This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer File: C868DC422443FA70E7761C0304061EB998BF7378.cer (raw, json) Hash identifier: ovyEwmUSjDAWwUujNLeYXNpRAuDTWwdZjwZ+ByHp4Ew= Subject key identifier: C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0EB4412E9029F63EDDDA5539BCFF420213C7DE2A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 12 Jan 2026 01:39:18 +0000 Certificate not after: Mon 11 Jan 2027 01:44:18 +0000 Subordinate resources: AS: 8151 AS: 28412 -- 28413 AS: 28513 AS: 28550 AS: 265512 -- 265514 IP: 148.221.0.0/16 IP: 148.223.0.0/16 IP: 148.233.0.0/16 IP: 148.235.0.0/16 IP: 187.128.0.0/11 IP: 187.168.0.0/13 IP: 187.192.0.0 -- 187.239.255.255 IP: 189.128.0.0/10 IP: 189.224.0.0/11 IP: 192.100.232.0/23 IP: 200.33.136.0 -- 200.33.151.255 IP: 200.34.32.0/20 IP: 200.34.133.0/24 IP: 200.36.32.0/19 IP: 200.38.128.0/19 IP: 200.38.192.0/19 IP: 200.64.0.0/15 IP: 200.66.128.0 -- 200.67.255.255 IP: 200.78.0.0/17 IP: 200.79.0.0/17 IP: 200.95.0.0/17 IP: 201.96.0.0 -- 201.129.255.255 IP: 201.130.80.0/24 IP: 201.131.52.0/22 IP: 201.131.76.0/24 IP: 201.133.0.0 -- 201.138.255.255 IP: 201.139.160.0/21 IP: 201.144.0.0/14 IP: 201.152.0.0/14 IP: 207.248.128.0/19 IP: 2001:1208::/32 IP: 2806:238::/48 IP: 2806:2c0::/32 IP: 2806:1000::/24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 Jan 2026 09:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b4:41:2e:90:29:f6:3e:dd:da:55:39:bc:ff:42:02:13:c7:de:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jan 12 01:39:18 2026 GMT Not After : Jan 11 01:44:18 2027 GMT Subject: CN=C868DC422443FA70E7761C0304061EB998BF7378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:04:96:77:f6:d5:96:59:6b:dd:ce:9a:86:90: 0d:b0:59:4c:e1:3c:52:be:62:9f:af:ed:17:d5:3d: 1a:7b:34:4f:1e:f6:e5:3f:8e:14:18:0c:b1:db:66: 88:22:f9:37:d3:62:b4:aa:fe:0f:cf:6a:bf:78:a7: 91:cf:41:1a:a8:f5:61:f3:a0:72:82:31:c1:79:9e: 23:df:be:3d:ea:dc:5e:be:e6:2c:15:f4:50:21:88: 00:d2:0a:74:3a:35:54:66:43:56:18:ff:ae:43:ca: 6a:d3:7e:a1:04:a4:68:40:47:f9:4e:41:11:ea:bf: e3:0c:1e:ab:c7:c4:9b:7b:d7:b4:9a:a0:6f:ca:c1: 1e:1e:88:b2:1b:d8:eb:93:ce:65:6c:0b:cd:be:67: 29:de:f1:dd:25:7d:93:f5:ad:a0:5a:a1:7e:b2:8f: 25:5b:ab:f7:c1:8a:6f:38:83:27:2b:f4:f4:a6:f0: 79:de:20:04:2f:3a:6f:97:a6:6a:0c:ed:e8:e1:d8: e1:a5:d2:51:04:99:d9:5c:44:35:4e:ce:f7:e9:e7: e6:8b:d7:d6:53:bc:f8:be:9a:11:ff:5a:56:63:49: 67:f7:27:ee:50:34:c3:f4:a1:4f:2a:dd:32:e6:ca: c3:38:e6:3a:f4:a8:5a:9d:d4:00:18:d0:33:4a:9b: 32:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.221.0.0/16 148.223.0.0/16 148.233.0.0/16 148.235.0.0/16 187.128.0.0/11 187.168.0.0/13 187.192.0.0-187.239.255.255 189.128.0.0/10 189.224.0.0/11 192.100.232.0/23 200.33.136.0-200.33.151.255 200.34.32.0/20 200.34.133.0/24 200.36.32.0/19 200.38.128.0/19 200.38.192.0/19 200.64.0.0/15 200.66.128.0-200.67.255.255 200.78.0.0/17 200.79.0.0/17 200.95.0.0/17 201.96.0.0-201.129.255.255 201.130.80.0/24 201.131.52.0/22 201.131.76.0/24 201.133.0.0-201.138.255.255 201.139.160.0/21 201.144.0.0/14 201.152.0.0/14 207.248.128.0/19 IPv6: 2001:1208::/32 2806:238::/48 2806:2c0::/32 2806:1000::/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8151 28412-28413 28513 28550 265512-265514 Signature Algorithm: sha256WithRSAEncryption b8:9a:41:53:c3:9e:bc:46:08:9f:f0:64:cc:d7:78:e5:12:35: 6a:78:22:f5:54:58:75:98:3b:ee:77:1c:f5:f1:56:86:f3:b7: 50:06:e7:84:94:71:91:b0:ca:4e:31:b9:dd:a0:c7:fb:bd:4e: d3:88:27:c0:78:e3:4d:b8:f4:65:49:95:12:02:f4:bc:83:55: f9:cf:33:5e:d2:a8:f4:97:0c:fb:b7:1b:49:f6:ca:64:d0:9f: 84:d4:b4:17:82:b7:4e:18:d4:74:31:ae:de:69:68:de:23:99: 46:cd:e0:10:ce:3c:c7:0e:d9:f1:ca:d7:4b:d7:a6:4b:30:91: 4b:de:cb:2b:5b:53:d8:1b:96:ab:64:14:34:90:7a:f4:42:84: d6:99:74:0d:f8:df:0f:2e:c5:84:03:d0:82:99:3c:19:3e:58: 64:22:75:c7:99:47:e9:19:5a:f9:fc:0b:bf:0b:fc:17:08:3e: 3f:6d:84:8a:ca:5a:a5:9f:db:6b:85:70:96:f8:89:7b:ef:e0: be:b4:a5:ac:86:35:17:89:11:80:d0:93:b5:c3:ab:10:a1:bb: 7f:91:0e:20:99:0c:d4:2c:40:fe:36:94:72:d0:74:13:0e:4f: 0d:2f:95:af:fd:90:71:07:22:aa:30:f7:de:2f:27:c7:b0:42: fa:d0:3e:33 -----BEGIN CERTIFICATE----- MIIHojCCBoqgAwIBAgIUDrRBLpAp9j7d2lU5vP9CAhPH3iowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNjAxMTIwMTM5MThaFw0yNzAxMTEwMTQ0MThaMDMxMTAvBgNV BAMTKEM4NjhEQzQyMjQ0M0ZBNzBFNzc2MUMwMzA0MDYxRUI5OThCRjczNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaBJZ39tWWWWvdzpqGkA2wWUzh PFK+Yp+v7RfVPRp7NE8e9uU/jhQYDLHbZogi+TfTYrSq/g/Par94p5HPQRqo9WHz oHKCMcF5niPfvj3q3F6+5iwV9FAhiADSCnQ6NVRmQ1YY/65DymrTfqEEpGhAR/lO QRHqv+MMHqvHxJt717SaoG/KwR4eiLIb2OuTzmVsC82+Zyne8d0lfZP1raBaoX6y jyVbq/fBim84gycr9PSm8HneIAQvOm+XpmoM7ejh2OGl0lEEmdlcRDVOzvfp5+aL 19ZTvPi+mhH/WlZjSWf3J+5QNMP0oU8q3TLmysM45jr0qFqd1AAY0DNKmzJzAgMB AAGjggSsMIIEqDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTIaNxCJEP6cOd2 HAMEBh65mL9zeDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM0I4N0M5MzkyOUVBMUJFOTUxNTQ5QjhC NzRBMzgwMEM2NDgzM0U4NUJFOUQ1MjNCQkE4RUMyNEU5NDMzOUFFRC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zQjg3QzkzOTI5RUExQkU5NTE1NDlCOEI3NEEzODAwQzY0ODMzRTg1QkU5 RDUyM0JCQThFQzI0RTk0MzM5QUVELzAvQzg2OERDNDIyNDQzRkE3MEU3NzYxQzAz MDQwNjFFQjk5OEJGNzM3OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMIIBDAYIKwYBBQUHAQcBAf8EgfwwgfkwgdEEAgABMIHKAwMAlN0D AwCU3wMDAJTpAwMAlOsDAwW7gAMDA7uoMAoDAwa7wAMDBLvgAwMGvYADAwW94AME AcBk6DAMAwQDyCGIAwQDyCGQAwQEyCIgAwQAyCKFAwQFyCQgAwQFyCaAAwQFyCbA AwMByEAwCwMEB8hCgAMDAshAAwQHyE4AAwQHyE8AAwQHyF8AMAoDAwXJYAMDAcmA AwQAyYJQAwQCyYM0AwQAyYNMMAoDAwDJhQMDAMmKAwQDyYugAwMCyZADAwLJmAME Bc/4gDAjBAIAAjAdAwUAIAESCAMHACgGAjgAAAMFACgGAsADBAAoBhAwNwYIKwYB BQUHAQgBAf8EKDAmoCQwIgICH9cwCAICbvwCAm79AgJvYQICb4YwCgIDBA0oAgME DSowDQYJKoZIhvcNAQELBQADggEBALiaQVPDnrxGCJ/wZMzXeOUSNWp4IvVUWHWY O+53HPXxVobzt1AG54SUcZGwyk4xud2gx/u9TtOIJ8B440249GVJlRIC9LyDVfnP M17SqPSXDPu3G0n2ymTQn4TUtBeCt04Y1HQxrt5paN4jmUbN4BDOPMcO2fHK10vX pkswkUveyytbU9gblqtkFDSQevRChNaZdA343w8uxYQD0IKZPBk+WGQidceZR+kZ Wvn8C78L/BcIPj9thIrKWqWf22uFcJb4iXvv4L60payGNReJEYDQk7XDqxChu3+R DiCZDNQsQP42lHLQdBMOTw0vla/9kHEHIqow994vJ8ewQvrQPjM= -----END CERTIFICATE-----Generated at Tue Jan 13 04:01:35 2026 by rpki-client