This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/152192D31EE6407C6C86D16247083DD744661133.cer
File:                     152192D31EE6407C6C86D16247083DD744661133.cer (raw, json)
Hash identifier:          Zta9psXh2mtI3fj/oawqtvTJmvwywq406sgaDVGqSdU=
Subject key identifier:   15:21:92:D3:1E:E6:40:7C:6C:86:D1:62:47:08:3D:D7:44:66:11:33
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       50C83B7AC56DB7B872927CB0E6D9FCD54E854AD2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/977FF9365572DD7AE9593B7C26FBE35367DF8147C3D8F45AE8630C99AD50B1C4/0/152192D31EE6407C6C86D16247083DD744661133.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/977FF9365572DD7AE9593B7C26FBE35367DF8147C3D8F45AE8630C99AD50B1C4/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 23:57:12 +0000
Certificate not after:    Thu 28 Jan 2027 00:02:12 +0000
Subordinate resources:    IP: 2801:1d:7800::/48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c8:3b:7a:c5:6d:b7:b8:72:92:7c:b0:e6:d9:fc:d5:4e:85:4a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 23:57:12 2026 GMT
            Not After : Jan 28 00:02:12 2027 GMT
        Subject: CN=152192D31EE6407C6C86D16247083DD744661133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2e:a5:5c:dc:3b:02:98:23:2a:e7:4f:96:94:
                    49:57:88:b9:b1:8f:92:63:8d:45:e6:5b:2a:8b:6d:
                    3a:12:cc:1f:00:44:70:3e:e1:3d:a0:1d:c3:e1:f9:
                    47:66:6b:d0:08:60:6b:d9:d4:0d:8d:18:9c:a9:d0:
                    06:0a:86:a0:d4:e9:34:54:be:33:96:b8:77:bb:5f:
                    ca:d5:1e:23:d3:73:3d:91:de:f8:1d:4e:41:33:a3:
                    3a:83:38:8f:a3:3b:a9:17:86:08:18:ed:a4:00:62:
                    bc:ca:ac:05:40:a8:29:52:5d:9d:e6:aa:5f:77:7c:
                    82:f2:38:a5:92:65:c4:2a:e0:b8:89:b6:4a:ce:23:
                    77:ac:01:21:e6:9f:56:a4:fc:3d:ab:33:01:fa:ce:
                    dc:8a:dd:41:ad:81:d1:2e:e3:ec:a6:ac:77:3c:ef:
                    b8:7f:36:65:b1:f8:87:51:0f:1e:de:c8:66:8a:c3:
                    c4:87:38:5b:e1:cc:8b:23:a0:4e:2a:ff:fe:40:e6:
                    3a:c8:90:e0:1a:a1:18:b1:6a:c5:08:5f:79:1a:8f:
                    51:c9:43:00:56:0b:4d:e1:04:13:c8:62:b7:57:e8:
                    02:1b:ca:6e:00:29:41:90:9b:54:50:d4:12:39:4e:
                    3f:04:e3:5e:a7:65:b2:1a:34:a3:0e:01:91:7c:78:
                    d0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:21:92:D3:1E:E6:40:7C:6C:86:D1:62:47:08:3D:D7:44:66:11:33
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/977FF9365572DD7AE9593B7C26FBE35367DF8147C3D8F45AE8630C99AD50B1C4/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/977FF9365572DD7AE9593B7C26FBE35367DF8147C3D8F45AE8630C99AD50B1C4/0/152192D31EE6407C6C86D16247083DD744661133.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:7800::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:07:fb:5f:98:90:5c:27:e5:25:8a:15:9d:62:1b:05:48:7c:
         d6:80:f4:01:ab:5b:2e:79:40:41:0e:47:f6:14:0e:89:0a:04:
         70:4c:ff:c6:ce:3f:6d:6f:9a:35:f5:ce:4a:e6:06:51:11:7e:
         7e:e8:67:5d:a9:29:53:ed:35:1d:5e:f3:32:f3:cb:5c:b0:f7:
         e5:75:32:d0:48:8d:1c:58:6a:0d:6a:3a:59:b6:52:4b:ff:c3:
         bd:82:8e:54:82:0c:c5:68:0f:8d:ba:33:3b:d3:24:15:4c:be:
         82:85:e2:a2:70:49:11:9c:0e:d0:78:63:46:3a:a7:04:28:4f:
         87:2f:7c:84:bc:c7:3e:5f:2c:06:cb:9a:7d:74:7d:02:46:44:
         0d:2b:0d:06:fb:7a:54:b8:8f:a7:c2:ef:6b:9f:30:49:aa:10:
         8a:3d:fb:46:45:9a:b6:22:bf:d6:3f:39:f5:79:d8:97:21:0c:
         69:4e:cb:36:de:c7:5f:8a:4e:95:15:00:b4:6f:60:b1:6d:d6:
         7f:26:12:67:c9:d4:7b:28:82:f1:e8:55:1e:fd:50:ad:ec:71:
         69:ec:66:a4:65:4e:b4:18:b8:e6:e8:89:2b:b0:37:24:a8:f9:
         84:e4:49:ad:53:9a:da:3d:f8:0d:9e:5c:1c:ba:cf:e9:2e:9c:
         9a:e1:33:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----