This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.cer
File: 5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.cer (raw, json)
Hash identifier: f2V/yDcl850jSp/6rX53UVDWveOVZSyzPfBOoNUsgPA=
Subject key identifier: 5B:3C:B3:BB:EC:DD:54:7F:5A:5D:D5:4A:4F:A6:4B:8F:D4:AC:F7:EF
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 5EF68907F978E1CDE2C9D196DB4A4D12B0A79201
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Mon 12 Jan 2026 08:41:56 +0000
Certificate not after: Mon 11 Jan 2027 08:46:56 +0000
Subordinate resources: IP: 192.188.49.0/24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 14:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:f6:89:07:f9:78:e1:cd:e2:c9:d1:96:db:4a:4d:12:b0:a7:92:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Jan 12 08:41:56 2026 GMT
Not After : Jan 11 08:46:56 2027 GMT
Subject: CN=5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d9:46:ed:03:a9:fb:bb:7c:ac:44:49:88:a9:
e7:75:0c:33:20:84:ee:a1:d1:78:fd:71:a1:d0:d9:
20:44:48:60:7e:f7:ff:9c:21:16:c6:55:de:75:75:
54:76:ca:5f:7e:b2:0c:fb:89:9a:77:c5:01:37:e9:
6c:06:ad:0a:fa:36:7c:31:78:6a:a6:6d:5e:1c:72:
45:0e:0c:1e:02:83:31:a3:34:33:b8:0b:a8:21:fc:
e2:21:ed:b9:cd:7e:d9:a9:1a:8b:43:8b:6d:fb:52:
de:88:5f:1d:7a:bd:c0:61:51:d3:92:ad:37:3e:cb:
10:7a:b7:47:39:d4:8c:f5:2b:32:5f:72:53:03:23:
8c:67:c2:86:a0:56:91:cb:98:e3:12:d0:19:88:84:
b1:4d:dd:e9:5f:a7:ca:3d:37:d2:50:d8:59:a4:fa:
4d:04:19:d2:d1:90:cf:90:34:31:ca:1a:6c:1c:38:
7e:3a:a8:a3:da:26:ae:de:0b:6d:cc:ee:8d:0a:af:
90:b2:f1:70:53:c9:87:eb:90:95:27:e2:c2:fc:0b:
89:a5:70:16:09:cb:04:fa:32:78:c6:c5:fe:f2:ac:
7c:e5:10:7f:88:3b:f4:33:c5:e7:fb:1c:ae:ed:f3:
43:39:2a:47:1a:ce:3b:4e:1c:37:d3:02:dc:0e:84:
82:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5B:3C:B3:BB:EC:DD:54:7F:5A:5D:D5:4A:4F:A6:4B:8F:D4:AC:F7:EF
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.188.49.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:f6:ad:71:38:76:82:fe:bf:35:67:40:48:85:62:f5:55:1b:
67:ae:84:94:02:a1:39:b1:d9:0c:aa:e2:67:20:f4:a1:f0:05:
03:37:d1:a4:c3:d3:1d:a4:a1:1a:fe:f5:c9:4d:9f:6f:90:51:
b6:da:0f:3d:f2:4d:07:ce:90:eb:f2:13:30:87:f6:a4:8c:e2:
18:7d:75:1a:99:9e:a3:8c:10:fe:f3:5d:ce:56:33:11:e6:52:
b5:fa:93:15:68:cd:e2:50:d8:d8:e7:f8:42:08:e4:9c:85:c0:
62:b9:af:a2:a2:d2:bc:c7:62:9e:4e:9d:23:99:ea:97:7c:fc:
4f:5d:0b:6b:fa:d1:7d:d6:f4:ab:94:b8:43:3d:6c:98:7f:0d:
f7:82:e7:08:a7:01:fb:4d:ed:80:75:b5:25:91:eb:13:22:8c:
f0:a9:e7:2c:70:f6:b8:24:ee:47:62:5d:c3:c9:ae:96:37:3e:
13:bf:6a:df:9e:b2:7d:d6:ea:55:c1:e2:6a:0c:af:a6:02:71:
6c:0a:eb:3f:dc:34:4d:8a:78:2a:9b:b6:31:87:2b:58:a1:e1:
98:90:38:27:fa:cc:74:b3:e3:36:f4:f0:21:a9:c5:88:2f:db:
cd:fd:3a:ec:a5:fe:79:1a:4c:c3:f0:98:95:7d:64:e5:23:6c:
13:60:8d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:01:24 2026 by rpki-client