This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.cer
File:                     1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.cer (raw, json)
Hash identifier:          Hkn9sC2Qqaeo/xgJX0Q9j/WJwGp6By9b39JSiyEu6wA=
Subject key identifier:   1C:32:B7:A8:59:86:AC:EF:E7:F5:E8:B3:08:4B:3B:FA:63:C5:DA:35
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       08897D7641805A1BCD5CCC3619EBB30CF81BBBA0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 02:00:14 +0000
Certificate not after:    Wed 27 Jan 2027 02:05:14 +0000
Subordinate resources:    AS: 274136
                          IP: 168.231.128.0/18
                          IP: 2803:91d0::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:89:7d:76:41:80:5a:1b:cd:5c:cc:36:19:eb:b3:0c:f8:1b:bb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 02:00:14 2026 GMT
            Not After : Jan 27 02:05:14 2027 GMT
        Subject: CN=1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3f:96:0c:cb:ae:50:e6:c5:b4:45:ac:3f:4d:
                    f3:7a:19:26:21:ce:14:15:7d:48:51:f6:d5:22:8a:
                    7c:9e:a5:f7:7a:0d:63:c3:26:2f:7b:13:6f:19:ae:
                    e1:03:0f:08:db:51:d1:b0:90:b6:b0:37:17:4e:12:
                    42:c0:57:33:61:69:5f:05:b6:20:fe:d5:57:ba:2e:
                    4e:06:18:e4:c4:32:70:b1:96:be:af:a2:8c:79:46:
                    d5:ae:86:a9:39:a5:33:e8:25:1d:58:11:c8:ad:19:
                    d0:4e:e9:58:8a:0a:7e:f4:b6:4d:fa:c2:50:34:b4:
                    ca:34:e3:b5:bd:86:7f:91:cf:c2:d2:18:5c:4d:d2:
                    cf:ea:48:af:88:98:17:9f:d0:0b:ec:4f:d7:13:3d:
                    9f:a5:3b:8b:c6:85:fa:dd:0e:b1:fb:f8:82:60:cc:
                    98:cd:fe:03:f9:98:ec:36:ab:b9:fa:fe:f6:dd:f2:
                    98:80:f7:2f:ce:a0:15:8a:53:6a:3c:ed:55:48:cb:
                    f1:58:14:36:ec:04:6c:e9:24:a1:1a:96:33:78:2e:
                    74:9e:92:98:12:b6:50:aa:c7:09:8a:09:9d:c8:32:
                    eb:b8:ec:93:80:0e:0e:83:d6:25:d9:67:9e:99:35:
                    6d:cf:20:fd:c1:e9:20:65:58:64:b2:5b:56:65:cb:
                    ed:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:32:B7:A8:59:86:AC:EF:E7:F5:E8:B3:08:4B:3B:FA:63:C5:DA:35
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2CAC622F4D28E95FBA65C5631E69CB7933EFAE4B3BDF881ED4692B60D0CD7077/0/1C32B7A85986ACEFE7F5E8B3084B3BFA63C5DA35.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.231.128.0/18
                IPv6:
                  2803:91d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274136

    Signature Algorithm: sha256WithRSAEncryption
         20:59:0f:51:8d:51:7c:66:0c:f9:74:15:01:64:49:96:cd:97:
         c3:06:6b:4c:8f:54:b5:fa:77:89:d4:43:1c:a5:f2:e2:77:1e:
         17:2c:64:66:94:a8:bf:80:ad:1a:f8:3d:f6:69:59:4a:2e:6e:
         3b:8c:43:06:27:bc:3b:4a:c1:a0:09:89:37:b0:22:eb:42:2f:
         61:a1:20:35:59:7c:fe:a3:b7:07:f6:86:b4:cd:bf:da:a5:d2:
         f5:d9:74:b4:90:d7:1f:35:73:e7:c6:9d:26:f8:6f:ea:28:00:
         85:83:44:07:dd:ef:22:18:af:f6:68:5c:ee:53:cc:6a:ea:73:
         2a:9d:1e:0e:b6:e0:22:12:8b:59:25:85:12:c9:a5:78:bd:9f:
         1f:26:ba:74:de:1b:c0:70:f6:93:8b:e1:e5:b0:f9:1b:9c:f5:
         6f:d6:64:cf:1f:56:16:fc:f1:dc:61:2c:79:b7:20:c1:e7:9f:
         c4:4a:1e:49:1a:20:16:48:42:2a:31:1e:db:79:56:9c:8d:c2:
         4d:f8:56:4b:1e:ed:38:57:e8:8e:60:29:ca:64:94:69:0b:71:
         72:b0:4d:3b:b2:33:cd:3b:1f:60:3c:47:74:ed:f3:f4:d0:a3:
         8d:d0:90:f4:3c:19:c6:e7:33:6f:79:c9:8f:33:51:60:2f:bc:
         9d:d5:3f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----