This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E59BA547C4D7976EEBC9708853D72B95F91E5BF.cer
File: 0E59BA547C4D7976EEBC9708853D72B95F91E5BF.cer (raw, json)
Hash identifier: hCbNyT+kriVESOv3EmX5QxTRWqMUqR4SuliDNagW80g=
Subject key identifier: 0E:59:BA:54:7C:4D:79:76:EE:BC:97:08:85:3D:72:B9:5F:91:E5:BF
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 66ECFC49B0F1437B1698FCA8F34CC866953BF4A1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/DE67249E6BCA35D443E0F76A17CEC3C0D5019CB79764E986B6F62FDF72410496/0/0E59BA547C4D7976EEBC9708853D72B95F91E5BF.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/DE67249E6BCA35D443E0F76A17CEC3C0D5019CB79764E986B6F62FDF72410496/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Mon 12 Jan 2026 00:25:40 +0000
Certificate not after: Mon 11 Jan 2027 00:30:40 +0000
Subordinate resources: IP: 161.190.0.0/16
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 09:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ec:fc:49:b0:f1:43:7b:16:98:fc:a8:f3:4c:c8:66:95:3b:f4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Jan 12 00:25:40 2026 GMT
Not After : Jan 11 00:30:40 2027 GMT
Subject: CN=0E59BA547C4D7976EEBC9708853D72B95F91E5BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f5:b4:b6:a0:ea:ef:13:c6:46:26:67:ab:15:
9e:90:3c:d7:78:65:0c:d6:9d:f6:8c:8b:c6:04:70:
20:ed:c7:62:ad:12:4c:89:8a:64:b5:05:e3:e6:88:
9c:6a:92:8c:07:30:0d:7d:e7:04:26:d4:6a:8c:5c:
a7:97:08:55:79:83:97:54:97:db:9c:53:6e:e1:5b:
2c:e1:3b:75:5b:82:32:64:23:2a:15:9a:87:8a:4e:
f9:4f:50:99:da:65:5f:19:9b:ed:dc:ff:88:6b:a5:
89:60:07:9e:fa:70:2a:8f:11:bb:03:21:32:d3:d6:
3b:54:bf:06:28:03:18:67:90:12:a7:a8:93:1e:63:
92:15:d5:5a:6b:dc:ae:3b:26:fd:f1:48:95:c3:06:
ce:b7:80:e5:f1:f2:27:58:0a:19:e9:13:dd:33:a9:
a4:2d:e5:1b:2a:83:c7:c4:67:ad:e1:a3:54:b6:5f:
54:ee:10:22:27:30:fb:4f:a4:43:0a:48:ab:a6:50:
7e:fb:8c:c7:1c:0c:2c:e2:00:7b:53:2b:3c:19:a4:
04:e4:d8:5d:05:cd:0a:ed:61:b9:ac:dc:60:4d:6f:
8e:6b:ff:79:70:ce:5f:e8:7c:af:21:56:55:fa:fa:
49:0e:3f:b6:1b:87:cb:7f:cb:3a:19:d4:df:74:60:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0E:59:BA:54:7C:4D:79:76:EE:BC:97:08:85:3D:72:B9:5F:91:E5:BF
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DE67249E6BCA35D443E0F76A17CEC3C0D5019CB79764E986B6F62FDF72410496/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DE67249E6BCA35D443E0F76A17CEC3C0D5019CB79764E986B6F62FDF72410496/0/0E59BA547C4D7976EEBC9708853D72B95F91E5BF.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.190.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:fc:ef:b0:90:01:fb:2c:77:bd:73:90:36:66:a6:47:27:57:
9c:88:0d:98:87:c7:bb:07:d8:2a:69:11:dc:16:9e:73:f1:d6:
ae:ad:86:18:e8:50:18:f1:99:93:26:da:6f:cb:0a:e1:dd:0b:
13:af:f6:e1:21:b0:3f:1d:db:43:61:25:61:ee:50:a7:c8:22:
8c:27:21:84:20:0d:14:ff:a7:ed:e7:ef:d5:ed:08:89:6c:d7:
a9:19:31:63:3b:91:4f:9c:98:ab:23:d0:d1:d5:52:6c:57:db:
eb:8b:9b:1f:d4:b7:83:ad:ab:42:02:21:56:5f:72:13:14:b6:
fb:eb:68:3e:ca:bd:02:44:62:61:f0:a9:a7:37:ad:26:c2:2e:
bc:a3:c9:24:c2:2b:d9:40:f2:2b:f9:87:1c:80:77:c7:80:ad:
71:fb:39:ff:54:da:2d:10:cd:9f:32:31:ff:fc:23:57:f7:a9:
5e:53:e6:b8:34:62:d2:1c:e6:a3:be:99:8c:a1:3e:06:74:52:
ad:dd:a5:1f:e2:23:c5:9b:79:75:10:73:a2:54:af:15:a4:f0:
12:8e:56:67:29:97:fe:87:4f:23:f6:e6:1c:59:fb:47:8e:e6:
96:51:1e:10:c4:16:d6:e9:d3:99:96:c3:4c:64:fe:84:a6:81:
69:b8:2c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 01:37:52 2026 by rpki-client