This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer
File: 9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer (raw, json)
Hash identifier: qw+shfzOEHtgY/lBSpOiCvCbvDTyKOKAfLepIY36GtQ=
Subject key identifier: 9C:DC:70:D9:BF:52:DC:35:F1:B9:88:BC:8F:7F:6D:B6:2A:20:8E:5F
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 15495AFD03CE409D4D71A4817D1786D1540A8080
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 19:13:12 +0000
Certificate not after: Wed 27 Jan 2027 19:18:12 +0000
Subordinate resources: AS: 52326
IP: 190.151.138.0 -- 190.151.141.255
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:49:5a:fd:03:ce:40:9d:4d:71:a4:81:7d:17:86:d1:54:0a:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 19:13:12 2026 GMT
Not After : Jan 27 19:18:12 2027 GMT
Subject: CN=9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:54:92:92:0d:e5:2a:2d:b5:21:5c:38:4d:2d:
c4:50:7d:08:fb:22:72:a9:f0:77:dc:76:47:5b:f9:
7b:7a:d4:af:c6:c8:64:5f:69:69:6a:50:db:07:f1:
72:fc:01:cf:bf:77:8f:f4:81:94:7f:e8:24:53:c5:
dc:57:19:31:b4:e1:a9:53:23:f8:6b:01:29:ab:83:
64:3d:a6:58:93:6c:8f:f2:01:14:e4:e1:d8:06:ac:
97:d3:ca:81:b5:eb:25:b1:87:f8:14:b9:5f:e8:9f:
8d:8e:e0:3d:99:bc:f5:31:e9:92:0d:67:d0:43:a2:
5f:c1:bc:7e:81:ed:b6:03:35:e6:fd:08:ba:5d:b9:
40:34:58:5e:e0:2f:0d:37:04:78:73:f7:7e:ed:0d:
4e:f5:9a:8d:23:1d:52:e8:d4:7a:cf:d0:d6:91:cc:
96:e0:27:55:8d:41:6f:9f:6b:ee:3b:1d:e3:ad:65:
2c:ce:b1:d3:c7:7d:29:c4:ee:b3:aa:eb:0a:1f:7d:
7b:45:cc:bc:e5:51:e8:dc:83:5f:be:5d:ac:10:f7:
06:19:73:78:20:e3:e7:a4:5c:19:1a:18:e5:4b:59:
63:c8:f0:aa:43:0b:c6:79:78:81:af:6c:b6:f1:35:
9a:ea:e6:7d:b4:75:4d:60:ea:10:12:77:e6:14:3a:
ba:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9C:DC:70:D9:BF:52:DC:35:F1:B9:88:BC:8F:7F:6D:B6:2A:20:8E:5F
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.151.138.0-190.151.141.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52326
Signature Algorithm: sha256WithRSAEncryption
6c:e5:48:b7:ed:db:ed:c0:d1:2a:9a:44:5e:8e:ef:21:87:95:
ff:15:39:40:14:b8:92:ef:e6:f6:15:37:cb:ae:2e:de:57:f1:
78:d7:8b:45:54:84:11:9b:98:8d:04:d6:76:68:fa:e0:24:94:
b6:31:90:f7:e1:bc:11:c7:e1:dc:de:e7:6d:d7:f7:8e:a7:f2:
d4:7b:84:26:da:54:c8:a5:52:6f:cc:a2:e5:93:ac:1d:4f:68:
9a:e4:28:ef:54:03:c3:d1:51:95:3e:39:c9:21:4c:48:46:0f:
ec:9b:46:14:49:47:9e:59:12:27:e5:6a:cc:00:00:9e:b0:02:
90:6f:ec:26:3d:25:73:9d:d8:26:c7:f8:34:1f:2e:5e:3c:ce:
00:4a:d3:a1:d7:57:dc:3b:55:8b:f8:95:27:6f:98:c4:d0:f8:
20:84:52:4e:3c:9f:b3:8c:35:2c:2e:c9:e3:94:68:fc:ab:c6:
2a:b4:1a:99:6a:a7:10:ba:83:c8:b3:cd:a1:ed:a5:6e:46:20:
6b:38:c0:f8:8e:61:d5:3a:d3:53:85:02:39:a3:4a:5e:13:c2:
97:81:25:fd:8e:df:e2:62:d4:90:e0:25:9f:22:a1:e9:2d:e9:
ad:c0:e1:ab:d6:b2:d8:f1:ef:f3:a7:ff:65:50:7d:b7:31:0c:
8c:3e:35:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 02:09:05 2026 by rpki-client