This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95EE354D523269E0178D6F4607C13684BAF550EA.cer
File: 95EE354D523269E0178D6F4607C13684BAF550EA.cer (raw, json)
Hash identifier: ZNbxEKZeOSxx39WDdZ8cx6EMCQVLSlkcucUstdf44t4=
Subject key identifier: 95:EE:35:4D:52:32:69:E0:17:8D:6F:46:07:C1:36:84:BA:F5:50:EA
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 778DED37222214AD5AB96ABAD8BC522ACF01B6F1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/A48A805906DC7664D37FF504C4A6D19E75B9E2ECA53950DC604E7E9EE6087B7B/0/95EE354D523269E0178D6F4607C13684BAF550EA.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/A48A805906DC7664D37FF504C4A6D19E75B9E2ECA53950DC604E7E9EE6087B7B/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Thu 08 Jan 2026 15:02:14 +0000
Certificate not after: Thu 07 Jan 2027 15:07:14 +0000
Subordinate resources: IP: 2801:1b:5800::/48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Jan 2026 07:34:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:8d:ed:37:22:22:14:ad:5a:b9:6a:ba:d8:bc:52:2a:cf:01:b6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Jan 8 15:02:14 2026 GMT
Not After : Jan 7 15:07:14 2027 GMT
Subject: CN=95EE354D523269E0178D6F4607C13684BAF550EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3d:ce:80:28:a3:86:d0:55:62:55:f8:22:1f:
1d:9d:53:c1:67:76:74:37:b0:8a:20:6a:da:60:b5:
36:71:ff:62:2f:5b:e9:65:35:39:5f:6e:e8:f2:a6:
15:5b:96:9e:49:6f:54:a8:3e:0f:93:97:54:81:e8:
8f:6e:ff:c9:cd:59:2b:64:90:39:40:cd:96:d2:9c:
37:9c:54:8d:a2:21:ed:28:b1:9a:4c:cd:6a:30:3f:
43:cb:db:d1:5b:91:f4:14:a7:02:f9:60:47:2f:7a:
ca:67:11:32:9c:80:ff:b4:05:2f:12:e1:aa:12:39:
98:aa:d9:32:e7:d4:6c:2c:0b:79:6e:35:54:94:76:
cd:1f:f8:cd:56:c1:7f:0b:d6:11:a6:64:b5:e7:b7:
53:91:e8:7a:50:6d:5f:5a:c2:68:ac:61:96:f4:35:
de:fa:0b:4c:ec:b2:58:b0:cf:77:92:a6:d0:ba:ec:
57:93:58:86:1e:16:b5:3b:04:03:0b:0f:aa:2e:26:
00:a6:3c:28:cc:82:06:b6:89:92:18:59:14:46:b3:
d2:e3:e0:ae:12:39:aa:ee:b4:6a:b9:91:c4:d3:b3:
10:74:c1:46:d0:cf:00:cb:c9:81:dd:17:a2:63:c6:
fc:07:54:81:da:c0:1e:43:09:55:9e:ba:ef:13:79:
60:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
95:EE:35:4D:52:32:69:E0:17:8D:6F:46:07:C1:36:84:BA:F5:50:EA
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A48A805906DC7664D37FF504C4A6D19E75B9E2ECA53950DC604E7E9EE6087B7B/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A48A805906DC7664D37FF504C4A6D19E75B9E2ECA53950DC604E7E9EE6087B7B/0/95EE354D523269E0178D6F4607C13684BAF550EA.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1b:5800::/48
Signature Algorithm: sha256WithRSAEncryption
c6:99:4b:13:19:4d:81:ac:f6:e5:c8:cf:6c:a2:25:56:c5:99:
fb:e2:82:0f:1b:67:19:38:1d:11:3c:53:4b:5b:3a:82:96:dc:
d4:47:1c:cf:e9:08:db:87:0c:81:5f:af:2a:76:f5:93:2d:be:
f6:fd:b6:6c:ae:a0:78:21:7e:c2:36:52:a5:1b:ab:44:4c:8c:
af:f3:11:b9:ce:4f:1f:9e:f1:42:fc:07:5c:b6:af:83:90:fa:
37:4d:d7:0e:80:7a:79:6f:a3:eb:dd:03:1d:8c:62:55:b4:80:
7a:5c:33:4b:fc:15:af:85:88:0d:1d:9b:cc:27:88:4e:58:de:
2d:c2:c1:f9:f6:c2:bb:a0:fc:ee:0e:93:83:3f:0b:c9:20:87:
11:98:e3:94:8a:a5:c7:68:6c:0f:fe:e3:4f:8c:74:e8:5e:4d:
61:c1:68:e8:70:7a:7a:c1:0f:c9:16:3c:bc:9a:89:9e:cc:c3:
88:c7:5d:b0:fc:3f:8c:9f:53:73:09:2a:de:8a:0d:3e:c0:dc:
d9:01:6e:7e:85:d7:06:06:f1:31:69:f1:b6:24:f2:f8:4f:c5:
88:eb:a2:fc:13:bb:ab:21:70:8d:4f:b5:fc:06:b5:bc:ff:2b:
56:cd:ef:7c:f7:29:f1:c0:e3:17:af:e8:b6:1e:40:35:86:c4:
72:f5:4a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 21:08:24 2026 by rpki-client