This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
File:                     15DA171D5AE09E55A7280DC227610D82A2AB0356.cer (raw, json)
Hash identifier:          F8lyT0D8xPbWy35o5UxXmfSxelNDLSsExhZu3b8CFkc=
Subject key identifier:   15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       3DF0D7B4936560FAA8EEB1EDE41B5B10D63AE6A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 06:31:41 +0000
Certificate not after:    Wed 27 Jan 2027 06:36:41 +0000
Subordinate resources:    IP: 138.84.32.0/19
                          IP: 148.222.128.0/21
                          IP: 148.222.192.0/19
                          IP: 148.227.64.0/18
                          IP: 149.19.160.0/20
                          IP: 179.60.168.0/21
                          IP: 200.189.16.0/20
                          IP: 2803:9810::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f0:d7:b4:93:65:60:fa:a8:ee:b1:ed:e4:1b:5b:10:d6:3a:e6:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 06:31:41 2026 GMT
            Not After : Jan 27 06:36:41 2027 GMT
        Subject: CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5e:30:9a:80:18:e4:3e:cc:57:cd:9c:72:89:
                    cf:89:37:65:d8:8e:f6:d1:04:d0:e1:01:a4:bb:43:
                    51:53:bd:43:33:2c:68:5f:6a:a1:73:47:35:81:c1:
                    6e:00:b0:59:05:24:9f:29:68:ac:f0:1c:3a:0f:68:
                    29:56:7e:bc:d2:1c:c1:03:f1:51:12:94:2f:d8:76:
                    59:73:fc:d7:e1:73:dd:ff:3c:47:00:6b:47:74:93:
                    6e:2b:a7:53:83:0d:9d:85:30:64:bc:92:1b:4d:fe:
                    b0:d9:ce:c1:7d:55:60:b3:bd:52:49:7a:aa:3c:75:
                    2f:10:33:4e:be:07:d4:8b:21:f6:3e:92:fb:43:d1:
                    6f:4c:87:63:70:bf:01:28:dc:d7:6d:31:bd:40:06:
                    30:02:05:dd:fa:e1:8a:48:06:02:ee:34:e2:54:cf:
                    fe:1c:da:97:b9:f7:93:65:b7:6b:9d:21:8a:3d:b6:
                    ff:5d:3f:42:bd:23:a3:96:9a:3f:29:7b:08:d4:41:
                    85:62:f8:b9:d2:74:3f:ef:4c:d6:c0:3c:ab:25:a9:
                    c8:09:2f:6f:c1:62:87:eb:4a:cc:c3:c9:20:54:11:
                    4e:22:d4:67:ff:d9:01:cb:ec:db:c8:50:62:49:97:
                    a4:d6:03:a4:70:e7:8f:f7:8c:ff:a4:8a:1e:31:d3:
                    98:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.84.32.0/19
                  148.222.128.0/21
                  148.222.192.0/19
                  148.227.64.0/18
                  149.19.160.0/20
                  179.60.168.0/21
                  200.189.16.0/20
                IPv6:
                  2803:9810::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:e6:9e:17:40:3d:e7:70:fe:f5:76:ac:c9:e1:ba:3d:e5:00:
         c4:ff:fb:74:d0:96:11:04:2c:e8:60:3e:44:a6:16:2b:9a:ad:
         7f:81:a4:dc:63:92:19:70:6e:78:b9:b1:7b:c9:9a:5e:71:4e:
         81:63:92:01:b7:3f:f4:fd:ee:fa:4a:0b:0c:d1:42:73:be:ec:
         39:c1:03:af:e2:97:05:1f:d1:f3:4a:7f:30:cf:01:31:bd:a4:
         58:56:c9:77:88:6c:8c:fc:bb:e8:16:b8:7c:f3:ae:03:7a:f6:
         c6:36:75:5e:bf:e4:06:f4:de:e6:af:b6:1c:ca:e3:4a:c9:05:
         33:0c:37:80:d2:28:9c:59:c2:53:b2:1c:b3:c6:ad:be:de:2b:
         44:95:b3:68:ed:7a:75:5a:5b:43:9e:a9:89:d5:bd:e9:8f:e4:
         b5:b0:e5:8d:6f:fb:d7:c3:47:ce:7f:bd:94:b0:0f:43:03:c4:
         b6:84:3e:b7:f4:e7:ee:d7:1c:0b:cc:f5:37:11:e7:e3:10:90:
         14:11:2d:98:64:dc:86:b7:ee:89:af:f8:de:6e:1e:a2:4f:c6:
         f1:d2:ed:61:e5:6a:c6:a2:96:ba:48:f7:02:57:2d:05:8b:ee:
         7a:7f:70:6e:64:29:3e:fb:e4:5b:f5:1c:30:78:b2:00:a6:38:
         91:71:75:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 02:09:05 2026 by rpki-client