This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C09C1AE097C22CE10A6962137307EE7E8ED80E79.cer
File: C09C1AE097C22CE10A6962137307EE7E8ED80E79.cer (raw, json)
Hash identifier: aPbBfA12jvH23uD+/kJ4MANloFWjTkXnCUvfwTN1Tj4=
Subject key identifier: C0:9C:1A:E0:97:C2:2C:E1:0A:69:62:13:73:07:EE:7E:8E:D8:0E:79
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 5C80763A8FE4247F67211B3244CC9680660DC072
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/B0FFE253B96A2AC1B2B1BBCECD54F5CFF6ABBDE8DB5DE73384057725A91216C6/0/C09C1AE097C22CE10A6962137307EE7E8ED80E79.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/B0FFE253B96A2AC1B2B1BBCECD54F5CFF6ABBDE8DB5DE73384057725A91216C6/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 13 Jan 2026 06:12:22 +0000
Certificate not after: Tue 12 Jan 2027 06:17:22 +0000
Subordinate resources: IP: 2801:11:800::/48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 18:05:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:80:76:3a:8f:e4:24:7f:67:21:1b:32:44:cc:96:80:66:0d:c0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Jan 13 06:12:22 2026 GMT
Not After : Jan 12 06:17:22 2027 GMT
Subject: CN=C09C1AE097C22CE10A6962137307EE7E8ED80E79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:57:d2:3a:8d:18:a8:ed:b4:a1:49:3b:77:
68:97:a6:7e:49:cb:b1:14:b3:c0:98:d0:8e:32:c1:
7d:eb:58:83:fa:84:bb:4b:14:41:bd:85:a0:28:72:
26:67:68:11:8d:f7:45:7e:6b:62:93:b8:bd:d3:c4:
8b:b7:99:cb:0d:41:7e:f4:97:67:a7:c1:79:29:18:
01:ee:51:b1:e6:bf:db:46:22:bd:1d:62:ab:9d:19:
7d:c5:29:03:67:74:46:33:bb:0f:53:5f:89:7c:56:
d0:2e:9e:b5:32:df:d1:a6:d5:77:81:68:23:b5:2b:
97:13:dd:10:f1:63:9f:44:bf:fa:ad:b5:76:7d:fd:
28:e2:89:d4:cb:26:1f:77:38:3d:12:e9:3f:35:bf:
9e:dd:9d:5c:ee:d9:47:a5:81:a0:fa:04:f1:d2:5d:
47:27:3b:79:bd:a7:6d:da:be:85:f6:bd:b7:aa:4d:
e2:0d:54:74:8b:b6:9f:b7:43:34:73:b0:f7:99:a6:
c4:eb:6b:de:dd:e4:e3:99:28:8e:01:23:c8:31:95:
00:41:ed:9c:9f:1d:4c:9f:18:17:c7:8b:97:4d:c2:
a0:fa:70:7f:87:f5:fa:0f:6e:b7:ca:37:e4:41:59:
79:b2:04:1d:17:5f:96:94:50:18:72:af:20:20:2e:
5d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C0:9C:1A:E0:97:C2:2C:E1:0A:69:62:13:73:07:EE:7E:8E:D8:0E:79
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B0FFE253B96A2AC1B2B1BBCECD54F5CFF6ABBDE8DB5DE73384057725A91216C6/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B0FFE253B96A2AC1B2B1BBCECD54F5CFF6ABBDE8DB5DE73384057725A91216C6/0/C09C1AE097C22CE10A6962137307EE7E8ED80E79.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:11:800::/48
Signature Algorithm: sha256WithRSAEncryption
cd:0d:ad:11:a3:c4:f8:d6:f6:29:1a:ef:2a:de:12:86:f9:d2:
17:aa:e2:44:77:03:fb:f9:bd:85:46:f7:96:ab:79:aa:33:66:
c9:4e:a9:67:0a:c3:84:8c:5d:18:1e:93:c0:23:b3:3d:ce:10:
d0:67:dd:af:06:ca:f3:7b:07:8a:dd:ea:be:00:94:08:9e:54:
84:32:ec:96:1b:e0:ca:9a:04:11:7c:c7:8d:81:e3:8e:c0:d0:
f5:0a:bb:35:c9:39:6e:a3:bb:33:ae:dc:13:6b:0d:a4:f0:cf:
cb:34:6a:a4:a2:3a:fe:b9:6d:c2:10:9b:4f:9b:8a:8e:d1:31:
29:a8:f8:9f:49:2a:31:39:c7:a7:1b:72:90:0b:48:30:e6:cd:
3f:0e:cc:23:a4:33:3a:84:86:e6:00:2f:52:84:2b:f5:f8:a7:
62:7a:b2:17:fd:5d:24:fa:2c:2e:d8:b0:92:46:35:d7:73:0c:
57:8d:c0:2c:75:f4:8e:ff:9d:75:ea:13:7a:c2:3d:47:0f:63:
9b:e9:b3:65:07:d3:da:2c:c6:49:56:42:67:d4:1a:bc:18:02:
04:5a:a1:cc:45:6a:db:4e:04:e3:02:c3:b7:bf:bd:d3:3c:95:
42:c7:79:34:6c:d8:44:13:22:1b:19:04:85:1e:8e:c5:a4:0e:
36:89:7e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 08:29:28 2026 by rpki-client