This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer File: C868DC422443FA70E7761C0304061EB998BF7378.cer (raw, json) Hash identifier: zdOK3hqoWSwmyzIPPPzy0MLPP2+NMn51tKkfvfvhqmM= Subject key identifier: C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2345B452FED1AD3DE745CEF45A50A20255A6B7E0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 20 Jan 2026 07:18:39 +0000 Certificate not after: Tue 19 Jan 2027 07:23:39 +0000 Subordinate resources: AS: 8151 AS: 28412 -- 28413 AS: 28513 AS: 28550 AS: 265512 -- 265514 IP: 148.221.0.0/16 IP: 148.223.0.0/16 IP: 148.233.0.0/16 IP: 148.235.0.0/16 IP: 187.128.0.0/11 IP: 187.168.0.0/13 IP: 187.192.0.0 -- 187.239.255.255 IP: 189.128.0.0/10 IP: 189.224.0.0/11 IP: 192.100.232.0/23 IP: 200.33.136.0 -- 200.33.151.255 IP: 200.34.32.0/20 IP: 200.34.133.0/24 IP: 200.36.32.0/19 IP: 200.38.128.0/19 IP: 200.38.192.0/19 IP: 200.64.0.0/15 IP: 200.66.128.0 -- 200.67.255.255 IP: 200.78.0.0/17 IP: 200.79.0.0/17 IP: 200.95.0.0/17 IP: 201.96.0.0 -- 201.129.255.255 IP: 201.130.80.0/24 IP: 201.131.52.0/22 IP: 201.131.76.0/24 IP: 201.133.0.0 -- 201.138.255.255 IP: 201.139.160.0/21 IP: 201.144.0.0/14 IP: 201.152.0.0/14 IP: 207.248.128.0/19 IP: 2001:1208::/32 IP: 2806:238::/48 IP: 2806:2c0::/32 IP: 2806:1000::/24 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Jan 2026 16:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:45:b4:52:fe:d1:ad:3d:e7:45:ce:f4:5a:50:a2:02:55:a6:b7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jan 20 07:18:39 2026 GMT Not After : Jan 19 07:23:39 2027 GMT Subject: CN=C868DC422443FA70E7761C0304061EB998BF7378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:04:96:77:f6:d5:96:59:6b:dd:ce:9a:86:90: 0d:b0:59:4c:e1:3c:52:be:62:9f:af:ed:17:d5:3d: 1a:7b:34:4f:1e:f6:e5:3f:8e:14:18:0c:b1:db:66: 88:22:f9:37:d3:62:b4:aa:fe:0f:cf:6a:bf:78:a7: 91:cf:41:1a:a8:f5:61:f3:a0:72:82:31:c1:79:9e: 23:df:be:3d:ea:dc:5e:be:e6:2c:15:f4:50:21:88: 00:d2:0a:74:3a:35:54:66:43:56:18:ff:ae:43:ca: 6a:d3:7e:a1:04:a4:68:40:47:f9:4e:41:11:ea:bf: e3:0c:1e:ab:c7:c4:9b:7b:d7:b4:9a:a0:6f:ca:c1: 1e:1e:88:b2:1b:d8:eb:93:ce:65:6c:0b:cd:be:67: 29:de:f1:dd:25:7d:93:f5:ad:a0:5a:a1:7e:b2:8f: 25:5b:ab:f7:c1:8a:6f:38:83:27:2b:f4:f4:a6:f0: 79:de:20:04:2f:3a:6f:97:a6:6a:0c:ed:e8:e1:d8: e1:a5:d2:51:04:99:d9:5c:44:35:4e:ce:f7:e9:e7: e6:8b:d7:d6:53:bc:f8:be:9a:11:ff:5a:56:63:49: 67:f7:27:ee:50:34:c3:f4:a1:4f:2a:dd:32:e6:ca: c3:38:e6:3a:f4:a8:5a:9d:d4:00:18:d0:33:4a:9b: 32:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.221.0.0/16 148.223.0.0/16 148.233.0.0/16 148.235.0.0/16 187.128.0.0/11 187.168.0.0/13 187.192.0.0-187.239.255.255 189.128.0.0/10 189.224.0.0/11 192.100.232.0/23 200.33.136.0-200.33.151.255 200.34.32.0/20 200.34.133.0/24 200.36.32.0/19 200.38.128.0/19 200.38.192.0/19 200.64.0.0/15 200.66.128.0-200.67.255.255 200.78.0.0/17 200.79.0.0/17 200.95.0.0/17 201.96.0.0-201.129.255.255 201.130.80.0/24 201.131.52.0/22 201.131.76.0/24 201.133.0.0-201.138.255.255 201.139.160.0/21 201.144.0.0/14 201.152.0.0/14 207.248.128.0/19 IPv6: 2001:1208::/32 2806:238::/48 2806:2c0::/32 2806:1000::/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8151 28412-28413 28513 28550 265512-265514 Signature Algorithm: sha256WithRSAEncryption 93:56:e4:00:ae:a4:b0:4f:b0:e2:a3:55:8d:be:e0:f6:f2:c0: 4f:21:7f:c6:c0:a5:c7:08:c1:cb:34:63:0d:ed:58:03:a6:d5: 63:a4:e8:78:e4:5d:fe:b6:9e:3d:96:da:41:f3:8f:30:3a:66: a9:ec:ef:1f:fb:20:ae:13:96:64:fb:62:ba:cb:68:73:64:19: 94:9f:be:2f:12:d2:95:c6:3a:18:43:39:de:b3:2e:08:f7:d5: 92:95:d2:29:79:f4:b6:cd:b6:f9:23:07:c7:08:5c:e0:fa:1e: fd:71:82:fc:6b:d5:6b:72:d5:77:ba:20:97:23:28:95:c9:a1: 5e:c8:d9:7d:b8:02:7f:f3:dd:79:d0:2e:ef:be:f6:4d:26:cc: 56:4c:ae:9e:9e:c9:ce:f7:ff:8e:09:48:70:f8:ea:af:4a:04: 44:b5:bd:88:1e:ff:bb:60:92:a7:76:6d:89:05:97:1f:fa:8d: db:ef:0a:be:89:9c:21:e5:8a:28:e1:76:97:aa:45:dc:31:eb: 4f:6d:5e:f5:2c:e2:4b:87:10:5a:da:8e:45:c8:ba:ec:98:87: 98:89:bc:4b:0b:1f:2f:56:26:22:70:32:eb:ce:cd:20:e3:f9: b6:b6:98:b3:b9:39:96:4b:40:ff:10:fa:71:bc:d8:bb:e9:db: ac:94:3b:b8 -----BEGIN CERTIFICATE----- MIIHojCCBoqgAwIBAgIUI0W0Uv7RrT3nRc70WlCiAlWmt+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNjAxMjAwNzE4MzlaFw0yNzAxMTkwNzIzMzlaMDMxMTAvBgNV BAMTKEM4NjhEQzQyMjQ0M0ZBNzBFNzc2MUMwMzA0MDYxRUI5OThCRjczNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaBJZ39tWWWWvdzpqGkA2wWUzh PFK+Yp+v7RfVPRp7NE8e9uU/jhQYDLHbZogi+TfTYrSq/g/Par94p5HPQRqo9WHz oHKCMcF5niPfvj3q3F6+5iwV9FAhiADSCnQ6NVRmQ1YY/65DymrTfqEEpGhAR/lO QRHqv+MMHqvHxJt717SaoG/KwR4eiLIb2OuTzmVsC82+Zyne8d0lfZP1raBaoX6y jyVbq/fBim84gycr9PSm8HneIAQvOm+XpmoM7ejh2OGl0lEEmdlcRDVOzvfp5+aL 19ZTvPi+mhH/WlZjSWf3J+5QNMP0oU8q3TLmysM45jr0qFqd1AAY0DNKmzJzAgMB AAGjggSsMIIEqDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTIaNxCJEP6cOd2 HAMEBh65mL9zeDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM0I4N0M5MzkyOUVBMUJFOTUxNTQ5QjhC NzRBMzgwMEM2NDgzM0U4NUJFOUQ1MjNCQkE4RUMyNEU5NDMzOUFFRC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zQjg3QzkzOTI5RUExQkU5NTE1NDlCOEI3NEEzODAwQzY0ODMzRTg1QkU5 RDUyM0JCQThFQzI0RTk0MzM5QUVELzAvQzg2OERDNDIyNDQzRkE3MEU3NzYxQzAz MDQwNjFFQjk5OEJGNzM3OC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMIIBDAYIKwYBBQUHAQcBAf8EgfwwgfkwgdEEAgABMIHKAwMAlN0D AwCU3wMDAJTpAwMAlOsDAwW7gAMDA7uoMAoDAwa7wAMDBLvgAwMGvYADAwW94AME AcBk6DAMAwQDyCGIAwQDyCGQAwQEyCIgAwQAyCKFAwQFyCQgAwQFyCaAAwQFyCbA AwMByEAwCwMEB8hCgAMDAshAAwQHyE4AAwQHyE8AAwQHyF8AMAoDAwXJYAMDAcmA AwQAyYJQAwQCyYM0AwQAyYNMMAoDAwDJhQMDAMmKAwQDyYugAwMCyZADAwLJmAME Bc/4gDAjBAIAAjAdAwUAIAESCAMHACgGAjgAAAMFACgGAsADBAAoBhAwNwYIKwYB BQUHAQgBAf8EKDAmoCQwIgICH9cwCAICbvwCAm79AgJvYQICb4YwCgIDBA0oAgME DSowDQYJKoZIhvcNAQELBQADggEBAJNW5ACupLBPsOKjVY2+4PbywE8hf8bApccI wcs0Yw3tWAOm1WOk6HjkXf62nj2W2kHzjzA6Zqns7x/7IK4TlmT7YrrLaHNkGZSf vi8S0pXGOhhDOd6zLgj31ZKV0il59LbNtvkjB8cIXOD6Hv1xgvxr1Wty1Xe6IJcj KJXJoV7I2X24An/z3XnQLu++9k0mzFZMrp6eyc73/44JSHD46q9KBES1vYge/7tg kqd2bYkFlx/6jdvvCr6JnCHliijhdpeqRdwx609tXvUs4kuHEFrajkXIuuyYh5iJ vEsLHy9WJiJwMuvOzSDj+ba2mLO5OZZLQP8Q+nG82Lvp26yUO7g= -----END CERTIFICATE-----Generated at Sun Jan 25 08:23:22 2026 by rpki-client