This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer
File: 3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer (raw, json)
Hash identifier: qS1LSI9jIXEbRsWTVLQxpGFaAQrcZzj+HyivhWE/QEI=
Subject key identifier: 34:72:E1:FF:18:18:96:2A:FB:9D:AD:44:8D:EB:6B:4F:02:BD:FB:C7
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 672255BDDFAEEDDE163AE3541CABE91E1DC62175
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 20 Jan 2026 03:17:51 +0000
Certificate not after: Tue 19 Jan 2027 03:22:51 +0000
Subordinate resources: IP: 45.170.128.0/22
IP: 2803:8ba0::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 30 Jan 2026 02:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:22:55:bd:df:ae:ed:de:16:3a:e3:54:1c:ab:e9:1e:1d:c6:21:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Jan 20 03:17:51 2026 GMT
Not After : Jan 19 03:22:51 2027 GMT
Subject: CN=3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:cd:32:59:85:a4:fe:22:a0:63:65:cf:e9:
38:95:bf:f3:01:a9:37:3c:60:d2:2d:66:63:a4:4e:
14:cc:1f:ff:fc:01:2f:81:1e:9d:76:d6:b3:16:63:
19:77:6b:3a:52:4f:dc:3d:7f:4a:94:41:5b:67:c4:
3e:20:87:e2:94:54:27:a0:2d:d7:11:5b:5a:75:80:
d1:16:51:0d:54:11:fd:13:3c:79:1d:44:b5:5c:4b:
cd:05:99:f0:75:2d:95:b2:5d:f2:db:0d:29:94:3a:
d1:55:0f:b8:0e:fa:fd:42:17:c4:40:7c:ae:b8:d6:
6a:44:b5:71:86:cd:3b:ff:7c:e1:01:72:f9:c2:3b:
20:06:70:54:c9:3a:cb:f7:78:55:3a:93:0d:0d:05:
6e:14:c9:b7:4f:f0:6c:4b:43:3c:b7:7e:67:a0:17:
29:55:08:e9:55:9c:bb:6f:03:4e:5d:06:03:e7:d4:
44:7b:ac:a0:73:42:5e:91:5d:75:15:48:0d:09:ab:
d1:7a:56:cd:66:f5:93:cd:82:36:2c:3f:41:2c:9d:
8d:fd:6f:7a:d7:09:8e:7e:88:62:26:ee:0d:08:e6:
cb:8c:f9:03:0b:52:6b:96:b3:1a:02:4c:fa:03:00:
ab:21:69:a8:a0:4e:be:40:72:48:22:0a:d4:10:35:
80:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
34:72:E1:FF:18:18:96:2A:FB:9D:AD:44:8D:EB:6B:4F:02:BD:FB:C7
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.128.0/22
IPv6:
2803:8ba0::/32
Signature Algorithm: sha256WithRSAEncryption
2b:56:32:7d:dd:dd:89:e3:98:6a:08:f0:8b:4d:d6:50:86:c8:
1b:75:63:bc:ea:ab:34:62:2a:c4:ef:7c:b5:40:95:6e:2a:58:
5c:bb:3b:d3:74:09:30:30:91:ce:19:8a:f0:89:9b:56:5b:fe:
72:61:27:ad:15:ff:54:c1:44:6b:56:ac:62:cf:35:e7:75:a8:
01:8e:ec:f0:b6:3f:d9:08:1f:dd:0b:57:50:d0:b6:80:25:67:
0f:ab:69:35:1c:37:88:e2:a3:b0:b5:51:f5:d0:58:e2:48:b3:
71:ce:45:a9:18:bc:4b:d3:be:97:f9:e9:8c:7d:6e:61:f0:68:
19:70:9b:d7:5c:d6:90:28:4b:06:37:44:ae:db:f3:e0:06:bd:
74:cf:4b:79:26:54:6b:05:e2:a2:76:0e:a6:1e:19:fe:66:cd:
b9:7e:24:1e:f1:9a:c6:c9:44:25:4e:3d:8c:7f:15:22:fe:e8:
9f:f8:dd:6f:a5:aa:62:31:f4:75:7a:ab:e7:aa:2a:69:8d:bf:
5f:ae:a2:94:aa:fb:27:2a:04:87:82:88:27:dd:7c:30:d3:e1:
7c:14:ab:0a:12:5c:57:50:f3:df:5e:c9:dd:39:96:c6:2a:46:
eb:62:f5:57:e8:0c:5e:69:ca:c7:24:9e:0d:be:bc:35:ac:d9:
7d:54:4d:98
-----BEGIN CERTIFICATE-----
MIIGiTCCBXGgAwIBAgIUZyJVvd+u7d4WOuNUHKvpHh3GIXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB
RTY2MTgxNjAeFw0yNjAxMjAwMzE3NTFaFw0yNzAxMTkwMzIyNTFaMDMxMTAvBgNV
BAMTKDM0NzJFMUZGMTgxODk2MkFGQjlEQUQ0NDhERUI2QjRGMDJCREZCQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVPM0yWYWk/iKgY2XP6TiVv/MB
qTc8YNItZmOkThTMH//8AS+BHp121rMWYxl3azpST9w9f0qUQVtnxD4gh+KUVCeg
LdcRW1p1gNEWUQ1UEf0TPHkdRLVcS80FmfB1LZWyXfLbDSmUOtFVD7gO+v1CF8RA
fK641mpEtXGGzTv/fOEBcvnCOyAGcFTJOsv3eFU6kw0NBW4UybdP8GxLQzy3fmeg
FylVCOlVnLtvA05dBgPn1ER7rKBzQl6RXXUVSA0Jq9F6Vs1m9ZPNgjYsP0EsnY39
b3rXCY5+iGIm7g0I5suM+QMLUmuWsxoCTPoDAKshaaigTr5AckgiCtQQNYDRAgMB
AAGjggOTMIIDjzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ0cuH/GBiWKvud
rUSN62tPAr37xzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD
QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODdENTlDRTAwMTcyMTQ2QjBDMTE2QTg0
NTAwRjYzRkU3NTExQURBNjUwREMxNkQ1N0VCQkZCREY3OTkyMDBCQi8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy84N0Q1OUNFMDAxNzIxNDZCMEMxMTZBODQ1MDBGNjNGRTc1MTFBREE2NTBE
QzE2RDU3RUJCRkJERjc5OTIwMEJCLzAvMzQ3MkUxRkYxODE4OTYyQUZCOURBRDQ0
OERFQjZCNEYwMkJERkJDNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLaqAMA0EAgAC
MAcDBQAoA4ugMA0GCSqGSIb3DQEBCwUAA4IBAQArVjJ93d2J45hqCPCLTdZQhsgb
dWO86qs0YirE73y1QJVuKlhcuzvTdAkwMJHOGYrwiZtWW/5yYSetFf9UwURrVqxi
zzXndagBjuzwtj/ZCB/dC1dQ0LaAJWcPq2k1HDeI4qOwtVH10FjiSLNxzkWpGLxL
076X+emMfW5h8GgZcJvXXNaQKEsGN0Su2/PgBr10z0t5JlRrBeKidg6mHhn+Zs25
fiQe8ZrGyUQlTj2MfxUi/uif+N1vpapiMfR1eqvnqippjb9frqKUqvsnKgSHgogn
3Xww0+F8FKsKElxXUPPfXsndOZbGKkbrYvVX6AxeacrHJJ4Nvrw1rNl9VE2Y
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:35:54 2026 by rpki-client