This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95EE354D523269E0178D6F4607C13684BAF550EA.cer
File: 95EE354D523269E0178D6F4607C13684BAF550EA.cer (raw, json)
Hash identifier: tZc2ss6k1CSFfEls6KhaNTj38d2AJOmuY+IVjCSLUiM=
Subject key identifier: 95:EE:35:4D:52:32:69:E0:17:8D:6F:46:07:C1:36:84:BA:F5:50:EA
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 25D77E505261C9F7C84E8274BFE97DF7190E52BA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/A48A805906DC7664D37FF504C4A6D19E75B9E2ECA53950DC604E7E9EE6087B7B/0/95EE354D523269E0178D6F4607C13684BAF550EA.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/A48A805906DC7664D37FF504C4A6D19E75B9E2ECA53950DC604E7E9EE6087B7B/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 20 Jan 2026 14:17:56 +0000
Certificate not after: Tue 19 Jan 2027 14:22:56 +0000
Subordinate resources: IP: 2801:1b:5800::/48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:d7:7e:50:52:61:c9:f7:c8:4e:82:74:bf:e9:7d:f7:19:0e:52:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Jan 20 14:17:56 2026 GMT
Not After : Jan 19 14:22:56 2027 GMT
Subject: CN=95EE354D523269E0178D6F4607C13684BAF550EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3d:ce:80:28:a3:86:d0:55:62:55:f8:22:1f:
1d:9d:53:c1:67:76:74:37:b0:8a:20:6a:da:60:b5:
36:71:ff:62:2f:5b:e9:65:35:39:5f:6e:e8:f2:a6:
15:5b:96:9e:49:6f:54:a8:3e:0f:93:97:54:81:e8:
8f:6e:ff:c9:cd:59:2b:64:90:39:40:cd:96:d2:9c:
37:9c:54:8d:a2:21:ed:28:b1:9a:4c:cd:6a:30:3f:
43:cb:db:d1:5b:91:f4:14:a7:02:f9:60:47:2f:7a:
ca:67:11:32:9c:80:ff:b4:05:2f:12:e1:aa:12:39:
98:aa:d9:32:e7:d4:6c:2c:0b:79:6e:35:54:94:76:
cd:1f:f8:cd:56:c1:7f:0b:d6:11:a6:64:b5:e7:b7:
53:91:e8:7a:50:6d:5f:5a:c2:68:ac:61:96:f4:35:
de:fa:0b:4c:ec:b2:58:b0:cf:77:92:a6:d0:ba:ec:
57:93:58:86:1e:16:b5:3b:04:03:0b:0f:aa:2e:26:
00:a6:3c:28:cc:82:06:b6:89:92:18:59:14:46:b3:
d2:e3:e0:ae:12:39:aa:ee:b4:6a:b9:91:c4:d3:b3:
10:74:c1:46:d0:cf:00:cb:c9:81:dd:17:a2:63:c6:
fc:07:54:81:da:c0:1e:43:09:55:9e:ba:ef:13:79:
60:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
95:EE:35:4D:52:32:69:E0:17:8D:6F:46:07:C1:36:84:BA:F5:50:EA
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A48A805906DC7664D37FF504C4A6D19E75B9E2ECA53950DC604E7E9EE6087B7B/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A48A805906DC7664D37FF504C4A6D19E75B9E2ECA53950DC604E7E9EE6087B7B/0/95EE354D523269E0178D6F4607C13684BAF550EA.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1b:5800::/48
Signature Algorithm: sha256WithRSAEncryption
8a:14:a0:83:f0:c5:d3:51:47:37:42:6b:b8:df:c7:1b:67:ae:
c0:76:a2:b1:4e:b3:a2:4f:f4:91:2b:f8:1e:a4:38:ac:56:30:
32:f5:6a:8f:ee:e4:8e:b6:cc:80:68:c1:77:fa:d8:ad:4f:30:
34:2e:a4:68:0f:5a:06:8a:bd:d9:59:c8:ff:b5:d4:f3:cd:ec:
1f:b0:15:82:90:bb:4a:5c:ed:53:03:ec:ab:3f:65:6b:28:88:
7b:a6:be:a2:67:0e:5b:51:6d:30:93:e5:4b:c8:36:4e:c3:f1:
3f:1d:4a:1a:d9:0b:8b:fb:80:cd:39:e8:fa:66:6c:49:58:b3:
2f:7a:26:1c:c0:ee:9e:2e:0f:b2:95:83:71:66:af:dd:d4:4a:
03:c8:69:4c:5e:9f:f6:60:37:5a:60:c9:33:db:d9:66:76:9b:
7f:83:e8:d9:e1:25:6f:30:3a:5c:2d:db:df:d9:99:00:04:ab:
5d:9a:6e:10:3d:9f:65:54:85:f7:ea:89:75:13:3d:b6:b9:bb:
62:89:eb:59:19:e9:cc:a6:d0:c6:02:5e:c0:c4:77:83:5d:c0:
ef:33:f2:87:40:92:98:06:3b:7f:66:fa:44:49:41:46:c1:89:
f3:32:90:a9:e8:b5:b8:18:a1:c3:32:4e:1a:6f:f0:ec:55:cf:
39:b6:d9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:25:58 2026 by rpki-client