This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0870918DC6A57FC7622CD11B09C392EFDBB3E4B1.cer
File:                     0870918DC6A57FC7622CD11B09C392EFDBB3E4B1.cer (raw, json)
Hash identifier:          dZLQtRbjIhaaZiIp9Kwu5DQqSrMW787LUDNthQpLv54=
Subject key identifier:   08:70:91:8D:C6:A5:7F:C7:62:2C:D1:1B:09:C3:92:EF:DB:B3:E4:B1
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       22C0A485FA0D6312665CD3E98274333AA817B2D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9B607626F122C66A7721AE9E6C5ABA567D2E560D17AE1101741B749EE958E192/0/0870918DC6A57FC7622CD11B09C392EFDBB3E4B1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9B607626F122C66A7721AE9E6C5ABA567D2E560D17AE1101741B749EE958E192/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Jan 2026 17:50:44 +0000
Certificate not after:    Tue 26 Jan 2027 17:55:44 +0000
Subordinate resources:    AS: 272106
                          IP: 2803:d710::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c0:a4:85:fa:0d:63:12:66:5c:d3:e9:82:74:33:3a:a8:17:b2:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 27 17:50:44 2026 GMT
            Not After : Jan 26 17:55:44 2027 GMT
        Subject: CN=0870918DC6A57FC7622CD11B09C392EFDBB3E4B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8d:09:72:8b:be:c0:b5:45:dc:f7:7e:de:92:
                    6f:59:1b:07:04:ba:97:39:11:7d:12:06:4c:0c:bd:
                    ed:b1:b6:4c:ed:2e:73:05:c8:46:80:bb:49:04:d4:
                    30:1f:18:8f:f2:a8:c8:92:d9:9d:72:84:2f:f7:80:
                    54:7e:2c:a9:fe:fc:f1:17:99:88:ee:58:93:62:8a:
                    18:c7:7d:9c:d5:90:83:e3:12:84:52:08:e1:69:c6:
                    23:6b:56:06:9c:3d:d1:88:39:02:43:de:84:6e:f4:
                    65:a3:bd:86:70:e6:fe:b2:93:ab:b0:ef:4f:f7:35:
                    0c:bf:da:01:83:57:66:74:cb:73:10:d0:b0:91:87:
                    89:bd:ad:fe:8d:82:d0:f0:d3:7e:2f:61:5e:a1:bf:
                    65:2f:a6:c0:e6:1f:c2:19:ae:d9:3b:a4:69:61:1b:
                    7c:9e:2c:d7:7f:32:f7:95:74:89:97:61:b4:dd:93:
                    d0:ac:07:5d:74:c2:01:96:d4:a0:c8:d0:4c:ef:d1:
                    cb:83:50:f3:17:eb:74:df:b7:49:c8:45:07:b5:16:
                    81:72:04:b0:22:94:7d:19:37:66:c5:69:69:e9:9e:
                    4f:d0:78:a3:ce:57:e1:3b:ae:dd:34:f4:17:aa:a0:
                    83:81:14:9d:8b:ea:dd:3e:cc:e7:8b:a2:54:db:db:
                    08:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:70:91:8D:C6:A5:7F:C7:62:2C:D1:1B:09:C3:92:EF:DB:B3:E4:B1
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9B607626F122C66A7721AE9E6C5ABA567D2E560D17AE1101741B749EE958E192/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9B607626F122C66A7721AE9E6C5ABA567D2E560D17AE1101741B749EE958E192/0/0870918DC6A57FC7622CD11B09C392EFDBB3E4B1.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d710::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272106

    Signature Algorithm: sha256WithRSAEncryption
         5d:2b:50:79:8a:8c:5b:1d:d7:7d:b2:46:1f:a3:a9:e7:ad:6c:
         4f:f5:d7:0b:55:82:63:11:3d:17:b6:c8:a4:16:ce:9b:4e:0e:
         40:e4:f9:1c:26:3b:2e:98:0e:ee:40:64:b2:a2:f3:08:99:36:
         92:21:18:52:73:dd:a4:99:75:3d:5c:11:a1:11:b9:3f:57:1c:
         55:51:ca:d9:08:ec:9d:c5:fc:1b:a4:b8:e4:c8:64:d8:84:ce:
         7a:a9:a5:cb:84:78:10:69:bc:98:ea:93:a8:a1:4e:59:52:a2:
         2a:dd:51:2b:6a:00:46:77:70:64:d6:4b:c3:b3:8b:c4:ec:1f:
         f0:fd:ea:c6:49:83:83:65:b2:46:41:b2:2a:4e:0b:6d:8f:56:
         63:d2:b1:3b:ca:29:b1:6f:a1:4d:3d:91:9f:8c:5b:b1:c9:76:
         68:53:f7:21:01:c9:80:08:53:22:bc:57:63:65:f8:41:b4:4d:
         63:8d:4d:c5:c2:d8:e4:de:4d:95:1e:75:ab:18:49:7b:f4:7e:
         44:08:77:32:1b:52:44:00:14:83:7b:1f:d4:db:54:dc:54:47:
         54:95:fa:b9:aa:51:fd:b5:3f:45:72:14:60:ad:73:46:64:ce:
         57:e5:d1:ca:34:da:36:77:c3:8a:8f:7b:b0:6d:3b:1b:43:26:
         f4:39:46:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 14:39:49 2026 by rpki-client