This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED.cer
File: EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED.cer (raw, json)
Hash identifier: l3r1fxwIvSPdkuRooGOSZ/4RFPb7SjyfzOK3aZDWn4k=
Subject key identifier: EB:48:A6:C9:79:1D:EF:12:29:0F:CB:FD:C6:3E:9C:8A:C2:C2:EA:ED
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 17CB073EBBDF0C01FA2C76A3204354EBEEE29F3A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/FBDDDDCC26DBD9D0EF5C28747275CD801C96379A5D0A9B758DF4019CD88F8380/0/EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/FBDDDDCC26DBD9D0EF5C28747275CD801C96379A5D0A9B758DF4019CD88F8380/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 20 Jan 2026 05:03:59 +0000
Certificate not after: Tue 19 Jan 2027 05:08:59 +0000
Subordinate resources: IP: 45.173.228.0/22
IP: 2803:5c60::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:cb:07:3e:bb:df:0c:01:fa:2c:76:a3:20:43:54:eb:ee:e2:9f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Jan 20 05:03:59 2026 GMT
Not After : Jan 19 05:08:59 2027 GMT
Subject: CN=EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:08:7d:e3:a9:2a:b0:9d:20:49:d1:19:07:cb:
63:d0:ea:b1:05:a1:f3:70:11:85:31:7d:5c:f3:5f:
d6:08:3f:0f:94:5d:71:df:a3:a8:07:30:6c:5e:00:
8e:25:a7:06:92:19:d0:c0:11:16:23:13:b7:1b:23:
dd:f8:0f:f2:23:54:bb:88:08:2f:0c:54:5c:0d:c9:
c9:06:54:ed:64:6a:9f:59:d2:de:70:6b:41:05:42:
c7:22:af:88:c2:d5:a1:47:4d:e4:e8:2a:e6:d3:2e:
df:51:86:a8:8a:7c:7d:54:a5:78:03:0a:51:3e:f1:
10:6c:56:bd:df:ed:0e:2f:94:4a:32:6a:63:1c:9d:
68:7a:70:38:c8:02:38:d4:47:e9:81:fd:99:7a:75:
31:65:a0:85:82:e9:ce:f3:13:1b:2e:a9:71:fd:48:
3f:8f:0a:a6:f1:11:8b:48:35:61:77:a4:4c:cf:e2:
da:af:14:67:a1:23:ab:28:fd:47:50:d9:33:33:ce:
cf:0b:75:e0:91:f3:c7:95:d7:88:90:8e:f9:67:99:
28:86:b9:d8:d7:66:6d:77:ae:55:37:64:95:59:d1:
e9:19:49:f4:4d:50:4a:53:29:f3:01:64:a1:c4:4a:
63:b9:b0:17:0d:cd:98:a3:95:b2:4f:98:2a:78:54:
f6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EB:48:A6:C9:79:1D:EF:12:29:0F:CB:FD:C6:3E:9C:8A:C2:C2:EA:ED
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FBDDDDCC26DBD9D0EF5C28747275CD801C96379A5D0A9B758DF4019CD88F8380/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FBDDDDCC26DBD9D0EF5C28747275CD801C96379A5D0A9B758DF4019CD88F8380/0/EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.228.0/22
IPv6:
2803:5c60::/32
Signature Algorithm: sha256WithRSAEncryption
b0:e6:58:04:af:44:e1:84:32:2f:c1:46:7f:a6:3c:bd:1a:4e:
61:de:cf:13:ab:2a:bb:fe:fa:f3:d0:8c:96:22:09:92:f1:63:
61:01:2f:c8:33:12:ce:e6:44:34:7c:d1:94:76:f3:17:a4:80:
32:16:f0:ac:39:58:22:36:86:bf:25:28:12:b2:b3:37:3e:2e:
e1:0f:db:35:54:3c:ac:f1:be:77:4a:7c:f1:9b:34:36:27:0f:
00:e2:09:df:91:0e:5a:04:f5:53:b9:39:33:44:41:c4:04:8b:
e8:1f:3e:b2:f9:32:f7:c6:f5:97:8e:94:96:27:c0:63:b8:15:
ec:d1:f2:14:10:ac:8f:91:f3:b4:d6:de:ce:e6:d2:2a:12:c2:
8c:63:1d:ba:9b:55:eb:d4:a9:dc:10:f5:b6:70:39:a1:e2:06:
7c:1b:98:e6:e2:de:c1:f9:4e:43:30:08:b7:c9:f4:7b:46:64:
84:8d:7f:a0:d7:19:74:f2:16:a6:5b:3e:a2:38:0b:7f:a8:d3:
a8:45:37:1c:bf:c8:10:06:00:fd:b6:fa:60:32:0b:cc:9e:0a:
3a:e7:34:2a:c7:a1:5c:fa:cc:7e:e2:66:34:8c:17:6c:0e:ca:
5e:cc:cf:5b:c7:62:74:60:5b:a4:32:0c:05:a8:6b:77:f4:08:
96:a0:a0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:44:11 2026 by rpki-client