This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AA883DF802251B99A42D7F578AD8768A729025.cer
File: B3AA883DF802251B99A42D7F578AD8768A729025.cer (raw, json)
Hash identifier: 6iIWyKRN9y5ucEMz9smQytC50Sw2PbfnhbTN1YjMHBg=
Subject key identifier: B3:AA:88:3D:F8:02:25:1B:99:A4:2D:7F:57:8A:D8:76:8A:72:90:25
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 4257BC8A01D07E406D36781F0D3FF392396DD7D8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 20 Jan 2026 05:25:01 +0000
Certificate not after: Tue 19 Jan 2027 05:30:01 +0000
Subordinate resources: IP: 45.171.118.0/24
IP: 2803:e060::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 30 Jan 2026 02:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:57:bc:8a:01:d0:7e:40:6d:36:78:1f:0d:3f:f3:92:39:6d:d7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Jan 20 05:25:01 2026 GMT
Not After : Jan 19 05:30:01 2027 GMT
Subject: CN=B3AA883DF802251B99A42D7F578AD8768A729025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:2b:1b:81:05:d1:07:cb:a5:e0:97:00:1e:
1e:af:87:e2:db:b8:a1:b5:73:04:6e:3c:fd:e9:f2:
40:45:91:58:fe:b5:88:ad:25:4a:a3:63:07:e7:98:
1d:6c:c1:a5:7c:57:36:49:91:aa:31:b9:e8:3b:da:
ec:50:65:6f:d6:7c:b3:ec:73:a3:3f:e0:c2:d3:41:
5b:01:42:e1:09:ef:89:7b:bf:bc:2a:51:b8:65:90:
13:8b:c7:bf:00:99:68:25:e3:c5:7b:b7:d8:09:86:
d4:06:2a:08:20:7b:c5:20:bf:85:c8:cf:c2:e6:16:
ce:a6:fa:be:23:37:3b:7d:7b:2c:25:43:d6:f2:b2:
92:d7:78:61:1c:28:b4:31:be:11:b1:29:df:8c:37:
d5:2f:d6:20:6d:fa:1f:ac:68:59:85:a0:1e:74:b9:
a8:2f:0d:d1:98:56:f2:b1:76:de:c0:5f:e3:b3:cb:
df:99:ae:fb:2e:26:98:7e:3d:e8:1e:38:5f:48:a4:
a9:75:d4:76:15:62:ce:27:fa:9c:21:93:cb:c5:08:
c9:fb:d0:1a:49:7e:aa:f5:2b:43:45:76:97:63:5f:
f6:0a:9e:48:c2:2c:95:c7:73:04:45:fe:f1:fa:f1:
5a:8d:12:8a:b7:21:c7:da:ae:5a:ad:1a:68:55:ed:
a8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B3:AA:88:3D:F8:02:25:1B:99:A4:2D:7F:57:8A:D8:76:8A:72:90:25
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.118.0/24
IPv6:
2803:e060::/32
Signature Algorithm: sha256WithRSAEncryption
c8:4d:61:3e:70:a9:31:10:85:20:41:9b:f4:82:e8:51:9a:51:
8f:92:9b:99:67:4e:9b:d2:e8:2a:bf:fa:21:e2:93:dc:82:65:
43:9d:dc:40:80:f5:68:ff:88:27:48:70:b9:c9:37:40:62:4f:
b4:7f:ef:43:e7:9a:95:68:b2:e8:88:bf:06:64:66:5c:47:71:
89:c2:38:18:bd:16:cb:71:b0:ba:e4:b9:05:0b:3b:e6:a4:7f:
8a:01:28:7a:cc:db:d1:fb:07:97:be:1c:13:57:b0:65:60:87:
a0:ce:d4:22:49:b1:2b:d7:38:bb:69:63:ed:31:47:fe:83:6d:
27:99:c8:d2:7b:5a:31:d9:32:77:3e:9e:1c:c3:76:91:91:c6:
4e:55:7d:e6:7f:eb:e2:0f:51:f0:61:ea:5c:7c:99:0c:54:0a:
d5:39:4c:c9:73:ca:9e:bd:99:5c:71:88:f0:86:45:4a:9a:e2:
4f:f9:fc:e9:09:45:33:ca:40:f7:17:94:db:3e:b0:ca:c0:80:
b7:c0:51:97:37:fd:b2:79:36:25:82:4a:cc:49:ac:47:d3:2d:
a1:f3:72:68:5e:fa:77:e4:d8:31:28:99:f1:88:40:fd:53:7a:
30:e0:37:e7:5a:d8:26:6e:09:83:38:84:81:a7:2b:57:cd:7b:
23:a0:31:aa
-----BEGIN CERTIFICATE-----
MIIGiTCCBXGgAwIBAgIUQle8igHQfkBtNngfDT/zkjlt19gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB
RTY2MTgxNjAeFw0yNjAxMjAwNTI1MDFaFw0yNzAxMTkwNTMwMDFaMDMxMTAvBgNV
BAMTKEIzQUE4ODNERjgwMjI1MUI5OUE0MkQ3RjU3OEFEODc2OEE3MjkwMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6gysbgQXRB8ul4JcAHh6vh+Lb
uKG1cwRuPP3p8kBFkVj+tYitJUqjYwfnmB1swaV8VzZJkaoxueg72uxQZW/WfLPs
c6M/4MLTQVsBQuEJ74l7v7wqUbhlkBOLx78AmWgl48V7t9gJhtQGKggge8Ugv4XI
z8LmFs6m+r4jNzt9eywlQ9byspLXeGEcKLQxvhGxKd+MN9Uv1iBt+h+saFmFoB50
uagvDdGYVvKxdt7AX+Ozy9+ZrvsuJph+PegeOF9IpKl11HYVYs4n+pwhk8vFCMn7
0BpJfqr1K0NFdpdjX/YKnkjCLJXHcwRF/vH68VqNEoq3IcfarlqtGmhV7ahRAgMB
AAGjggOTMIIDjzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSzqog9+AIlG5mk
LX9Xith2inKQJTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD
QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNEFBRDM4MUQ1NkJCMTI0NkY5QTA4MjEw
QjAyQzdEMDQxNEJDOThDOENEN0Y5QTYyNjg3REY3QkZDQ0E1RjRBRS8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80QUFEMzgxRDU2QkIxMjQ2RjlBMDgyMTBCMDJDN0QwNDE0QkM5OEM4Q0Q3
RjlBNjI2ODdERjdCRkNDQTVGNEFFLzAvQjNBQTg4M0RGODAyMjUxQjk5QTQyRDdG
NTc4QUQ4NzY4QTcyOTAyNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALat2MA0EAgAC
MAcDBQAoA+BgMA0GCSqGSIb3DQEBCwUAA4IBAQDITWE+cKkxEIUgQZv0guhRmlGP
kpuZZ06b0ugqv/oh4pPcgmVDndxAgPVo/4gnSHC5yTdAYk+0f+9D55qVaLLoiL8G
ZGZcR3GJwjgYvRbLcbC65LkFCzvmpH+KASh6zNvR+weXvhwTV7BlYIegztQiSbEr
1zi7aWPtMUf+g20nmcjSe1ox2TJ3Pp4cw3aRkcZOVX3mf+viD1HwYepcfJkMVArV
OUzJc8qevZlccYjwhkVKmuJP+fzpCUUzykD3F5TbPrDKwIC3wFGXN/2yeTYlgkrM
SaxH0y2h83JoXvp35NgxKJnxiED9U3ow4DfnWtgmbgmDOISBpytXzXsjoDGq
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:21:10 2026 by rpki-client