This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer
File:                     20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer (raw, json)
Hash identifier:          nqgy/ufKisDBELg/O1Ir3d6aCFWoQXdIqgwElL+903U=
Subject key identifier:   20:B9:C4:7C:5E:60:64:54:FC:31:4A:D7:D8:CD:78:6F:B8:04:9F:F1
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       3BCDF3AFD94978504380AB5F94D3E48FDE185B8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 20:24:52 +0000
Certificate not after:    Wed 27 Jan 2027 20:29:52 +0000
Subordinate resources:    AS: 264780
                          IP: 160.238.252.0/22
                          IP: 168.228.248.0/22
                          IP: 170.247.136.0/22
                          IP: 200.12.28.0/22
                          IP: 200.126.32.0/20
                          IP: 2803:1340::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Feb 2026 05:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:cd:f3:af:d9:49:78:50:43:80:ab:5f:94:d3:e4:8f:de:18:5b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 20:24:52 2026 GMT
            Not After : Jan 27 20:29:52 2027 GMT
        Subject: CN=20B9C47C5E606454FC314AD7D8CD786FB8049FF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:21:b3:35:e5:77:4a:f5:1f:21:38:33:89:
                    dd:70:82:66:08:11:f0:42:e5:d1:b3:0b:91:d4:ae:
                    cd:f5:10:12:06:e5:8d:2f:a1:e4:e4:34:84:8b:fe:
                    03:1a:3f:7e:1b:27:77:14:fa:4d:44:68:4b:1f:0e:
                    9c:e0:be:75:0f:20:a9:b6:a9:ad:ad:3f:47:8b:d4:
                    85:15:c2:45:9e:60:55:6c:c7:cc:95:1e:10:5f:38:
                    ff:02:a1:eb:e9:fa:e8:d7:c9:d5:7e:52:8e:54:34:
                    31:df:3f:f7:82:91:ac:61:2c:fa:a2:c7:02:58:44:
                    a5:e8:f2:03:67:0d:4d:27:ff:1c:65:79:91:bb:52:
                    5c:8b:1b:7d:bd:a7:64:87:d0:f8:7e:23:ea:f8:8b:
                    6c:64:e7:0b:07:35:66:46:45:4f:3e:1e:ee:4a:76:
                    e5:a7:bc:97:5d:d8:f6:c3:be:b7:c7:1d:57:19:f7:
                    e1:a8:d1:15:f2:3f:b3:63:36:a0:50:48:33:ff:92:
                    74:2c:3b:a8:2d:ba:54:f7:74:67:29:a3:1a:12:eb:
                    ee:7b:76:be:68:2e:cf:f6:a1:e7:13:f5:b9:0a:3d:
                    15:62:af:28:c2:74:65:05:2a:ea:7e:8e:48:81:d6:
                    47:96:82:e5:ca:20:77:29:04:59:04:36:c6:6d:80:
                    5f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:B9:C4:7C:5E:60:64:54:FC:31:4A:D7:D8:CD:78:6F:B8:04:9F:F1
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.252.0/22
                  168.228.248.0/22
                  170.247.136.0/22
                  200.12.28.0/22
                  200.126.32.0/20
                IPv6:
                  2803:1340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264780

    Signature Algorithm: sha256WithRSAEncryption
         4a:e5:aa:f3:db:b9:ba:0c:7e:46:a9:b5:6f:7f:5c:20:32:98:
         d4:c7:15:da:18:93:78:8e:b1:8d:39:fd:aa:d4:85:82:f6:0e:
         ad:ae:0e:3d:0a:b6:dc:71:67:ac:24:99:c1:33:16:f8:7b:6a:
         39:65:b4:e5:64:e2:0a:37:fb:a9:1d:77:28:69:f6:fa:82:53:
         e2:b7:8d:6e:48:df:10:c6:c9:ed:58:9e:88:18:92:b6:5d:99:
         59:32:ce:f3:7a:b3:35:95:48:75:c0:29:5f:f3:2e:a3:10:d0:
         fb:9c:52:2e:1b:58:bb:83:6d:35:7c:94:81:42:9c:f5:e1:17:
         cc:99:8a:74:70:81:04:4d:2f:0b:e1:8f:ff:f7:66:20:e2:31:
         f5:0f:01:a2:05:18:96:3c:9e:46:60:19:ad:05:ad:18:a6:8d:
         ad:72:8f:c5:ed:8f:5b:64:84:fe:5d:ea:5e:d0:0d:25:48:ea:
         81:79:f2:c7:f7:79:f9:47:15:c6:e1:d5:a9:74:fb:21:93:1c:
         e7:08:01:2c:ac:2e:de:a2:77:82:b6:b6:e5:f7:6f:4d:73:4f:
         4e:fb:5b:69:6e:9b:f4:f0:45:16:b0:8f:4e:90:1f:fe:e4:b6:
         e8:16:c5:32:4e:2f:42:60:6d:41:73:7d:8a:22:e5:54:2d:ef:
         da:36:55:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 1 09:16:59 2026 by rpki-client