This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.cer
File: 1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.cer (raw, json)
Hash identifier: hNk3DytwxmKDBX5YB5D6783hNpFS2h3RL/gepF3HdcA=
Subject key identifier: 1D:74:5E:BF:35:F5:EB:9C:70:C4:2D:53:92:DC:97:76:A7:ED:2F:C2
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 058AEB3995FA8EF73B196770DAF01C2721C67588
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 20 Jan 2026 04:07:53 +0000
Certificate not after: Tue 19 Jan 2027 04:12:53 +0000
Subordinate resources: IP: 45.5.164.0/22
IP: 2801:17:d000::/48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:8a:eb:39:95:fa:8e:f7:3b:19:67:70:da:f0:1c:27:21:c6:75:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Jan 20 04:07:53 2026 GMT
Not After : Jan 19 04:12:53 2027 GMT
Subject: CN=1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:ee:f0:7f:d9:3a:3e:da:00:e8:0f:89:35:
c3:81:31:66:7c:59:44:78:a0:72:29:ed:30:59:90:
dd:fc:05:98:cd:15:3c:9e:31:96:a3:bb:32:15:9b:
c4:ae:f4:5d:a7:8e:63:1d:10:eb:4f:48:4e:ec:e2:
c2:67:c1:75:c2:e6:2d:b8:a3:29:01:79:e0:6d:17:
cd:12:56:2b:1b:ca:28:cf:1c:b1:c0:ad:5c:f4:c9:
e2:fe:3c:08:78:17:67:86:7d:0f:d7:8a:e3:33:15:
35:20:3a:cf:21:70:0e:17:94:64:5a:7a:08:62:93:
97:fa:31:df:0d:5f:c4:10:93:67:24:6b:7e:ec:7b:
bd:3f:89:2f:f8:83:5a:32:12:eb:e5:0a:08:53:aa:
9f:c6:3f:39:35:64:b6:43:ee:cd:a1:d8:70:4d:c6:
83:a6:f8:8e:a8:43:aa:d7:74:7c:88:c2:8d:a9:3f:
20:48:e9:58:95:7d:bb:e9:72:29:32:cd:89:45:a0:
11:40:fb:56:a8:13:5c:5e:0c:c0:77:aa:f1:3d:b8:
5e:cd:00:94:8b:66:23:5e:0b:7e:0b:7e:81:55:07:
2b:f4:ac:a5:6a:85:20:55:dc:3d:ab:b8:26:97:09:
10:4b:43:81:bd:62:ad:bb:89:b4:c1:58:e3:d5:fa:
d0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1D:74:5E:BF:35:F5:EB:9C:70:C4:2D:53:92:DC:97:76:A7:ED:2F:C2
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.164.0/22
IPv6:
2801:17:d000::/48
Signature Algorithm: sha256WithRSAEncryption
96:38:cb:a5:a1:91:94:d4:25:67:5b:11:31:e7:25:c3:32:3e:
1b:74:5f:4d:fc:2f:30:65:a0:61:e6:63:e7:ed:f2:ef:50:44:
ec:f0:9f:a1:46:01:c7:09:25:36:30:c6:c5:92:ab:38:17:1b:
e7:8d:0e:31:32:05:0e:c7:d9:fa:be:c5:e8:58:44:eb:6e:6d:
60:7c:be:ee:ca:50:16:8b:e8:e1:17:4e:20:1b:5a:4f:f4:3a:
2d:7c:f9:f0:b8:04:56:6c:13:3a:b8:8e:08:59:7c:9f:ea:20:
44:95:eb:fe:59:9c:0a:f8:3b:66:8f:ff:c8:ee:dc:0b:d1:a8:
d5:72:4a:46:61:75:6e:e2:e2:64:94:15:cb:be:e2:de:8c:27:
97:5f:9f:22:95:4c:b4:47:a3:7e:6e:85:be:d4:3b:33:a0:31:
7c:72:9e:53:b0:01:a4:37:4f:64:80:c7:75:bd:9f:76:44:9c:
56:df:b6:bc:f4:4d:e4:54:a3:14:8b:4a:27:8b:34:a6:6a:64:
3c:ed:88:7a:d1:d1:22:da:2b:04:0c:3e:63:08:d2:f2:9b:11:
ea:9a:76:4e:a0:f5:02:b6:6b:80:a5:00:bf:31:9c:93:41:28:
71:9e:9c:8d:e5:50:da:da:22:43:65:2b:42:84:19:71:bb:6e:
8e:9c:16:58
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:54:18 2026 by rpki-client