This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DDD2FA88F38A733660D0B416A80AD945A5FF71.cer
File: F3DDD2FA88F38A733660D0B416A80AD945A5FF71.cer (raw, json)
Hash identifier: 7NB3tohxCj7C1nD2fNYCgKiEd70qpk02aRJk+4fvM0E=
Subject key identifier: F3:DD:D2:FA:88:F3:8A:73:36:60:D0:B4:16:A8:0A:D9:45:A5:FF:71
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 1918FAF834D151AB2F4E86794BD22EFF578C560B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/57DC61CE3FEDB7141E522A905798D2EB5066ECF2F29F8F8FD23A66D7B8B26A20/0/F3DDD2FA88F38A733660D0B416A80AD945A5FF71.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/57DC61CE3FEDB7141E522A905798D2EB5066ECF2F29F8F8FD23A66D7B8B26A20/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 08:47:55 +0000
Certificate not after: Wed 27 Jan 2027 08:52:55 +0000
Subordinate resources: IP: 200.23.137.0/24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:18:fa:f8:34:d1:51:ab:2f:4e:86:79:4b:d2:2e:ff:57:8c:56:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 08:47:55 2026 GMT
Not After : Jan 27 08:52:55 2027 GMT
Subject: CN=F3DDD2FA88F38A733660D0B416A80AD945A5FF71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c5:a7:91:81:82:d7:a5:aa:f7:af:75:3a:2e:
c1:71:ea:f7:cc:a3:df:01:9d:20:ce:d8:65:57:3a:
ff:ee:72:e2:fa:52:31:cb:9a:5d:f0:cf:29:7f:f6:
84:de:d1:0b:0e:f3:3e:5a:4a:88:35:28:7a:97:b5:
3b:3a:62:3e:fb:f7:d9:f4:bf:1a:90:56:19:4a:98:
c6:a8:d9:2c:14:95:a8:51:ba:37:e4:d5:b6:be:cf:
60:bb:67:fe:33:4b:7e:6f:1e:35:bf:30:11:a7:0e:
e9:3f:62:a6:08:81:0d:3c:af:b9:57:13:16:44:d6:
58:43:dd:9c:af:f1:77:59:38:e6:03:bd:27:1a:65:
5a:09:c2:02:0c:18:ad:38:97:52:a9:0a:89:bf:5d:
c9:c7:70:93:8a:58:0c:be:7b:e8:67:54:26:49:d4:
cc:cd:ba:50:fb:3f:db:8c:af:7a:be:54:58:10:33:
7f:cd:d4:43:54:a9:4a:f8:73:fb:c0:af:a7:93:19:
4b:88:1e:c1:f4:1a:35:54:4b:17:b2:b0:df:8b:f0:
11:ae:ed:27:9d:14:99:54:32:23:96:03:b0:8e:4f:
17:e0:7d:da:7f:8e:29:e9:e2:27:06:5a:7d:11:f2:
d5:ae:71:0b:fe:1a:fd:04:eb:f7:9e:0b:4e:33:11:
29:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F3:DD:D2:FA:88:F3:8A:73:36:60:D0:B4:16:A8:0A:D9:45:A5:FF:71
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/57DC61CE3FEDB7141E522A905798D2EB5066ECF2F29F8F8FD23A66D7B8B26A20/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/57DC61CE3FEDB7141E522A905798D2EB5066ECF2F29F8F8FD23A66D7B8B26A20/0/F3DDD2FA88F38A733660D0B416A80AD945A5FF71.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.23.137.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:8a:95:81:94:5f:df:7e:2e:cb:57:e2:cc:79:d9:3b:b9:cd:
4c:9f:92:db:fe:04:67:44:29:50:d2:59:bb:1d:cd:4f:b7:f8:
a6:48:ba:9e:24:7c:81:23:77:22:b6:0d:24:e7:1b:fc:90:d7:
5c:de:bf:15:25:d1:05:b2:88:bd:92:df:a6:a1:1a:9a:61:10:
91:c9:62:9c:20:b8:a3:89:d3:99:c6:f5:88:52:e0:bd:60:1c:
41:d4:25:86:a3:53:83:38:1b:ca:75:fa:c8:4e:55:e7:c9:71:
8e:6c:c8:3e:33:80:7a:22:1b:f3:79:e3:19:f1:5e:6a:9b:a0:
79:87:22:97:08:8f:40:2f:6a:c5:c6:19:48:89:3d:44:5b:18:
5a:4f:22:8d:f9:ff:47:7d:76:7b:c2:f2:65:25:c4:87:9c:2c:
83:42:4c:ce:1e:d8:57:db:50:96:b9:70:52:8a:07:35:83:37:
f3:71:15:46:45:a7:6e:e7:d8:e2:14:41:2a:80:33:56:5c:90:
6c:8f:1e:b5:88:c2:a8:c7:7f:08:48:ab:ab:ff:1f:80:f6:34:
be:e6:9d:be:c7:3e:e8:f6:2e:89:d2:24:6e:ea:e9:68:d0:cc:
26:16:3d:c9:04:60:8a:1d:15:55:64:de:01:31:16:64:42:03:
2f:f0:79:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 02:08:38 2026 by rpki-client