This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.cer
File: 74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.cer (raw, json)
Hash identifier: NGRWudVZeW5UkPzxeCv5UrAcdpRLEUJZsqWZ7CADnTs=
Subject key identifier: 74:AA:43:08:C5:C1:EF:C7:C5:C0:06:F2:CC:6F:5C:7B:E6:02:14:83
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 508C70CD7CAE39AB0ADBB8F6F5B3590284584247
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Mon 19 Jan 2026 20:30:17 +0000
Certificate not after: Mon 18 Jan 2027 20:35:17 +0000
Subordinate resources: AS: 266781
IP: 45.233.140.0 -- 45.233.142.255
IP: 2803:df20::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 30 Jan 2026 02:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:8c:70:cd:7c:ae:39:ab:0a:db:b8:f6:f5:b3:59:02:84:58:42:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Jan 19 20:30:17 2026 GMT
Not After : Jan 18 20:35:17 2027 GMT
Subject: CN=74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:54:d6:4c:20:79:e6:50:7f:5c:de:7d:8d:ef:
a4:91:90:25:94:16:8a:ea:bc:35:6e:68:93:01:65:
db:5a:c9:d3:a2:39:56:fe:d5:a3:d7:51:a1:9b:09:
bc:c5:7c:0e:5f:f6:c3:67:29:67:41:20:ba:81:27:
38:6e:a1:9c:91:ef:87:a1:d6:49:d2:fe:c6:8f:97:
4f:74:03:79:e2:da:93:bb:c2:38:4d:92:a4:ea:35:
e2:1c:ab:f5:52:4f:8c:38:80:60:e8:1e:65:6c:44:
58:96:e7:b6:16:eb:b5:c3:6d:28:97:c8:cf:62:9c:
41:a4:22:44:e3:1f:72:b3:48:df:a1:5e:06:39:94:
4a:7b:bd:d8:37:a8:af:91:93:b8:6a:d4:90:a2:bc:
d0:be:10:bf:0e:1f:e9:e3:5b:8a:21:03:30:6a:63:
ee:75:7c:da:64:7d:88:7b:3d:42:ba:5d:b5:00:d1:
16:a9:c6:3a:87:84:81:e2:39:85:79:02:99:96:0e:
cd:ad:6f:4a:c0:56:8e:f5:75:0d:96:56:b3:ee:99:
7e:04:ed:0a:4a:c9:2f:83:24:e0:81:6a:3a:6b:37:
eb:95:d0:f7:f7:04:b9:5b:6f:74:9b:c1:9f:68:8a:
b3:25:95:0e:b7:94:ec:de:bf:7a:35:55:99:18:7b:
63:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
74:AA:43:08:C5:C1:EF:C7:C5:C0:06:F2:CC:6F:5C:7B:E6:02:14:83
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.233.140.0-45.233.142.255
IPv6:
2803:df20::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266781
Signature Algorithm: sha256WithRSAEncryption
c2:c8:8d:a5:ed:13:6e:f8:bc:f8:91:fe:74:64:6d:6b:a6:18:
48:84:0a:3d:08:93:71:08:a2:64:c7:e7:89:52:5d:de:9a:1d:
44:e6:c1:7f:f7:e7:ca:2d:20:a7:b5:17:e8:7d:19:46:80:bd:
8d:2c:9b:6e:ea:4e:bf:f3:da:d4:a8:c6:c4:a9:57:b9:b1:e3:
7d:0b:0d:4a:30:fc:9a:ec:48:27:b2:9c:65:53:25:4d:0a:34:
43:ee:24:22:26:c8:85:85:21:37:d0:6c:7d:c2:bd:4b:97:30:
2f:5f:9c:cf:a6:b3:66:69:9c:0d:a1:12:b1:05:cc:6f:d2:d7:
74:c6:1d:80:45:fd:e0:47:22:d6:eb:12:19:fd:8c:11:c8:3d:
33:b4:b9:7c:fd:b0:40:b8:38:4f:a4:66:7b:40:91:10:bf:94:
a4:ba:03:ee:1c:23:f6:89:12:8d:c1:2a:c6:53:4b:ed:4c:e2:
60:78:62:d2:0d:69:01:d1:a9:78:9e:6c:c4:d1:b9:e9:48:66:
ca:21:d1:34:b5:3c:f9:95:96:5d:46:2e:7c:8c:60:6c:1c:80:
f1:cd:1d:b5:07:81:78:ef:b1:e9:e7:9e:d6:ba:6e:80:be:de:
0c:f6:ec:f0:27:47:e9:2e:b7:a6:ed:f2:21:73:8b:f4:26:64:
4a:75:ee:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:19:40 2026 by rpki-client