This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85E8329CBFB72C73936DE19616620415214EDD8A.cer
File: 85E8329CBFB72C73936DE19616620415214EDD8A.cer (raw, json)
Hash identifier: Km03MUla2C+n2IOh/f3f9qoat0LJIPSwW9qY787q3FE=
Subject key identifier: 85:E8:32:9C:BF:B7:2C:73:93:6D:E1:96:16:62:04:15:21:4E:DD:8A
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 3FFF487ACE8E09577503F096D137E6B1CB6EF213
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Fri 02 Jan 2026 18:16:01 +0000
Certificate not after: Fri 01 Jan 2027 18:21:01 +0000
Subordinate resources: AS: 266849
AS: 269971
IP: 2803:2a0::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 08 Jan 2026 01:46:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ff:48:7a:ce:8e:09:57:75:03:f0:96:d1:37:e6:b1:cb:6e:f2:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Jan 2 18:16:01 2026 GMT
Not After : Jan 1 18:21:01 2027 GMT
Subject: CN=85E8329CBFB72C73936DE19616620415214EDD8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:e7:91:12:c7:79:95:3b:fc:fe:d3:02:0d:
50:9a:ee:7a:8f:a6:af:d7:a2:44:f8:bc:c5:17:14:
4e:b0:05:70:8a:cb:f6:90:a1:82:7d:52:21:21:d9:
c9:11:ab:95:9d:95:a8:6a:ae:43:da:9d:d3:54:3a:
a7:0f:44:cf:25:d8:24:ff:d4:6b:9b:27:41:e8:b6:
99:cd:6d:69:94:d0:45:75:ce:3d:4c:62:17:72:e2:
50:c5:b9:52:53:02:11:1b:38:b3:7f:88:c3:87:5e:
0b:65:80:fe:78:a2:ba:a6:67:09:66:2a:9d:52:a0:
cd:4b:c6:27:f3:bf:fd:87:c5:d0:d4:d6:44:c9:f1:
54:5e:4c:0c:16:0d:25:ce:11:72:e1:54:74:d3:18:
a1:bc:8f:b0:02:36:a3:af:b4:7f:5c:c0:0e:1c:e8:
7a:ea:78:c1:89:58:f8:c0:a8:8e:85:74:10:09:5e:
0d:61:1d:46:99:20:1c:a8:52:8a:81:3d:1b:5d:ec:
31:c1:ee:9c:da:48:59:8a:87:ac:6e:72:bd:8c:97:
9b:06:81:cb:e6:a4:70:a1:37:1a:71:d5:aa:4c:02:
d9:c3:6b:ba:07:ea:7f:72:50:df:75:37:4e:94:f7:
c0:64:1a:3c:a7:d6:b5:ca:7b:27:02:3f:dc:99:60:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
85:E8:32:9C:BF:B7:2C:73:93:6D:E1:96:16:62:04:15:21:4E:DD:8A
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/58FFE40F3167FFF6A31CE6E9E4FCDE8F2D51B8BFF895CE2D6215C29B73FC1DC8/0/85E8329CBFB72C73936DE19616620415214EDD8A.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:2a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266849
269971
Signature Algorithm: sha256WithRSAEncryption
5e:c3:82:30:9e:35:3c:26:96:20:65:1f:14:be:d1:69:53:b1:
2f:44:0d:7e:ec:7e:ec:3c:a2:18:e5:7f:d7:fc:f7:cb:d2:89:
c7:52:56:bd:ac:54:be:41:06:50:b3:d3:9e:1f:05:8e:70:64:
f9:ce:26:ba:fb:e6:1b:6a:13:8b:6d:9f:e5:1e:87:c6:72:ce:
a3:0a:7c:42:7a:ce:e0:71:90:81:35:e6:f0:9d:cf:a5:69:79:
bc:cc:a2:b8:62:99:62:c1:54:0d:3c:03:d1:0e:ff:ae:95:dd:
0d:67:38:03:1e:67:f5:95:c3:64:ef:34:10:eb:e9:f5:61:05:
00:20:fe:e0:5d:7c:4b:a8:e5:b5:4e:cc:28:8e:0a:cd:86:3b:
74:2c:1f:a6:73:02:41:3d:7d:dd:a7:6d:af:cd:14:78:f0:d9:
37:ff:83:34:91:2b:d8:f9:9c:d7:6a:9e:63:8f:34:e9:3f:f5:
a9:90:41:e7:28:ba:2e:95:7d:61:80:c6:48:41:3b:f5:6f:9a:
d3:98:e4:85:af:56:00:7b:92:fd:58:ae:c2:cf:02:97:38:cd:
fd:30:27:dd:44:70:26:3c:f5:28:8b:4d:bc:2e:1e:9d:ab:fe:
79:a5:c4:ce:12:a0:4f:9a:3a:82:d8:fe:a4:a6:78:e4:d0:16:
e2:11:18:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 08:21:22 2026 by rpki-client