This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.cer
File: 1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.cer (raw, json)
Hash identifier: RyyFqPqttp+l0rJOeJJvQfuyooR7SUBODn0I+KpU/bA=
Subject key identifier: 1E:B6:EF:3C:C5:42:1A:C3:AF:71:CC:DC:DF:43:BB:05:56:E6:BE:FF
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 206938C7B23694D180309E0FD63FFBD5DEE5E0B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 20 Jan 2026 08:20:15 +0000
Certificate not after: Tue 19 Jan 2027 08:25:15 +0000
Subordinate resources: IP: 2801:1c2::/44
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:69:38:c7:b2:36:94:d1:80:30:9e:0f:d6:3f:fb:d5:de:e5:e0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Jan 20 08:20:15 2026 GMT
Not After : Jan 19 08:25:15 2027 GMT
Subject: CN=1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:cd:b0:74:45:5a:6f:67:ac:a9:16:ad:64:
38:7a:93:8c:0f:10:c6:d7:b0:a8:9f:8b:d9:bd:15:
21:3b:e8:99:65:79:6f:ec:0b:4a:7f:50:a8:a3:2f:
ff:bf:5c:18:4f:42:09:59:ed:ac:65:e3:be:7f:5e:
ba:e0:3a:60:87:9e:15:da:b1:64:73:73:5d:bd:8b:
9b:f5:f9:ec:77:05:66:62:05:41:28:13:49:9e:9e:
30:ba:d2:1a:1c:73:10:e5:8b:51:60:a9:41:05:31:
ff:fb:5c:7b:eb:73:82:a3:3d:ff:fc:4d:b0:b9:da:
b0:56:45:52:03:c3:be:69:b1:17:bf:ae:9e:66:be:
58:0b:04:b2:df:ab:55:70:ac:0e:ae:25:da:aa:64:
fd:5e:93:07:b7:c1:e7:9d:48:14:56:2c:45:4e:18:
20:65:a9:dd:02:2f:9e:23:47:33:83:a2:2f:66:45:
79:97:55:15:0d:9a:d2:f1:c2:95:57:cd:1f:6d:2e:
bc:3e:ec:eb:2e:01:9d:37:14:0c:ca:8b:70:62:fc:
57:8b:a6:03:0f:99:dd:6d:4b:02:c7:53:d3:c9:ac:
15:5d:2d:5d:02:78:a0:06:29:c4:c1:56:d4:5d:27:
be:ea:fa:46:be:eb:90:fd:27:f4:6e:8c:cb:39:ec:
d4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1E:B6:EF:3C:C5:42:1A:C3:AF:71:CC:DC:DF:43:BB:05:56:E6:BE:FF
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/CDC10FFE290C2670FB33F81277F75A3E856C9E2A50421B4A1B6FCDEB3D3B0142/0/1EB6EF3CC5421AC3AF71CCDCDF43BB0556E6BEFF.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1c2::/44
Signature Algorithm: sha256WithRSAEncryption
72:b7:1e:e3:aa:18:c8:0a:17:5a:b7:34:9e:00:33:24:55:a3:
c0:c2:d9:60:01:43:be:1c:f8:1d:87:b5:93:96:99:4e:b4:dc:
d4:be:f3:e9:45:39:55:ff:3a:6a:2a:cb:3f:70:28:27:5b:7e:
dc:7f:ab:d2:aa:3a:04:fd:39:0e:6b:23:36:4c:23:2e:46:1b:
c9:b0:ba:bf:ec:c4:c3:17:1f:a7:c1:37:f1:d9:a3:c6:0c:32:
83:d0:3a:70:b0:b4:a4:22:58:e7:45:eb:0d:88:9f:f4:52:b8:
c8:1f:5d:ed:a9:a6:52:34:af:6d:ed:a9:19:49:c0:f6:a3:d0:
19:86:3a:2b:89:08:88:b8:c1:11:2f:69:60:18:7e:c7:e0:46:
40:31:f2:77:45:6c:f5:93:a3:ab:02:08:ec:6f:bd:bf:4b:d2:
48:84:24:89:f9:f5:a4:aa:22:0a:66:dd:93:e8:d1:c9:25:a8:
4b:c7:72:cc:48:7c:31:d7:b9:d0:4c:e4:5f:27:85:21:2c:2d:
70:be:78:91:a1:db:ef:09:d3:0e:3e:15:42:c6:26:ac:08:3d:
b0:98:af:f0:73:09:1e:45:f7:c1:68:bd:02:f7:1f:5e:b2:c2:
46:e5:e7:f4:32:b7:d7:39:88:6a:77:aa:7f:ce:79:46:9d:04:
ae:16:61:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:13:05 2026 by rpki-client