This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C09C1AE097C22CE10A6962137307EE7E8ED80E79.cer
File: C09C1AE097C22CE10A6962137307EE7E8ED80E79.cer (raw, json)
Hash identifier: oofV/yFi5FAILLGZDOLQikQoJKw9y16Eh6aNL3TAGDg=
Subject key identifier: C0:9C:1A:E0:97:C2:2C:E1:0A:69:62:13:73:07:EE:7E:8E:D8:0E:79
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 73821E5F7293BC7B20E929B5D8F58BA29F0BF7F1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/B0FFE253B96A2AC1B2B1BBCECD54F5CFF6ABBDE8DB5DE73384057725A91216C6/0/C09C1AE097C22CE10A6962137307EE7E8ED80E79.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/B0FFE253B96A2AC1B2B1BBCECD54F5CFF6ABBDE8DB5DE73384057725A91216C6/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 03:34:28 +0000
Certificate not after: Wed 27 Jan 2027 03:39:28 +0000
Subordinate resources: IP: 2801:11:800::/48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:82:1e:5f:72:93:bc:7b:20:e9:29:b5:d8:f5:8b:a2:9f:0b:f7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 03:34:28 2026 GMT
Not After : Jan 27 03:39:28 2027 GMT
Subject: CN=C09C1AE097C22CE10A6962137307EE7E8ED80E79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:57:d2:3a:8d:18:a8:ed:b4:a1:49:3b:77:
68:97:a6:7e:49:cb:b1:14:b3:c0:98:d0:8e:32:c1:
7d:eb:58:83:fa:84:bb:4b:14:41:bd:85:a0:28:72:
26:67:68:11:8d:f7:45:7e:6b:62:93:b8:bd:d3:c4:
8b:b7:99:cb:0d:41:7e:f4:97:67:a7:c1:79:29:18:
01:ee:51:b1:e6:bf:db:46:22:bd:1d:62:ab:9d:19:
7d:c5:29:03:67:74:46:33:bb:0f:53:5f:89:7c:56:
d0:2e:9e:b5:32:df:d1:a6:d5:77:81:68:23:b5:2b:
97:13:dd:10:f1:63:9f:44:bf:fa:ad:b5:76:7d:fd:
28:e2:89:d4:cb:26:1f:77:38:3d:12:e9:3f:35:bf:
9e:dd:9d:5c:ee:d9:47:a5:81:a0:fa:04:f1:d2:5d:
47:27:3b:79:bd:a7:6d:da:be:85:f6:bd:b7:aa:4d:
e2:0d:54:74:8b:b6:9f:b7:43:34:73:b0:f7:99:a6:
c4:eb:6b:de:dd:e4:e3:99:28:8e:01:23:c8:31:95:
00:41:ed:9c:9f:1d:4c:9f:18:17:c7:8b:97:4d:c2:
a0:fa:70:7f:87:f5:fa:0f:6e:b7:ca:37:e4:41:59:
79:b2:04:1d:17:5f:96:94:50:18:72:af:20:20:2e:
5d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C0:9C:1A:E0:97:C2:2C:E1:0A:69:62:13:73:07:EE:7E:8E:D8:0E:79
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B0FFE253B96A2AC1B2B1BBCECD54F5CFF6ABBDE8DB5DE73384057725A91216C6/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B0FFE253B96A2AC1B2B1BBCECD54F5CFF6ABBDE8DB5DE73384057725A91216C6/0/C09C1AE097C22CE10A6962137307EE7E8ED80E79.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:11:800::/48
Signature Algorithm: sha256WithRSAEncryption
68:51:49:e9:1d:67:2a:4e:9a:3a:71:e6:66:37:1c:71:f7:48:
d8:de:8a:02:98:92:ba:cc:e8:18:d6:ea:45:02:60:ec:ac:10:
1d:d3:b0:29:dd:02:d5:99:f7:7d:b5:79:72:84:da:0b:37:3f:
e4:dd:a4:c3:ef:5c:f9:4c:c2:bf:91:55:c5:f4:73:a8:a8:85:
9c:d2:64:09:6d:73:c6:14:6b:14:63:ed:23:6a:4a:b2:a2:a5:
75:a6:ba:77:f0:89:6b:fa:17:89:d9:f6:fb:13:c6:05:91:ba:
af:07:25:aa:4f:e1:be:1c:c6:fc:0f:63:9d:2b:71:52:65:b7:
8b:66:f5:02:32:11:d2:e5:2a:07:aa:ae:21:01:a6:55:0d:b6:
94:b2:51:c4:3a:73:08:76:d7:80:ef:49:e3:08:ce:2c:74:fd:
08:27:ad:e7:a6:a1:82:59:21:5d:ea:24:4a:06:d1:08:50:e1:
33:4d:07:be:ac:b2:87:6b:30:27:49:59:37:7f:5e:ac:24:e2:
a4:ed:c3:92:92:62:6a:aa:68:31:72:b6:bf:93:b8:00:f5:78:
cc:d7:04:e9:4f:6d:7f:0e:72:ad:58:6f:ab:b7:b3:32:c5:b9:
b4:6f:2d:9d:5b:25:19:35:c4:03:b3:d2:1d:eb:90:69:a8:8e:
3e:ae:d0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 02:13:04 2026 by rpki-client