This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.cer
File: 5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.cer (raw, json)
Hash identifier: 7Q4O+xFH7EUtAOPNAAjVg73AxwD9uL7Rbf8QTbitf9M=
Subject key identifier: 5B:3C:B3:BB:EC:DD:54:7F:5A:5D:D5:4A:4F:A6:4B:8F:D4:AC:F7:EF
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 0B4D8A27D29CFC2F1629675022CCA3D7F3DC1495
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Sat 10 Jan 2026 22:01:08 +0000
Certificate not after: Sat 09 Jan 2027 22:06:08 +0000
Subordinate resources: IP: 192.188.49.0/24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:4d:8a:27:d2:9c:fc:2f:16:29:67:50:22:cc:a3:d7:f3:dc:14:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Jan 10 22:01:08 2026 GMT
Not After : Jan 9 22:06:08 2027 GMT
Subject: CN=5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d9:46:ed:03:a9:fb:bb:7c:ac:44:49:88:a9:
e7:75:0c:33:20:84:ee:a1:d1:78:fd:71:a1:d0:d9:
20:44:48:60:7e:f7:ff:9c:21:16:c6:55:de:75:75:
54:76:ca:5f:7e:b2:0c:fb:89:9a:77:c5:01:37:e9:
6c:06:ad:0a:fa:36:7c:31:78:6a:a6:6d:5e:1c:72:
45:0e:0c:1e:02:83:31:a3:34:33:b8:0b:a8:21:fc:
e2:21:ed:b9:cd:7e:d9:a9:1a:8b:43:8b:6d:fb:52:
de:88:5f:1d:7a:bd:c0:61:51:d3:92:ad:37:3e:cb:
10:7a:b7:47:39:d4:8c:f5:2b:32:5f:72:53:03:23:
8c:67:c2:86:a0:56:91:cb:98:e3:12:d0:19:88:84:
b1:4d:dd:e9:5f:a7:ca:3d:37:d2:50:d8:59:a4:fa:
4d:04:19:d2:d1:90:cf:90:34:31:ca:1a:6c:1c:38:
7e:3a:a8:a3:da:26:ae:de:0b:6d:cc:ee:8d:0a:af:
90:b2:f1:70:53:c9:87:eb:90:95:27:e2:c2:fc:0b:
89:a5:70:16:09:cb:04:fa:32:78:c6:c5:fe:f2:ac:
7c:e5:10:7f:88:3b:f4:33:c5:e7:fb:1c:ae:ed:f3:
43:39:2a:47:1a:ce:3b:4e:1c:37:d3:02:dc:0e:84:
82:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5B:3C:B3:BB:EC:DD:54:7F:5A:5D:D5:4A:4F:A6:4B:8F:D4:AC:F7:EF
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.188.49.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:cd:90:b0:04:b8:a9:51:e2:17:1f:c1:1e:e6:29:e8:e6:ec:
c6:ae:0b:b6:29:ba:2a:a7:d3:1a:b7:72:87:fb:eb:69:29:99:
0c:0a:48:3b:05:ab:23:33:01:cb:89:82:f0:84:05:74:ef:41:
ee:0f:64:fe:1c:97:35:8f:64:7a:04:15:fe:df:cd:7b:6e:3b:
d0:c4:19:ae:e2:4a:80:80:94:7a:2a:31:ca:cd:2b:1d:dc:1b:
36:f6:9e:ce:45:63:12:59:32:b5:94:b2:56:7b:32:98:63:5c:
37:75:33:f7:98:1b:67:f0:be:a8:3c:78:c0:28:51:1c:e2:cf:
d3:9f:4f:fd:2f:e1:af:f1:6f:13:55:1c:ca:bf:f7:d2:3d:75:
5a:ed:46:26:7a:46:81:08:a5:0f:da:fc:84:99:d4:17:e3:ed:
ad:af:04:64:94:aa:c2:38:9c:0a:ef:b7:b0:e1:f4:db:76:53:
fc:3f:26:13:04:66:4a:0a:23:ee:ed:81:f5:4b:eb:5e:3c:d4:
52:3c:98:f4:f9:10:c8:f8:1a:9c:26:9f:aa:fc:39:e1:45:ab:
26:2d:59:28:a2:54:88:1b:7e:4a:d7:d5:f7:80:c0:44:eb:83:
ae:c9:ac:8d:7b:93:d7:c1:96:49:66:05:39:f0:79:21:80:2c:
92:f9:6f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:51:02 2026 by rpki-client