2MTA5MkZGNEY0MTc3REIzNDgzN0E1
QjA5NDE1QjQ3OEJENEZEQjAxQzc5NzM4M0YwRTgzQTg5OURDNDgwQS8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy9DNzYxMDkyRkY0RjQxNzdEQjM0ODM3QTVCMDk0MTVCNDc4QkQ0RkRCMDFD
Nzk3MzgzRjBFODNBODk5REM0ODBBLzAvMkZFMTcwMTRFNzU5NzVGQ0YxNTQwRkY4
NDYwNzRBQjE4Nzc3Rjg2Ni5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDsytoAwQCvtOM
MA0EAgACMAcDBQAoAArgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQJ0zANBgkq
hkiG9w0BAQsFAAOCAQEAS6DB6NTmpcZADDmBh3STAM5xGVy2tqL9NuLcJ7rou604
c10BqdX2QDX3hvJN2aMQXZ2nY6PWIKRHtsErQjw9+6P6ZTPS/0kAodzcfGxYSssE
oKraZCPuA2QEuIHX1kcxBsMM4gHTOOhFHYKjwJmCL1/jqFf9iypX/7t0msbqxmPz
cSKKKKIaI4SmACqVKSxjkYnZbGhwla0fTgn3XJfLAShxZQUX4091xtY4RbsIJiOg
SkXsmLGlQiKZLXoT2+rRBvTAt4RoEC38rR+6A/mTlsT47SkUBmidAsv+xhaZQVGu
P0TGG8RSuDlGz7dkRjIX0S4pvz5MvtBPYCmkw2y8yg==
-----END CERTIFICATE-----
Generated at Thu Jan 29 02:11:33 2026 by rpki-client