This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0ED277854E0C17BA2C4787FA76CB7B7B875CF4E.cer
File: D0ED277854E0C17BA2C4787FA76CB7B7B875CF4E.cer (raw, json)
Hash identifier: zjNf0beR6xgQ3em1pF2+k5obXd0oMZvgYsIl/mRymo4=
Subject key identifier: D0:ED:27:78:54:E0:C1:7B:A2:C4:78:7F:A7:6C:B7:B7:B8:75:CF:4E
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 6358758D8D9EE15218487FFA927C751EF8939C98
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/B7D9C5D32CA7FBBBE79B133FCBC384EBF47B1F09618B62668B40099549294E58/0/D0ED277854E0C17BA2C4787FA76CB7B7B875CF4E.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/B7D9C5D32CA7FBBBE79B133FCBC384EBF47B1F09618B62668B40099549294E58/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Mon 12 Jan 2026 21:50:18 +0000
Certificate not after: Mon 11 Jan 2027 21:55:18 +0000
Subordinate resources: AS: 273077
IP: 2801:16:b800::/48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Jan 2026 14:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:58:75:8d:8d:9e:e1:52:18:48:7f:fa:92:7c:75:1e:f8:93:9c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Jan 12 21:50:18 2026 GMT
Not After : Jan 11 21:55:18 2027 GMT
Subject: CN=D0ED277854E0C17BA2C4787FA76CB7B7B875CF4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:81:03:5f:26:59:3f:67:0d:0f:94:bf:6f:
4b:f5:0a:3e:14:da:dc:23:cd:7e:26:e5:f6:f6:c8:
1b:69:52:50:ea:20:fc:f1:12:8d:84:7e:16:99:87:
32:c5:6b:6f:86:b4:cd:78:2d:06:ae:b0:c2:bb:9b:
11:cb:33:5a:fd:b9:bd:76:53:3f:4d:a2:a3:98:9d:
da:75:2c:4e:34:e4:f7:6d:9f:83:97:c1:03:46:eb:
71:80:72:3a:26:bc:72:3b:8a:7d:30:eb:b7:3e:6c:
5f:18:d9:5b:19:44:a5:6a:91:90:63:44:0f:90:32:
7e:44:ee:a6:28:5f:08:88:8c:5f:a7:47:c3:17:b3:
f6:3c:11:1a:7e:a2:73:ec:ad:86:1d:e6:2d:e9:f2:
77:d5:38:bf:d3:54:e8:64:b9:37:33:ec:9c:26:65:
ee:d4:c5:c8:31:f7:c7:cc:3f:8e:be:62:d4:9a:56:
c8:86:8f:c9:3e:5e:21:d9:5d:bc:e3:9f:e3:67:2b:
66:48:ed:47:cd:dd:6f:67:6f:db:30:35:4f:85:e3:
31:39:d8:76:88:df:43:ac:e1:64:ec:e1:2c:0d:f7:
e9:bb:e2:17:55:82:43:e6:b4:af:93:40:4a:c2:38:
10:b7:8a:f1:48:fd:a7:e9:ff:88:0d:00:8a:05:7d:
86:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D0:ED:27:78:54:E0:C1:7B:A2:C4:78:7F:A7:6C:B7:B7:B8:75:CF:4E
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B7D9C5D32CA7FBBBE79B133FCBC384EBF47B1F09618B62668B40099549294E58/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B7D9C5D32CA7FBBBE79B133FCBC384EBF47B1F09618B62668B40099549294E58/0/D0ED277854E0C17BA2C4787FA76CB7B7B875CF4E.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:16:b800::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
273077
Signature Algorithm: sha256WithRSAEncryption
a3:d9:fc:21:e4:3b:52:b1:47:db:26:74:25:72:99:99:e5:bb:
d1:7a:01:f4:9c:29:54:9b:11:23:90:27:ce:d3:60:a7:54:80:
a2:93:f3:a5:0c:dc:51:ac:4f:1c:1b:18:38:58:0a:fc:4e:c9:
e7:06:6e:e2:be:d1:3e:95:fc:96:64:dd:c6:2c:c4:4c:a8:0e:
b1:f7:b4:5e:a4:69:11:23:20:c0:7a:41:43:1d:0e:c8:53:f6:
5e:ff:4c:47:49:62:3a:81:02:e3:c2:30:95:a9:5d:47:1f:4f:
79:33:8f:24:12:ba:e8:bf:ff:e2:09:03:b3:09:13:76:0e:98:
c5:6e:51:0a:ac:61:4e:0b:04:41:43:96:7d:82:1c:92:21:c9:
e1:d5:8f:fb:0a:51:ed:44:67:c7:40:84:78:dd:cc:04:37:74:
9c:bb:b6:66:8f:76:40:3c:e2:04:d9:c0:91:98:cf:c8:6c:70:
43:89:23:c0:da:e0:6a:fb:d8:17:10:83:f2:c2:79:ff:39:bd:
aa:e9:69:27:c0:4c:02:f5:c0:0d:45:cf:d4:a4:ab:43:22:2b:
b9:e8:49:ef:3a:ca:fa:46:23:5a:ba:a2:62:c9:c4:34:5c:5b:
66:4b:c2:81:90:4f:ad:a0:60:70:fe:77:34:79:34:82:9a:02:
66:fd:b8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:52:09 2026 by rpki-client