This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7B8DED03E12C864EE6F1C50B966C80D93223151.cer
File: A7B8DED03E12C864EE6F1C50B966C80D93223151.cer (raw, json)
Hash identifier: L9+Hp7dUiCQ8ad4OvIJ0QRnpthLDuMEIrGNMKWN+++8=
Subject key identifier: A7:B8:DE:D0:3E:12:C8:64:EE:6F:1C:50:B9:66:C8:0D:93:22:31:51
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 2472DA1A31C5BD1A2EB77A15BB1FEE285CDDE558
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/C77502A6749838CABE48553066A904DB3DACC6B74834090834593058AE5EE43B/0/A7B8DED03E12C864EE6F1C50B966C80D93223151.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/C77502A6749838CABE48553066A904DB3DACC6B74834090834593058AE5EE43B/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Mon 12 Jan 2026 17:40:50 +0000
Certificate not after: Mon 11 Jan 2027 17:45:50 +0000
Subordinate resources: AS: 263810
IP: 201.131.118.0/24
IP: 2801:17:e000::/48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Jan 2026 09:38:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:72:da:1a:31:c5:bd:1a:2e:b7:7a:15:bb:1f:ee:28:5c:dd:e5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Jan 12 17:40:50 2026 GMT
Not After : Jan 11 17:45:50 2027 GMT
Subject: CN=A7B8DED03E12C864EE6F1C50B966C80D93223151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e0:7c:f5:5e:d7:d9:32:58:73:8f:a3:e9:cd:
c0:88:50:29:82:83:b2:31:27:d0:f4:04:69:36:d9:
a6:97:5b:34:0c:9f:03:94:9d:76:14:f2:f4:28:9a:
d6:da:7d:45:54:c5:ba:bc:af:c3:e6:89:ee:2d:f8:
d6:c9:af:40:ca:68:ee:f7:5a:82:0d:74:93:3e:fc:
3e:69:4f:46:b5:53:a7:e7:5b:e2:44:86:27:b9:23:
ef:1c:72:b1:99:5c:1b:c0:d6:72:9d:f3:47:22:8a:
a0:4b:49:54:bf:58:2e:71:17:aa:14:76:df:0e:36:
9c:f3:90:2d:71:8e:4c:61:0f:aa:b8:9b:93:73:39:
fb:e3:5d:16:d6:67:c7:a4:a6:52:89:c2:14:e4:c3:
6b:30:2f:4a:16:3d:c8:e7:e9:df:b6:0a:9e:a4:aa:
86:3a:6b:77:06:7b:28:48:a0:85:05:e3:62:c6:b2:
90:4e:02:00:5f:ae:a7:7b:6d:f1:66:fb:b1:9a:4f:
9d:1e:32:8d:88:fd:58:41:0a:e3:f6:d7:67:45:fd:
18:e9:0d:6f:60:af:b0:26:c4:06:23:a8:d8:74:f9:
9c:5f:8d:e9:73:fb:7f:22:d9:89:20:59:45:f0:2c:
b8:d9:c3:b1:c2:96:d8:61:5b:ad:33:20:93:11:57:
90:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A7:B8:DE:D0:3E:12:C8:64:EE:6F:1C:50:B9:66:C8:0D:93:22:31:51
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C77502A6749838CABE48553066A904DB3DACC6B74834090834593058AE5EE43B/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C77502A6749838CABE48553066A904DB3DACC6B74834090834593058AE5EE43B/0/A7B8DED03E12C864EE6F1C50B966C80D93223151.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.118.0/24
IPv6:
2801:17:e000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263810
Signature Algorithm: sha256WithRSAEncryption
85:7e:7e:0c:42:69:36:15:80:e6:63:ed:bc:16:ee:fb:4d:ce:
27:10:19:78:96:09:ae:92:ce:61:ad:1c:3d:1f:16:e8:18:f8:
f6:af:43:a9:ec:af:da:be:53:23:58:82:f9:ff:60:5b:50:c5:
70:1f:25:24:6b:48:ad:8f:a0:5e:4c:e5:88:a6:c1:ac:ca:6b:
25:6c:bc:dd:b9:31:f0:08:50:11:bd:74:7c:99:b9:0d:72:42:
fc:7e:48:f3:59:8b:0e:f9:27:50:6c:a5:c6:18:c1:55:e0:e0:
9e:d7:80:7c:da:9a:ef:be:cb:8b:02:a7:ec:4c:cc:d9:9a:9d:
2e:7e:b7:d7:37:7d:03:a2:17:60:64:75:f6:78:0d:27:92:40:
c3:b3:6e:2c:1d:62:c5:fa:7c:21:9a:e2:5a:b9:3d:88:30:58:
91:f4:74:84:88:9f:56:15:be:46:ca:e7:8b:47:0e:08:ad:33:
02:85:26:da:48:e8:d9:12:66:64:a7:f3:b1:7f:7d:e8:cd:e0:
50:6e:a2:81:03:65:57:50:ab:1f:f0:74:bb:05:23:ba:b0:91:
1e:4f:d7:f9:4f:86:c4:fb:62:21:df:a2:f2:32:15:2e:08:35:
52:57:cb:78:5b:1f:84:50:9c:2f:ba:f7:41:e0:1c:14:d7:e9:
c1:0c:3b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 07:56:06 2026 by rpki-client