This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.cer
File: BB2B2E89891085EE92514B5D91EFE9F59005C933.cer (raw, json)
Hash identifier: wcljmPXrDEEyD8Z0qK57XyhOsvIVIXDhkGU4m5mdMh4=
Subject key identifier: BB:2B:2E:89:89:10:85:EE:92:51:4B:5D:91:EF:E9:F5:90:05:C9:33
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 45B895C9A4A879C35A905222DB2BFCA62B51618D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 20 Jan 2026 07:08:00 +0000
Certificate not after: Tue 19 Jan 2027 07:13:00 +0000
Subordinate resources: IP: 192.188.58.0/24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:b8:95:c9:a4:a8:79:c3:5a:90:52:22:db:2b:fc:a6:2b:51:61:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Jan 20 07:08:00 2026 GMT
Not After : Jan 19 07:13:00 2027 GMT
Subject: CN=BB2B2E89891085EE92514B5D91EFE9F59005C933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ab:95:92:07:32:21:74:86:db:41:62:b6:96:
fd:da:8d:ba:c4:60:f9:d5:82:ca:06:20:26:01:3a:
04:da:0c:0e:e0:cc:66:14:68:b6:d4:d3:05:51:a9:
0c:a6:40:58:21:ee:e8:f7:3d:d5:12:4e:42:5f:c3:
af:54:6d:97:55:64:c9:11:e2:15:25:4b:14:bf:0f:
e7:56:2e:e9:0d:03:7b:8d:f7:dd:b2:fa:a3:ed:55:
f0:2a:66:ae:d7:0a:f8:0b:2b:f2:58:f2:b2:ee:42:
e2:f7:1f:5b:89:96:1d:ad:2b:f9:f3:78:e6:da:44:
44:6e:cb:47:a5:c3:94:ff:81:90:45:63:73:2e:cd:
25:c8:13:57:0b:aa:40:f6:bb:e5:34:68:ed:df:fd:
43:b6:9f:4a:c5:7b:02:75:6e:8c:92:4a:bd:52:61:
1d:f5:60:64:4b:ae:a1:5f:14:f2:15:60:42:7c:f2:
6d:aa:53:6f:41:92:4d:8d:6d:37:c3:3d:6d:27:57:
f2:45:6e:90:ce:d4:63:77:97:5b:93:0b:22:35:8d:
db:da:11:d3:70:87:47:4a:4e:39:23:cb:34:46:05:
ea:a3:ad:67:82:b9:ad:d6:da:ba:ae:fa:32:20:b9:
b7:24:27:60:14:3c:43:1f:52:38:a9:ec:02:60:46:
7d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BB:2B:2E:89:89:10:85:EE:92:51:4B:5D:91:EF:E9:F5:90:05:C9:33
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.188.58.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ee:88:3a:b3:2b:41:b0:1a:7e:3f:23:89:35:68:fb:88:cc:
8d:bf:7d:d9:ee:31:7b:13:1d:3c:08:0d:23:6d:6e:d6:68:d8:
80:6d:66:39:a5:8e:d3:d5:7a:2a:3b:87:01:bb:b2:06:10:2e:
1e:fc:18:67:ba:91:c4:39:e0:9c:08:10:13:31:04:34:10:12:
75:8b:26:5b:bc:ac:75:e7:30:bd:d3:04:a1:7d:3b:f3:6f:17:
97:d6:4c:26:89:a9:f4:4d:ac:3c:1c:45:db:f8:ff:51:44:cf:
c7:53:54:95:4b:2c:b3:1d:b2:a3:52:5c:43:ee:09:8d:7c:ad:
aa:09:e6:6b:30:79:6f:92:66:96:a9:2d:cf:ff:d9:cf:7f:dc:
f1:15:69:66:42:8e:8e:61:59:44:42:cf:d8:53:81:98:95:d3:
60:75:33:8e:dd:d1:a5:f9:e3:52:64:e5:9b:67:ed:ce:ce:58:
2a:bd:da:9a:99:e5:9f:ca:30:a2:87:ec:f9:d0:da:dd:dd:fd:
a9:79:d8:81:99:be:ff:94:48:04:8a:3e:1d:fc:77:0c:a2:4d:
e8:b3:4b:47:56:8b:ed:0f:ff:ae:97:6e:ce:85:f9:ea:c7:61:
77:37:6f:84:3a:ab:4f:77:5d:1e:6c:29:91:46:38:94:0e:d6:
83:e3:7d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:26:27 2026 by rpki-client