This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.cer File: 834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.cer (raw, json) Hash identifier: xvHbbHv9l3E6Q0Fxn5B2F0d1ICvkInbD/Fw2/PGsaPg= Subject key identifier: 83:4E:4A:3D:5B:36:F5:03:CC:79:93:D9:D1:53:DA:A9:9A:7A:9D:AC Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 31A294974C2AF44421355CE3339F05E595C3CCB2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 20 Dec 2025 00:51:34 +0000 Certificate not after: Sat 19 Dec 2026 00:56:34 +0000 Subordinate resources: AS: 28399 IP: 200.33.20.0/24 IP: 201.131.20.0/22 IP: 2806:2e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 24 Dec 2025 07:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:a2:94:97:4c:2a:f4:44:21:35:5c:e3:33:9f:05:e5:95:c3:cc:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Dec 20 00:51:34 2025 GMT Not After : Dec 19 00:56:34 2026 GMT Subject: CN=834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:48:a8:4b:1b:1d:3f:7c:ce:45:c0:8c:ba:cb: b6:6c:f4:ba:c2:80:a9:9f:c7:b9:7d:e0:e8:bc:73: 4e:81:4c:66:c6:4f:bb:59:0d:6b:22:3f:18:7f:67: 53:62:e7:6e:15:a4:02:d6:29:a1:25:6e:bf:1a:dd: 29:0b:c7:ed:52:70:51:db:fe:44:39:81:72:52:a6: 9c:a5:bd:82:ca:42:f3:ab:2c:b6:39:dd:7e:74:6e: ac:4e:04:9a:19:5c:43:c5:b6:d9:63:8a:e4:95:cf: ac:4e:d5:a4:85:a8:f0:32:2a:03:35:44:f0:2f:69: 61:e8:dd:02:a9:5b:61:bf:2e:76:62:c0:95:fd:14: 2f:fa:e5:38:ea:93:d6:05:bc:19:56:1c:cf:06:34: a4:25:3b:b0:c7:94:b5:8e:e9:b7:7c:e5:86:41:a0: e5:b1:96:d5:ac:6e:4c:10:e6:c8:ff:e1:8d:a9:d4: 49:92:54:92:5a:e3:93:4b:f6:cb:41:3d:8d:19:e7: b9:03:42:79:76:ad:b6:3a:04:25:29:44:0b:40:0e: 22:81:df:2e:b1:6b:6b:c0:5a:7f:af:4e:92:f7:a8: 04:41:6f:82:43:2e:69:14:2f:5e:9c:95:f2:23:c1: d8:14:e9:51:c9:85:b3:4f:6a:62:cd:7f:5e:d3:09: d8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 83:4E:4A:3D:5B:36:F5:03:CC:79:93:D9:D1:53:DA:A9:9A:7A:9D:AC X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.33.20.0/24 201.131.20.0/22 IPv6: 2806:2e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28399 Signature Algorithm: sha256WithRSAEncryption 29:00:1b:14:14:10:a1:4c:62:b1:5d:7b:43:72:e1:e4:e2:2a: ea:79:6c:93:a0:d9:f8:27:98:80:38:b8:13:21:67:48:49:40: 45:3f:e0:c0:9e:01:b8:8d:a3:02:bb:39:1f:e6:a9:75:20:cc: 49:0c:5f:c8:6a:24:67:35:fc:d4:6d:65:49:8f:ee:41:69:7b: 78:5a:73:d3:62:5d:16:bc:fe:67:1d:e6:4a:72:42:a9:39:0a: 15:5d:84:f3:c9:de:67:d3:c1:9e:c1:68:25:36:a0:ea:b9:5f: ca:f4:ab:92:86:e9:af:07:ef:3d:d7:74:e4:d0:6f:35:c0:1d: 23:3f:bc:77:85:30:bc:fc:dd:ce:38:6e:fa:0f:54:bf:00:b8: a0:f8:b5:3b:58:6a:9d:46:41:23:ca:b5:97:1f:d3:30:3b:55: bf:38:3a:dd:32:50:7e:ae:c6:c8:45:03:3e:17:20:13:53:34: 96:5f:c0:56:e4:fc:17:4e:cb:6a:32:dd:35:74:00:9e:3a:63: 39:34:2d:f3:d7:32:77:4c:d1:fc:3f:73:0a:b8:cd:fc:3d:e4: 6a:56:3b:ad:98:4d:67:49:d6:df:98:ce:14:8b:e4:c9:7c:d9: 39:55:f0:de:b5:07:02:85:87:a0:49:9b:9e:7d:42:d2:1e:9d: 36:43:17:6c -----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgIUMaKUl0wq9EQhNVzjM58F5ZXDzLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTEyMjAwMDUxMzRaFw0yNjEyMTkwMDU2MzRaMDMxMTAvBgNV BAMTKDgzNEU0QTNENUIzNkY1MDNDQzc5OTNEOUQxNTNEQUE5OUE3QTlEQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMSKhLGx0/fM5FwIy6y7Zs9LrC gKmfx7l94Oi8c06BTGbGT7tZDWsiPxh/Z1Ni524VpALWKaElbr8a3SkLx+1ScFHb /kQ5gXJSppylvYLKQvOrLLY53X50bqxOBJoZXEPFttljiuSVz6xO1aSFqPAyKgM1 RPAvaWHo3QKpW2G/LnZiwJX9FC/65Tjqk9YFvBlWHM8GNKQlO7DHlLWO6bd85YZB oOWxltWsbkwQ5sj/4Y2p1EmSVJJa45NL9stBPY0Z57kDQnl2rbY6BCUpRAtADiKB 3y6xa2vAWn+vTpL3qARBb4JDLmkUL16clfIjwdgU6VHJhbNPamLNf17TCdgtAgMB AAGjggO0MIIDsDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSDTko9Wzb1A8x5 k9nRU9qpmnqdrDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREM3NURCMEEyRjUxMTcyMTA2RkExQ0U3 NzY1RkNCQTlFNkRBRTZEOTBBOEYxMUI1RjlBNjk4NDc2NjgwRTI3Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQzc1REIwQTJGNTExNzIxMDZGQTFDRTc3NjVGQ0JBOUU2REFFNkQ5MEE4 RjExQjVGOUE2OTg0NzY2ODBFMjc3LzAvODM0RTRBM0Q1QjM2RjUwM0NDNzk5M0Q5 RDE1M0RBQTk5QTdBOURBQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAyCEUAwQCyYMU MA0EAgACMAcDBQAoBgLgMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm7vMA0GCSqG SIb3DQEBCwUAA4IBAQApABsUFBChTGKxXXtDcuHk4irqeWyToNn4J5iAOLgTIWdI SUBFP+DAngG4jaMCuzkf5ql1IMxJDF/IaiRnNfzUbWVJj+5BaXt4WnPTYl0WvP5n HeZKckKpOQoVXYTzyd5n08GewWglNqDquV/K9KuShumvB+8913Tk0G81wB0jP7x3 hTC8/N3OOG76D1S/ALig+LU7WGqdRkEjyrWXH9MwO1W/ODrdMlB+rsbIRQM+FyAT UzSWX8BW5PwXTstqMt01dACeOmM5NC3z1zJ3TNH8P3MKuM38PeRqVjutmE1nSdbf mM4Ui+TJfNk5VfDetQcChYegSZuefULSHp02Qxds -----END CERTIFICATE-----Generated at Sat Dec 20 05:21:33 2025 by rpki-client