This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer File: 8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer (raw, json) Hash identifier: TyyYVkJAVvOC1s83kn5gs5Pqk3/RfcVO/lvTAKnT5VA= Subject key identifier: 8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 75D49908F8B6B8B631F8787B6BA7A1FEB8E971A0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 20:50:26 +0000 Certificate not after: Tue 26 Jan 2027 20:55:26 +0000 Subordinate resources: AS: 17072 AS: 22884 AS: 28414 IP: 138.186.28.0/22 IP: 148.230.128.0/17 IP: 186.96.0.0/18 IP: 186.96.128.0/18 IP: 187.188.0.0 -- 187.191.63.255 IP: 187.251.96.0 -- 187.251.159.255 IP: 187.251.192.0/18 IP: 189.201.0.0/17 IP: 189.203.0.0/16 IP: 200.34.221.0 -- 200.34.222.255 IP: 200.76.64.0/20 IP: 201.149.128.0/17 IP: 2806:2f0::/32 IP: 2806:380::/27 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Feb 2026 15:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d4:99:08:f8:b6:b8:b6:31:f8:78:7b:6b:a7:a1:fe:b8:e9:71:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 27 20:50:26 2026 GMT Not After : Jan 26 20:55:26 2027 GMT Subject: CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d9:c5:8f:76:47:3c:6e:d5:57:75:82:02:a0: bc:bc:9e:e6:d6:fb:7e:bc:12:6b:10:b4:9c:c1:8f: ca:7f:d8:9c:38:b7:49:55:fd:68:84:98:e4:8c:db: be:58:c3:1a:2a:ab:4a:96:4a:fc:70:e8:4a:a6:b8: 1e:2b:db:19:ae:89:ba:46:97:2c:a1:d5:63:66:b1: 4c:b5:61:00:28:0e:f2:6b:e3:86:1e:4f:dc:04:ab: 8b:17:04:35:53:43:e1:1c:ae:c7:b2:af:24:cc:e0: 06:3b:11:5c:df:84:c5:84:45:2a:1c:b2:13:a5:b1: 2d:6b:66:a3:83:b5:60:7e:73:7c:25:13:eb:7b:63: 9f:0e:e1:e0:9f:fa:4c:97:62:5a:0e:fe:ed:07:62: c6:06:66:2f:e5:f9:ef:aa:1a:e3:79:9b:cc:91:2b: 2b:7c:ac:f6:78:6c:35:0a:52:ba:8d:56:ce:17:92: 33:dc:af:73:ec:f4:bb:ef:fc:23:17:5b:c0:11:a0: da:e9:87:97:4c:f7:c8:17:8b:cd:f5:a5:f5:08:d2: b7:65:3e:5f:a0:e0:6c:74:70:f9:fb:a6:04:68:d7: 8d:0a:ca:42:20:3b:8a:95:6d:1a:d9:86:02:59:d5: 77:e1:25:8d:97:ae:22:2e:0c:a8:72:39:3b:8b:85: 62:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.28.0/22 148.230.128.0/17 186.96.0.0/18 186.96.128.0/18 187.188.0.0-187.191.63.255 187.251.96.0-187.251.159.255 187.251.192.0/18 189.201.0.0/17 189.203.0.0/16 200.34.221.0-200.34.222.255 200.76.64.0/20 201.149.128.0/17 IPv6: 2806:2f0::/32 2806:380::/27 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17072 22884 28414 Signature Algorithm: sha256WithRSAEncryption 62:a1:d1:38:a6:3b:78:21:5d:91:99:f3:bf:b6:60:06:57:7b: 08:f9:10:17:c9:05:f8:b2:d4:0f:af:f0:36:76:7d:72:49:25: a3:1c:ba:5f:0b:64:67:dd:05:b9:5c:af:e7:e9:ce:3e:f5:24: 18:b3:d2:9f:0b:1a:2c:f6:52:49:47:95:9b:70:a6:b6:8f:44: 86:28:8d:28:be:90:ac:e0:95:21:ab:b4:5c:f8:f2:f3:da:f5: 0e:12:5c:5d:e8:bb:07:46:94:22:53:2c:4b:bb:89:e0:64:17: f5:05:30:e4:1e:e6:8b:27:51:3e:d0:e6:9d:2c:54:86:8c:5a: f4:b4:f0:b0:ac:6d:36:22:a0:31:96:de:28:6c:ec:6e:b6:90: 5a:e1:6c:31:7f:95:3a:86:fd:76:d7:3b:72:73:ea:fd:08:a7: 70:9f:b1:aa:7f:b4:eb:aa:2a:4d:0f:0d:0e:63:0f:df:50:c5: b5:a1:13:b3:72:89:fb:a1:d8:87:e3:a1:be:39:4c:dd:4a:27: 06:a7:02:c6:1c:4c:21:50:75:8a:62:bf:3e:2b:9b:4a:5e:b8: d6:2a:2e:70:b7:f7:67:4d:75:a6:be:c9:f9:53:56:84:32:40: 4e:d5:8f:43:4a:77:69:17:52:a5:70:63:e5:5f:cc:64:e0:8f: 2a:30:14:73 -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUddSZCPi2uLYx+Hh7a6eh/rjpcaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjcyMDUwMjZaFw0yNzAxMjYyMDU1MjZaMDMxMTAvBgNV BAMTKDhBQUYxQzMxMkMyNDExMjUyQzdGNzc2M0EyNUM5NzVGNThBQTBCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi2cWPdkc8btVXdYICoLy8nubW +368EmsQtJzBj8p/2Jw4t0lV/WiEmOSM275Ywxoqq0qWSvxw6EqmuB4r2xmuibpG lyyh1WNmsUy1YQAoDvJr44YeT9wEq4sXBDVTQ+EcrseyryTM4AY7EVzfhMWERSoc shOlsS1rZqODtWB+c3wlE+t7Y58O4eCf+kyXYloO/u0HYsYGZi/l+e+qGuN5m8yR Kyt8rPZ4bDUKUrqNVs4XkjPcr3Ps9Lvv/CMXW8ARoNrph5dM98gXi831pfUI0rdl Pl+g4Gx0cPn7pgRo140KykIgO4qVbRrZhgJZ1XfhJY2XriIuDKhyOTuLhWJfAgMB AAGjggQWMIIEEjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSKrxwxLCQRJSx/ d2OiXJdfWKoL/zAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTBCRjlFMDYzMjk0QzczNUI4MzVBRUFF MTU4MTZERjA3NDk3NjIxRDIzMTA0MDlDNTc3MjlBQTY4Rjc3M0NCNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BMEJGOUUwNjMyOTRDNzM1QjgzNUFFQUUxNTgxNkRGMDc0OTc2MjFEMjMx MDQwOUM1NzcyOUFBNjhGNzczQ0I0LzAvOEFBRjFDMzEyQzI0MTEyNTJDN0Y3NzYz QTI1Qzk3NUY1OEFBMEJGRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwZAQCAAEwXgMEAoq6HAMEB5Tm gAMEBrpgAAMEBrpggDALAwMCu7wDBAa7vwAwDAMEBbv7YAMEBbv7gAMEBrv7wAME B73JAAMDAL3LMAwDBADIIt0DBADIIt4DBATITEADBAfJlYAwFAQCAAIwDgMFACgG AvADBQUoBgOAMCEGCCsGAQUFBwEIAQH/BBIwEKAOMAwCAkKwAgJZZAICbv4wDQYJ KoZIhvcNAQELBQADggEBAGKh0TimO3ghXZGZ87+2YAZXewj5EBfJBfiy1A+v8DZ2 fXJJJaMcul8LZGfdBblcr+fpzj71JBiz0p8LGiz2UklHlZtwpraPRIYojSi+kKzg lSGrtFz48vPa9Q4SXF3ouwdGlCJTLEu7ieBkF/UFMOQe5osnUT7Q5p0sVIaMWvS0 8LCsbTYioDGW3ihs7G62kFrhbDF/lTqG/XbXO3Jz6v0Ip3Cfsap/tOuqKk0PDQ5j D99QxbWhE7Nyifuh2Ifjob45TN1KJwanAsYcTCFQdYpivz4rm0peuNYqLnC392dN daa+yflTVoQyQE7Vj0NKd2kXUqVwY+VfzGTgjyowFHM= -----END CERTIFICATE-----Generated at Thu Jan 29 02:14:41 2026 by rpki-client