This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2D8C7D34091682F466A6A7FBDBFD94F5AFC346E.cer
File: B2D8C7D34091682F466A6A7FBDBFD94F5AFC346E.cer (raw, json)
Hash identifier: RRFKxu/izGsbLvarqNBxWViilDBwDlRVXRv7XYatdsk=
Subject key identifier: B2:D8:C7:D3:40:91:68:2F:46:6A:6A:7F:BD:BF:D9:4F:5A:FC:34:6E
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 37F2F2B36134E395A89ECFC004C546A0287883C8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/70A87649CC75CDC794211B8E207C30E9F6E4978A6DDD1956CEB008CD0BD42770/0/B2D8C7D34091682F466A6A7FBDBFD94F5AFC346E.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/70A87649CC75CDC794211B8E207C30E9F6E4978A6DDD1956CEB008CD0BD42770/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 27 Jan 2026 21:50:10 +0000
Certificate not after: Tue 26 Jan 2027 21:55:10 +0000
Subordinate resources: IP: 200.4.16.0/20
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:f2:f2:b3:61:34:e3:95:a8:9e:cf:c0:04:c5:46:a0:28:78:83:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 27 21:50:10 2026 GMT
Not After : Jan 26 21:55:10 2027 GMT
Subject: CN=B2D8C7D34091682F466A6A7FBDBFD94F5AFC346E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bb:4f:31:81:c6:77:45:b8:8a:53:75:53:8f:
dd:e7:27:66:a2:94:3a:5f:61:77:0f:ac:e8:2e:d8:
49:4c:8f:53:41:2d:c4:ef:11:eb:ed:6c:37:f0:16:
96:9f:23:81:05:37:37:9c:b7:b4:99:20:f7:26:19:
45:46:d2:a6:e9:4d:28:17:fe:3f:72:05:d0:c6:c1:
f1:5d:c4:12:90:76:a3:4e:8f:c4:8b:7a:3a:af:ee:
27:2a:bc:ce:22:7e:cf:58:37:98:1d:58:9f:92:d9:
c2:e2:d7:71:9d:6a:ff:f4:38:03:69:d6:e5:b7:0b:
f3:7c:47:34:98:a5:49:da:c3:67:a0:75:ee:00:a8:
6f:ea:14:ec:33:32:5e:65:1e:05:e0:82:af:5e:4d:
0e:62:06:01:79:c3:d1:cc:7e:0a:ce:af:92:8d:9c:
63:e9:b6:29:62:0a:37:39:b1:9b:c1:77:c9:13:15:
82:61:d3:3f:6e:dc:bc:40:37:72:38:00:70:58:9a:
ca:0b:9a:12:ec:91:f0:ec:a2:c9:19:1c:af:15:82:
e2:ed:05:30:55:0a:c8:d6:44:6b:17:63:2b:2c:45:
45:a5:ed:58:87:29:4f:a3:3e:46:42:37:94:d0:42:
f1:0f:06:ce:fb:36:bb:69:4d:86:e7:69:e5:31:ce:
33:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B2:D8:C7:D3:40:91:68:2F:46:6A:6A:7F:BD:BF:D9:4F:5A:FC:34:6E
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/70A87649CC75CDC794211B8E207C30E9F6E4978A6DDD1956CEB008CD0BD42770/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/70A87649CC75CDC794211B8E207C30E9F6E4978A6DDD1956CEB008CD0BD42770/0/B2D8C7D34091682F466A6A7FBDBFD94F5AFC346E.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.4.16.0/20
Signature Algorithm: sha256WithRSAEncryption
83:23:e2:76:b4:82:58:e2:18:6f:b8:91:b0:3e:39:65:e1:83:
33:76:cf:15:5b:a6:7d:55:80:6d:66:e4:f0:54:90:65:35:29:
72:12:58:4d:ab:94:7d:68:a2:0c:43:40:c2:14:a9:6b:3c:6d:
7d:78:9c:c7:db:7c:c5:a0:6f:34:42:e3:ab:13:fb:b9:5f:96:
d7:ba:9c:2f:fc:6a:df:1d:93:59:22:f3:7b:65:79:25:14:3f:
d2:44:c2:2b:f0:62:49:8c:38:57:3b:22:b4:46:f5:0b:32:57:
e7:cd:cf:f3:d3:f7:ee:3b:f9:4b:81:9d:71:36:39:eb:e0:96:
bf:39:72:66:4f:f7:df:47:44:21:c0:11:91:bf:81:00:f1:b6:
64:8e:44:4e:cb:61:06:89:3c:25:2d:6d:1d:58:76:de:ee:36:
27:a5:8d:7e:f8:4d:4d:f8:b1:ce:d3:f8:11:a0:dd:db:f1:c6:
bd:c6:e3:d1:df:c3:4c:f2:21:80:dc:86:fa:be:a2:8e:8a:e5:
38:3b:3b:87:1b:ec:c1:10:1f:d0:35:95:46:09:cc:75:97:34:
00:ce:d3:5b:bc:0f:23:07:25:7e:ab:b7:a4:cc:6c:c3:69:fe:
3c:ef:10:33:e1:dc:9a:bf:6b:d4:47:e0:96:3b:53:db:31:b1:
c7:c4:55:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 02:09:09 2026 by rpki-client