This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.cer
File: DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.cer (raw, json)
Hash identifier: oVchDOcntz7JYmWbzJQPSj4QhvpafNu2o3AgREuTSps=
Subject key identifier: DC:37:31:A4:5F:32:7E:DC:D8:C0:84:72:27:CD:EE:EA:E8:37:6B:9A
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 6ADCD7DCB2C92FDA7D173479C4EB7E1CB619CC45
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 20 Jan 2026 05:46:25 +0000
Certificate not after: Tue 19 Jan 2027 05:51:25 +0000
Subordinate resources: AS: 27729
IP: 201.220.128.0/20
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:dc:d7:dc:b2:c9:2f:da:7d:17:34:79:c4:eb:7e:1c:b6:19:cc:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Jan 20 05:46:25 2026 GMT
Not After : Jan 19 05:51:25 2027 GMT
Subject: CN=DC3731A45F327EDCD8C0847227CDEEEAE8376B9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c1:a9:70:b7:06:a6:4a:0e:67:ef:9c:da:03:
40:a6:de:9d:78:cc:07:4d:40:c4:f9:d6:33:a7:80:
0a:b1:fa:f3:49:61:f9:15:8d:e7:34:d5:f7:88:4c:
78:d0:ac:52:94:53:0c:a5:77:ad:58:f2:ac:a1:a6:
14:3b:b0:17:11:96:f7:9a:95:29:25:34:b2:58:a6:
17:24:cf:19:bf:93:55:4b:8d:85:3c:c2:96:94:c0:
c1:28:c9:c4:61:f9:22:b3:af:11:2d:3d:5e:a4:d7:
37:8d:4f:75:28:66:db:f6:84:30:c3:26:f0:1a:02:
4d:b9:07:9c:4f:7b:40:6d:40:31:3a:6c:df:36:b6:
b0:e0:de:4d:61:ee:a8:0c:81:d8:28:db:a4:88:b0:
57:39:87:9d:d0:b7:18:56:3f:d6:d8:ee:6d:5f:9f:
82:4c:4d:7c:9a:54:76:72:1e:eb:a2:15:09:49:c3:
10:08:03:05:8f:05:5f:ab:43:d7:ad:54:fa:82:ba:
88:98:ff:68:31:a9:bf:2b:32:ce:26:b9:3e:4a:9e:
00:55:93:df:7a:f2:63:8e:5e:92:ea:7b:69:ce:9b:
ff:d3:7f:95:ca:a5:68:57:7e:df:69:b7:26:51:36:
5c:b1:95:72:da:80:e7:d0:e3:77:d8:dd:a3:e5:3a:
b0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DC:37:31:A4:5F:32:7E:DC:D8:C0:84:72:27:CD:EE:EA:E8:37:6B:9A
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ED05366333B154292E3D3D23E5072D9E3BF1081A4A465559BCADF710443AFC4D/0/DC3731A45F327EDCD8C0847227CDEEEAE8376B9A.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.220.128.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
27729
Signature Algorithm: sha256WithRSAEncryption
ba:12:ea:ff:d3:d5:44:d8:e7:4d:39:f0:2c:d4:e7:61:e7:db:
b2:49:5d:e0:5b:dc:f1:c9:63:01:88:f2:01:fe:d9:2e:39:b5:
d6:dc:d2:34:2f:10:a2:ac:95:f8:9a:b2:70:ee:04:5d:f6:51:
41:6f:a7:cf:93:8d:39:75:21:9d:91:a4:9c:33:7b:9a:ed:f8:
67:af:27:89:3e:31:ee:cf:6e:60:8e:88:22:bf:22:cd:ef:a5:
e6:24:9c:29:11:49:3f:40:d0:63:c1:bc:33:07:84:e5:3c:b3:
9a:83:50:9d:91:5e:dc:07:5f:90:db:33:bc:25:b1:78:c6:0f:
d4:60:87:e8:9f:4f:97:95:c6:00:83:e4:58:ed:63:9d:55:5c:
72:86:d6:2b:a6:7d:ea:f4:74:3d:47:88:80:16:84:8a:27:6c:
3a:6e:69:30:15:95:0b:27:f8:a5:00:47:d2:be:65:fc:64:5c:
b4:b4:c8:ec:90:07:18:34:4d:77:3e:92:e6:0b:7a:50:a2:94:
28:63:95:cf:65:88:1e:12:47:d4:db:b0:6a:4b:3c:e8:d3:6d:
3f:15:cc:5d:1f:f0:87:e6:34:47:95:79:58:a5:e3:4a:88:2e:
f5:59:84:d4:81:ca:1c:07:f0:ad:e7:6d:0b:d2:06:2f:d4:45:
f3:2f:4d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:33:01 2026 by rpki-client