This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer
File: FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.cer (raw, json)
Hash identifier: gRbvvRhTik+pvjaGXmJLca3eXOxw7NOlLyS3//4sONk=
Subject key identifier: FD:CD:3C:F2:DE:71:0C:85:FB:6B:36:F5:57:02:D0:4B:F4:63:16:B3
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 4B9E6D17AC85BAE72A3D3BF3781725D2E5D7234A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Mon 12 Jan 2026 11:05:00 +0000
Certificate not after: Mon 11 Jan 2027 11:10:00 +0000
Subordinate resources: AS: 28120
IP: 200.114.88.0/21
IP: 2803:420::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 23:35:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:9e:6d:17:ac:85:ba:e7:2a:3d:3b:f3:78:17:25:d2:e5:d7:23:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Jan 12 11:05:00 2026 GMT
Not After : Jan 11 11:10:00 2027 GMT
Subject: CN=FDCD3CF2DE710C85FB6B36F55702D04BF46316B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:a7:da:8d:b7:a4:4c:ff:b0:c3:b5:ab:1a:
27:5c:89:e3:e5:ee:b8:6b:0b:38:2a:6c:e2:44:f0:
c4:ef:63:42:37:13:bc:5a:8f:aa:a1:54:55:70:86:
f1:53:2c:1d:74:99:65:d2:21:b4:a8:75:39:96:df:
1d:39:e3:d9:80:fa:d4:b2:a8:50:b3:b7:6e:28:fe:
03:e2:46:fe:76:6d:94:0d:13:86:4c:ae:11:57:f6:
b6:c4:03:75:ff:05:b7:df:6a:23:cb:38:c5:1f:dd:
64:9d:18:d8:4f:3a:19:e8:84:5f:b7:75:93:e7:f7:
ae:6c:20:af:a5:b2:9b:71:e6:b3:d9:59:1a:4f:d3:
8b:0f:1a:ef:69:49:3b:83:79:fc:72:6d:8d:c2:33:
10:4b:0b:49:84:89:cf:59:0b:f3:92:0f:99:f3:02:
1f:0c:62:77:35:80:a0:a2:ed:66:b3:53:88:69:fe:
ad:31:e1:61:18:6b:a6:77:64:97:0f:cc:9e:18:60:
08:2c:06:54:b2:44:2c:1e:60:44:0f:b1:5f:d9:4e:
a4:1c:88:a6:c4:6e:5e:47:01:5b:6b:66:94:0d:38:
13:6c:27:8c:3b:c9:0e:3a:cf:93:04:d5:75:b1:10:
ce:4e:6d:90:d5:0b:d7:3c:d6:72:38:64:0d:1a:69:
cd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FD:CD:3C:F2:DE:71:0C:85:FB:6B:36:F5:57:02:D0:4B:F4:63:16:B3
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/826DDAB6E94D74BD3305EFCFD378BE88E3BCDDD7A71212766577BB69B230E898/0/FDCD3CF2DE710C85FB6B36F55702D04BF46316B3.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.114.88.0/21
IPv6:
2803:420::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28120
Signature Algorithm: sha256WithRSAEncryption
63:5a:fb:97:dd:f6:6a:2a:02:9d:be:7e:0f:ce:9f:af:25:28:
30:c5:52:c6:b5:16:2f:e3:e7:01:fa:6f:29:e0:16:d0:35:44:
c3:e8:9a:79:61:6d:cb:d3:b7:83:2f:0d:77:a9:b8:4c:68:41:
85:2f:3e:30:c3:48:13:e3:87:52:6a:e7:3a:2b:d8:e4:3c:61:
28:c4:9f:ef:93:a0:2a:14:26:32:ab:34:92:38:00:b4:c0:dd:
ee:a8:17:42:27:e1:85:ae:85:e9:86:f7:e7:ca:79:d1:64:ef:
09:e8:aa:da:ef:4f:b6:2d:4c:bf:a0:ba:a3:0c:4b:24:ad:2b:
8f:80:e6:b3:7c:c9:7f:4a:b1:34:cd:d8:45:31:e4:a1:c1:3f:
92:74:6b:ad:95:7a:44:df:c8:95:ba:c3:1f:e5:5a:5e:53:a9:
7e:1a:da:96:e5:3a:e0:a8:86:10:76:89:80:df:48:55:49:59:
56:71:ee:e1:81:4e:3a:dd:5f:1b:12:c4:db:cf:e2:2b:7c:ec:
29:21:69:c0:9d:85:94:ba:30:cd:fe:c9:c2:4d:b5:5e:d6:67:
36:c3:31:c6:17:a2:87:4a:9f:5f:ec:e0:72:56:0b:27:3d:c4:
7e:e6:d7:1f:c8:5b:bb:05:de:07:5b:33:5c:0a:1c:eb:54:c7:
7a:49:99:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 04:38:13 2026 by rpki-client