This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer File: 8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer (raw, json) Hash identifier: gNaGF8oxyGmLP46rH8DryzQh4tNKFmAW0+vRN4wf4Gc= Subject key identifier: 8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 286A79BB634D89C1190AB9858815091BECBE307B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 20 Jan 2026 08:02:38 +0000 Certificate not after: Tue 19 Jan 2027 08:07:38 +0000 Subordinate resources: AS: 17072 AS: 22884 AS: 28414 IP: 138.186.28.0/22 IP: 148.230.128.0/17 IP: 186.96.0.0/18 IP: 186.96.128.0/18 IP: 187.188.0.0 -- 187.191.63.255 IP: 187.251.96.0 -- 187.251.159.255 IP: 187.251.192.0/18 IP: 189.201.0.0/17 IP: 189.203.0.0/16 IP: 200.34.221.0 -- 200.34.222.255 IP: 200.76.64.0/20 IP: 201.149.128.0/17 IP: 2806:2f0::/32 IP: 2806:380::/27 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 30 Jan 2026 02:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:6a:79:bb:63:4d:89:c1:19:0a:b9:85:88:15:09:1b:ec:be:30:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jan 20 08:02:38 2026 GMT Not After : Jan 19 08:07:38 2027 GMT Subject: CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d9:c5:8f:76:47:3c:6e:d5:57:75:82:02:a0: bc:bc:9e:e6:d6:fb:7e:bc:12:6b:10:b4:9c:c1:8f: ca:7f:d8:9c:38:b7:49:55:fd:68:84:98:e4:8c:db: be:58:c3:1a:2a:ab:4a:96:4a:fc:70:e8:4a:a6:b8: 1e:2b:db:19:ae:89:ba:46:97:2c:a1:d5:63:66:b1: 4c:b5:61:00:28:0e:f2:6b:e3:86:1e:4f:dc:04:ab: 8b:17:04:35:53:43:e1:1c:ae:c7:b2:af:24:cc:e0: 06:3b:11:5c:df:84:c5:84:45:2a:1c:b2:13:a5:b1: 2d:6b:66:a3:83:b5:60:7e:73:7c:25:13:eb:7b:63: 9f:0e:e1:e0:9f:fa:4c:97:62:5a:0e:fe:ed:07:62: c6:06:66:2f:e5:f9:ef:aa:1a:e3:79:9b:cc:91:2b: 2b:7c:ac:f6:78:6c:35:0a:52:ba:8d:56:ce:17:92: 33:dc:af:73:ec:f4:bb:ef:fc:23:17:5b:c0:11:a0: da:e9:87:97:4c:f7:c8:17:8b:cd:f5:a5:f5:08:d2: b7:65:3e:5f:a0:e0:6c:74:70:f9:fb:a6:04:68:d7: 8d:0a:ca:42:20:3b:8a:95:6d:1a:d9:86:02:59:d5: 77:e1:25:8d:97:ae:22:2e:0c:a8:72:39:3b:8b:85: 62:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.28.0/22 148.230.128.0/17 186.96.0.0/18 186.96.128.0/18 187.188.0.0-187.191.63.255 187.251.96.0-187.251.159.255 187.251.192.0/18 189.201.0.0/17 189.203.0.0/16 200.34.221.0-200.34.222.255 200.76.64.0/20 201.149.128.0/17 IPv6: 2806:2f0::/32 2806:380::/27 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17072 22884 28414 Signature Algorithm: sha256WithRSAEncryption 98:da:7b:26:11:66:d5:10:38:38:b5:e6:72:b2:5d:3a:1b:90: c1:a8:c1:96:2b:94:3d:be:58:a8:65:d6:39:e3:52:c8:48:2d: c0:35:a3:2a:29:0a:3b:cf:18:cf:8b:c6:00:63:a7:c9:17:7f: 8c:80:3b:13:57:81:fc:f9:9b:58:0b:3a:ca:17:1d:dd:d9:c6: 0e:84:fc:26:25:17:7d:55:fe:de:f3:e4:ba:3b:4c:31:31:c9: ef:94:c3:22:47:3b:7a:73:17:58:42:fa:ab:f1:80:b2:7d:b9: 9a:8d:60:93:4c:8e:46:e9:25:2a:49:ee:f0:41:50:10:ec:4d: 8c:e4:57:ab:b9:f7:31:74:e1:20:24:c3:85:c0:ae:bd:61:94: 32:2b:8b:8c:fe:0b:96:c8:21:c1:95:fc:a5:a0:f6:7f:bb:55: 21:30:ab:65:13:67:bd:4f:8c:e3:a9:e8:aa:95:50:46:3e:67: cb:b1:a9:e4:ac:71:0d:d7:97:0a:1e:9f:24:5e:a1:fc:d5:8e: 4a:67:36:7f:c4:aa:32:ad:db:84:c4:b2:cd:5b:1c:60:92:e7: 8f:43:b3:12:be:14:22:3b:54:df:51:e3:c8:b1:8b:ce:36:29: 41:26:a5:8e:a6:d1:ef:2e:96:06:07:8f:26:50:5b:5b:32:a3: 1f:bf:f8:2a -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUKGp5u2NNicEZCrmFiBUJG+y+MHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNjAxMjAwODAyMzhaFw0yNzAxMTkwODA3MzhaMDMxMTAvBgNV BAMTKDhBQUYxQzMxMkMyNDExMjUyQzdGNzc2M0EyNUM5NzVGNThBQTBCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi2cWPdkc8btVXdYICoLy8nubW +368EmsQtJzBj8p/2Jw4t0lV/WiEmOSM275Ywxoqq0qWSvxw6EqmuB4r2xmuibpG lyyh1WNmsUy1YQAoDvJr44YeT9wEq4sXBDVTQ+EcrseyryTM4AY7EVzfhMWERSoc shOlsS1rZqODtWB+c3wlE+t7Y58O4eCf+kyXYloO/u0HYsYGZi/l+e+qGuN5m8yR Kyt8rPZ4bDUKUrqNVs4XkjPcr3Ps9Lvv/CMXW8ARoNrph5dM98gXi831pfUI0rdl Pl+g4Gx0cPn7pgRo140KykIgO4qVbRrZhgJZ1XfhJY2XriIuDKhyOTuLhWJfAgMB AAGjggQWMIIEEjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSKrxwxLCQRJSx/ d2OiXJdfWKoL/zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTBCRjlFMDYzMjk0QzczNUI4MzVBRUFF MTU4MTZERjA3NDk3NjIxRDIzMTA0MDlDNTc3MjlBQTY4Rjc3M0NCNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BMEJGOUUwNjMyOTRDNzM1QjgzNUFFQUUxNTgxNkRGMDc0OTc2MjFEMjMx MDQwOUM1NzcyOUFBNjhGNzczQ0I0LzAvOEFBRjFDMzEyQzI0MTEyNTJDN0Y3NzYz QTI1Qzk3NUY1OEFBMEJGRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwZAQCAAEwXgMEAoq6HAMEB5Tm gAMEBrpgAAMEBrpggDALAwMCu7wDBAa7vwAwDAMEBbv7YAMEBbv7gAMEBrv7wAME B73JAAMDAL3LMAwDBADIIt0DBADIIt4DBATITEADBAfJlYAwFAQCAAIwDgMFACgG AvADBQUoBgOAMCEGCCsGAQUFBwEIAQH/BBIwEKAOMAwCAkKwAgJZZAICbv4wDQYJ KoZIhvcNAQELBQADggEBAJjaeyYRZtUQODi15nKyXTobkMGowZYrlD2+WKhl1jnj UshILcA1oyopCjvPGM+LxgBjp8kXf4yAOxNXgfz5m1gLOsoXHd3Zxg6E/CYlF31V /t7z5Lo7TDExye+UwyJHO3pzF1hC+qvxgLJ9uZqNYJNMjkbpJSpJ7vBBUBDsTYzk V6u59zF04SAkw4XArr1hlDIri4z+C5bIIcGV/KWg9n+7VSEwq2UTZ71PjOOp6KqV UEY+Z8uxqeSscQ3XlwoenyReofzVjkpnNn/EqjKt24TEss1bHGCS549DsxK+FCI7 VN9R48ixi842KUEmpY6m0e8ulgYHjyZQW1syox+/+Co= -----END CERTIFICATE-----Generated at Sun Jan 25 06:25:51 2026 by rpki-client