This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.cer
File: 412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.cer (raw, json)
Hash identifier: 8Ab+2nlkRkhlkF4mFXsPJ86qQfQti4qZ8qwmhXgz62w=
Subject key identifier: 41:2E:3F:2D:3B:64:DF:DE:B5:82:85:F6:53:32:7E:EB:6F:F6:CA:E9
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 4B2761A4A184CA70C583176939AD94460D6F8740
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 20 Jan 2026 08:12:24 +0000
Certificate not after: Tue 19 Jan 2027 08:17:24 +0000
Subordinate resources: IP: 200.9.4.0/22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 30 Jan 2026 02:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:27:61:a4:a1:84:ca:70:c5:83:17:69:39:ad:94:46:0d:6f:87:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Jan 20 08:12:24 2026 GMT
Not After : Jan 19 08:17:24 2027 GMT
Subject: CN=412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3e:8a:10:aa:70:2b:b1:63:9e:f8:55:92:d1:
56:73:a0:ed:8c:bf:80:96:aa:6f:0b:27:f2:7c:6e:
35:1a:38:66:f4:36:c3:b3:f1:91:93:13:0f:08:24:
83:c3:f2:a2:18:e2:0b:3a:ba:d8:17:f7:9d:97:19:
47:39:1a:22:7c:44:58:b7:aa:a5:1b:cf:0e:f8:0c:
be:b7:62:97:bc:8e:b0:d4:eb:c4:96:61:4d:f6:62:
65:c5:3f:25:6c:5b:64:ae:fa:b9:df:95:4f:ae:6a:
6e:5f:a3:a4:28:75:39:a8:b0:bf:08:6f:02:d4:7c:
73:42:ca:92:89:d9:41:78:e5:a4:a8:13:6f:8d:48:
2c:b4:51:62:08:bf:c5:4d:67:f7:c4:72:14:9e:e6:
43:fe:b4:ac:23:d4:9e:53:c1:2e:d6:82:0c:51:53:
08:4c:d5:ef:ee:52:1e:99:77:42:48:5d:75:7b:2e:
11:9d:47:b6:f5:37:bb:33:62:94:f4:44:99:58:a4:
25:43:91:d7:bb:e3:3d:ec:1d:11:b9:29:f8:33:2d:
2a:e8:dd:1c:f9:b1:6c:3b:42:5c:f6:3a:cd:20:cb:
12:d6:b1:b0:cc:2d:c3:95:52:ac:b1:23:65:3e:49:
84:fe:d8:4c:b8:ee:7f:ec:23:9d:bf:78:7c:7c:25:
f6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
41:2E:3F:2D:3B:64:DF:DE:B5:82:85:F6:53:32:7E:EB:6F:F6:CA:E9
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4CE995227CB743022A101AA85DF989A5FD8B4339CD68B1791016101C90A7B9A6/0/412E3F2D3B64DFDEB58285F653327EEB6FF6CAE9.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.9.4.0/22
Signature Algorithm: sha256WithRSAEncryption
58:b2:7f:1b:ae:71:24:17:1f:a0:34:63:f9:81:a3:57:97:0c:
db:d5:6c:05:08:cc:de:f7:c6:2e:6d:70:be:b6:89:05:a6:92:
f3:44:d6:e3:c1:43:5c:e9:82:33:b7:c1:ec:ce:69:1d:f9:2b:
28:6b:7b:4e:39:79:e0:46:67:0c:43:91:fa:52:b8:03:50:74:
9c:1d:c3:fb:5b:50:e4:a8:8a:09:7a:cf:a3:0a:d3:68:ea:c1:
57:cf:5d:18:45:71:25:96:16:6f:b2:84:07:e1:7a:4f:5a:15:
6d:3e:cb:c1:24:ca:07:f1:7c:39:85:c2:9e:0e:a9:23:e4:c3:
48:53:00:f5:10:3b:52:60:66:03:6c:6a:46:b7:c4:bc:13:af:
1e:92:2e:5a:9b:a7:54:ea:12:fe:f1:4a:21:8a:90:95:c7:ae:
b9:b5:5d:12:c3:d6:23:34:37:e9:42:67:31:9f:30:59:5e:cf:
0e:e7:8e:d1:24:a5:0c:69:59:08:26:3d:db:7e:7e:cb:ba:df:
5a:46:a9:2d:dc:f8:58:db:18:8b:ef:1e:1d:86:d1:25:8a:91:
fe:1e:a4:35:04:2f:d3:d0:73:59:58:3c:3e:4a:54:e1:fc:39:
9a:f7:26:eb:e2:69:fa:4f:c8:13:34:5e:b1:37:e6:44:b6:5b:
76:44:44:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:21:31 2026 by rpki-client