This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer
File: B6D38CFDC9CFDC41C617EF92AD75122590D93E87.cer (raw, json)
Hash identifier: j1Hpm+3aR8MjGBMNRAL5h9SUnLP9XgmAFh2M7pJMqew=
Subject key identifier: B6:D3:8C:FD:C9:CF:DC:41:C6:17:EF:92:AD:75:12:25:90:D9:3E:87
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 0EE9D4885BA7171B5B5A8CA3E331B815A0D84EA4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Mon 12 Jan 2026 04:02:53 +0000
Certificate not after: Mon 11 Jan 2027 04:07:53 +0000
Subordinate resources: IP: 192.100.161.0/24
IP: 200.33.7.0 -- 200.33.8.255
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Jan 2026 11:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:e9:d4:88:5b:a7:17:1b:5b:5a:8c:a3:e3:31:b8:15:a0:d8:4e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Jan 12 04:02:53 2026 GMT
Not After : Jan 11 04:07:53 2027 GMT
Subject: CN=B6D38CFDC9CFDC41C617EF92AD75122590D93E87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:53:a8:5c:69:7e:76:9b:30:4e:83:a9:07:
29:51:c1:49:51:ef:a1:9b:b7:80:18:fd:06:37:1b:
01:97:e0:02:5a:fb:a1:a2:c0:20:86:ce:85:17:29:
b3:45:8f:0c:63:82:5b:9c:5c:e5:10:c7:02:bb:fa:
fa:11:99:50:ca:df:8c:df:1b:4d:06:e5:e3:f9:b9:
bd:a0:21:42:1b:97:df:f3:27:02:78:a3:ce:27:75:
2c:7d:3f:50:3c:db:49:b1:b8:a3:5c:88:91:f3:51:
22:f2:06:47:78:f0:8c:f0:14:54:c9:a8:6d:44:83:
e8:97:2c:1b:bb:90:74:4a:24:95:fe:63:1c:3d:c3:
2a:d4:b7:8c:81:38:fa:36:61:a4:eb:e1:bd:9f:fb:
63:5c:ba:6a:42:65:60:8f:9f:a1:ee:63:45:41:09:
5d:a5:3e:27:ab:9f:fb:63:a6:d7:18:cb:aa:db:2b:
9a:bf:b7:1a:2f:5a:ea:a2:9b:92:c6:41:c1:70:96:
9f:99:c2:1c:2d:30:03:60:4a:0b:59:74:32:c1:62:
4f:c2:4b:0f:a6:c3:c1:08:fe:78:8d:5b:14:1a:8e:
8f:78:36:de:e6:99:80:cb:03:69:5c:0b:47:1a:ec:
d8:1d:41:26:21:aa:fd:a8:dd:c2:5f:8d:45:75:3d:
41:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B6:D3:8C:FD:C9:CF:DC:41:C6:17:EF:92:AD:75:12:25:90:D9:3E:87
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D41A055DBF36FBB2F8E5AB51A1E19DF2860F5802EF1D4CBDA8CE7A25067E1F33/0/B6D38CFDC9CFDC41C617EF92AD75122590D93E87.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.100.161.0/24
200.33.7.0-200.33.8.255
Signature Algorithm: sha256WithRSAEncryption
ce:b4:00:84:71:40:5f:a6:28:3f:1d:20:64:e8:06:f8:e2:ed:
bf:78:17:dc:be:38:cd:e0:4a:d1:92:17:16:a2:f7:f8:26:03:
c4:05:99:6d:1b:ac:1b:73:6d:cd:c9:a7:d2:5f:84:df:bb:ad:
e3:c4:8b:5f:3c:04:54:06:5c:c2:0f:0d:32:73:f0:3d:0f:8c:
8e:a3:7c:95:f9:61:f0:8f:ab:77:0f:7b:d8:6c:18:2e:e5:0c:
45:df:ba:26:d6:08:9e:77:51:f8:e0:d9:0a:50:d8:9e:a9:91:
a9:20:ab:82:c6:fc:9c:1d:8a:47:e6:25:a8:a4:51:8f:30:84:
35:82:31:28:ec:df:5d:5b:d9:f9:8d:ba:85:b0:20:37:07:5b:
80:75:60:d9:c5:f3:54:d4:ac:79:cf:74:8d:f4:93:1d:cb:e1:
5a:b8:0b:a4:c2:37:96:29:0d:df:42:55:7d:46:be:df:31:cd:
0b:28:d3:64:68:9a:20:d2:96:33:31:42:4a:92:d2:3d:1e:56:
a7:56:d8:2d:d8:d1:f3:23:64:3b:c8:4e:38:83:03:76:1e:43:
67:a1:f0:a7:00:4e:4a:20:de:7e:0b:38:a3:0a:88:92:28:be:
81:97:b2:83:74:c3:38:3b:20:9e:38:44:72:a4:ce:60:32:ea:
47:e0:b9:ae
-----BEGIN CERTIFICATE-----
MIIGiDCCBXCgAwIBAgIUDunUiFunFxtbWoyj4zG4FaDYTqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB
RTY2MTgxNjAeFw0yNjAxMTIwNDAyNTNaFw0yNzAxMTEwNDA3NTNaMDMxMTAvBgNV
BAMTKEI2RDM4Q0ZEQzlDRkRDNDFDNjE3RUY5MkFENzUxMjI1OTBEOTNFODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz51OoXGl+dpswToOpBylRwUlR
76Gbt4AY/QY3GwGX4AJa+6GiwCCGzoUXKbNFjwxjglucXOUQxwK7+voRmVDK34zf
G00G5eP5ub2gIUIbl9/zJwJ4o84ndSx9P1A820mxuKNciJHzUSLyBkd48IzwFFTJ
qG1Eg+iXLBu7kHRKJJX+Yxw9wyrUt4yBOPo2YaTr4b2f+2NcumpCZWCPn6HuY0VB
CV2lPiern/tjptcYy6rbK5q/txovWuqim5LGQcFwlp+ZwhwtMANgSgtZdDLBYk/C
Sw+mw8EI/niNWxQajo94Nt7mmYDLA2lcC0ca7NgdQSYhqv2o3cJfjUV1PUEHAgMB
AAGjggOSMIIDjjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS204z9yc/cQcYX
75KtdRIlkNk+hzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD
QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDQxQTA1NURCRjM2RkJCMkY4RTVBQjUx
QTFFMTlERjI4NjBGNTgwMkVGMUQ0Q0JEQThDRTdBMjUwNjdFMUYzMy8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy9ENDFBMDU1REJGMzZGQkIyRjhFNUFCNTFBMUUxOURGMjg2MEY1ODAyRUYx
RDRDQkRBOENFN0EyNTA2N0UxRjMzLzAvQjZEMzhDRkRDOUNGREM0MUM2MTdFRjky
QUQ3NTEyMjU5MEQ5M0U4Ny5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAwGShMAwDBADI
IQcDBADIIQgwDQYJKoZIhvcNAQELBQADggEBAM60AIRxQF+mKD8dIGToBvji7b94
F9y+OM3gStGSFxai9/gmA8QFmW0brBtzbc3Jp9JfhN+7rePEi188BFQGXMIPDTJz
8D0PjI6jfJX5YfCPq3cPe9hsGC7lDEXfuibWCJ53Ufjg2QpQ2J6pkakgq4LG/Jwd
ikfmJaikUY8whDWCMSjs311b2fmNuoWwIDcHW4B1YNnF81TUrHnPdI30kx3L4Vq4
C6TCN5YpDd9CVX1Gvt8xzQso02RomiDSljMxQkqS0j0eVqdW2C3Y0fMjZDvITjiD
A3YeQ2eh8KcATkog3n4LOKMKiJIovoGXsoN0wzg7IJ44RHKkzmAy6kfgua4=
-----END CERTIFICATE-----
Generated at Mon Jan 12 06:19:26 2026 by rpki-client