This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC7F59E10868BFB993AAD4E7AC6585D3748F2855.cer
File: CC7F59E10868BFB993AAD4E7AC6585D3748F2855.cer (raw, json)
Hash identifier: Aj3B7p4vmk44rpSiI9kASJwhAiO1bVVow4YKT5YbKZ0=
Subject key identifier: CC:7F:59:E1:08:68:BF:B9:93:AA:D4:E7:AC:65:85:D3:74:8F:28:55
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 7B2DDC0469F09E7211F7F089937232847B45DA35
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/1BE36B85F82AA9405E87639E2CB49C6EB0E719C6CC0619563E5C408D87253F54/0/CC7F59E10868BFB993AAD4E7AC6585D3748F2855.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/1BE36B85F82AA9405E87639E2CB49C6EB0E719C6CC0619563E5C408D87253F54/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Mon 19 Jan 2026 21:45:32 +0000
Certificate not after: Mon 18 Jan 2027 21:50:32 +0000
Subordinate resources: IP: 131.100.0.0/22
IP: 2803:ad80::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:2d:dc:04:69:f0:9e:72:11:f7:f0:89:93:72:32:84:7b:45:da:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Jan 19 21:45:32 2026 GMT
Not After : Jan 18 21:50:32 2027 GMT
Subject: CN=CC7F59E10868BFB993AAD4E7AC6585D3748F2855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:85:8e:e1:65:f5:c9:ef:e2:a0:4b:f7:2d:b4:
1e:4b:e6:f8:a6:44:ca:bf:31:cd:da:a6:f9:b5:66:
38:c9:f3:ac:c1:be:b0:6e:aa:fd:99:90:76:26:66:
f4:b4:d5:89:b0:82:2c:91:52:93:8d:5e:55:65:9e:
b9:ab:59:62:cf:60:df:b5:9e:fe:5b:0d:ab:be:69:
72:68:9e:82:69:83:a5:d5:5d:98:08:21:dc:57:c2:
6c:b3:bc:30:b0:b3:5e:9d:81:3b:44:e2:2e:35:3a:
df:04:f2:b6:f3:ba:1f:3a:1c:ee:9d:a5:58:ee:ca:
6d:a9:e9:c7:e4:c5:9a:d2:79:07:50:ff:65:df:25:
02:ab:4c:bd:f1:3b:fe:88:83:f7:d1:8f:b3:db:f9:
0e:c2:85:3e:89:a0:38:59:27:50:0b:0b:e8:c1:ea:
38:ad:87:d5:aa:09:82:79:49:d2:26:77:55:ad:95:
cc:4c:5b:3a:a5:52:6f:b9:35:ec:1e:6f:4b:bc:bc:
51:f3:8a:ee:4a:50:b1:50:3d:82:a5:b3:64:07:d2:
51:e2:38:2d:ec:eb:ef:af:ba:c6:ac:0a:41:fc:84:
48:bc:c1:bb:0d:fa:e3:10:3a:16:55:8b:b9:79:71:
d9:a4:b7:66:36:69:de:81:7b:02:f6:50:11:0d:d1:
46:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CC:7F:59:E1:08:68:BF:B9:93:AA:D4:E7:AC:65:85:D3:74:8F:28:55
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1BE36B85F82AA9405E87639E2CB49C6EB0E719C6CC0619563E5C408D87253F54/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1BE36B85F82AA9405E87639E2CB49C6EB0E719C6CC0619563E5C408D87253F54/0/CC7F59E10868BFB993AAD4E7AC6585D3748F2855.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.0.0/22
IPv6:
2803:ad80::/32
Signature Algorithm: sha256WithRSAEncryption
85:bc:72:ef:75:e7:db:cd:75:34:49:5e:80:fe:c6:fc:bf:e3:
8f:c9:e0:79:7c:86:42:81:d0:f6:63:90:76:3a:e5:39:ca:ce:
8c:51:b5:0f:38:16:65:f6:16:b0:37:c9:be:74:7d:a7:59:03:
65:ec:46:d7:76:cb:5d:be:a8:da:c3:81:22:58:78:af:87:21:
9c:e7:3a:aa:2a:ca:ce:37:42:83:8e:64:61:6b:1c:11:29:63:
1c:bf:cc:3f:88:b5:bc:53:26:15:86:4a:ac:50:18:45:3c:a0:
90:ba:0c:dd:f9:37:d1:71:08:e0:06:1d:68:76:01:77:e3:d6:
9e:57:1f:c4:84:8d:fc:31:d5:0e:3d:4e:56:ca:54:68:52:35:
53:85:d9:be:1c:be:b3:8c:cc:e3:10:16:5e:3c:3f:de:11:ee:
00:94:40:90:5e:3b:d0:25:03:a3:b3:f2:b8:15:10:86:26:f9:
21:a7:1c:b3:91:c5:86:e2:ce:3e:43:6a:fa:8b:0d:6c:6e:be:
eb:88:5b:13:fc:c2:48:3f:87:b1:20:21:7c:50:db:cd:3a:c8:
eb:7c:63:17:a6:e1:be:0e:dd:7d:61:62:16:81:ef:a7:61:9a:
5c:87:91:2f:35:ce:54:9a:c4:0c:4e:41:9e:46:1c:fb:a3:99:
87:36:69:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:23:15 2026 by rpki-client