This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3078FCD65C80F975A17BFA4071FD505B1BA67413.cer
File:                     3078FCD65C80F975A17BFA4071FD505B1BA67413.cer (raw, json)
Hash identifier:          a4by0ruGetMMpfpGbVhjZhpvhTZSHgReNXnoKejo1iU=
Subject key identifier:   30:78:FC:D6:5C:80:F9:75:A1:7B:FA:40:71:FD:50:5B:1B:A6:74:13
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       262E4A406A65F4647BAEF995D85FABA0BC190117
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2DB41F34EA498FD6820490B881306454488DA5C63C579482CE3DA7F99379D726/0/3078FCD65C80F975A17BFA4071FD505B1BA67413.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2DB41F34EA498FD6820490B881306454488DA5C63C579482CE3DA7F99379D726/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 20:16:14 +0000
Certificate not after:    Wed 27 Jan 2027 20:21:14 +0000
Subordinate resources:    AS: 265651
                          IP: 170.83.58.0/24
                          IP: 2801:16:d000::/48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2e:4a:40:6a:65:f4:64:7b:ae:f9:95:d8:5f:ab:a0:bc:19:01:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 20:16:14 2026 GMT
            Not After : Jan 27 20:21:14 2027 GMT
        Subject: CN=3078FCD65C80F975A17BFA4071FD505B1BA67413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:95:91:0c:30:d6:5b:8c:64:2f:05:94:b1:42:
                    56:7e:c1:6f:ca:71:02:f3:21:bd:08:22:c3:93:d4:
                    fc:a6:f2:db:6f:e2:a2:92:8c:ed:3c:14:e8:f0:d1:
                    4c:50:52:2d:26:be:45:1f:da:e5:85:a7:f7:0d:27:
                    20:af:62:06:50:35:f9:46:f8:96:76:11:ab:23:1d:
                    b9:6d:ba:f6:46:d0:37:1b:c9:9f:81:e0:b7:04:8f:
                    5b:69:ac:1a:9d:3b:07:fb:11:69:f2:1b:65:e7:62:
                    f1:b4:6f:96:d7:1b:41:92:aa:96:ae:ff:a0:38:c9:
                    a0:e7:5b:e1:28:c6:47:ae:55:18:ff:21:1e:2a:33:
                    c7:8f:c7:e5:6b:25:2b:31:8a:f6:69:61:b2:da:ae:
                    d9:b5:f6:54:4c:41:65:2d:d4:e8:ec:54:98:33:f1:
                    86:95:23:11:98:1e:6b:c3:9d:df:59:08:d8:b0:1e:
                    62:a5:a3:40:3c:32:c9:ac:06:2a:30:94:8c:21:97:
                    c7:42:dd:f7:07:a0:be:a8:3c:3e:ce:3c:c6:fa:0f:
                    2e:6d:15:ef:8a:18:69:db:3d:ac:3e:c6:77:8a:4c:
                    af:43:55:b1:18:fe:40:79:1c:9e:07:d6:7e:5d:a5:
                    5d:76:e8:0a:d2:38:69:e4:e8:a1:83:5c:b3:eb:be:
                    6a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:78:FC:D6:5C:80:F9:75:A1:7B:FA:40:71:FD:50:5B:1B:A6:74:13
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2DB41F34EA498FD6820490B881306454488DA5C63C579482CE3DA7F99379D726/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2DB41F34EA498FD6820490B881306454488DA5C63C579482CE3DA7F99379D726/0/3078FCD65C80F975A17BFA4071FD505B1BA67413.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.58.0/24
                IPv6:
                  2801:16:d000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265651

    Signature Algorithm: sha256WithRSAEncryption
         80:ea:ae:38:6e:ff:30:8b:a5:d7:8d:bc:8b:99:88:6d:3c:72:
         bb:88:23:3a:3a:49:de:de:05:45:f8:6f:08:d7:e9:cf:21:ce:
         1d:89:64:d1:0d:b2:ca:bb:91:ae:15:cc:6e:0c:50:b7:c5:9d:
         ee:7f:46:fe:f6:5f:57:15:32:00:1c:5c:f5:1a:1c:f4:5a:ae:
         25:6a:3d:1d:13:b6:79:e0:da:07:87:24:db:d4:63:81:fa:43:
         54:2c:90:ff:33:19:aa:b2:56:34:d6:bb:2f:45:82:91:4b:08:
         8b:e2:5f:d5:26:dc:13:30:d0:c4:d4:f9:e2:a8:40:12:39:00:
         dd:2b:4d:79:7e:ce:16:e1:11:7d:a5:7b:5a:1f:e8:15:b9:ef:
         19:8c:cb:b6:4a:af:f5:f7:f9:6d:06:13:4b:79:4b:b8:a0:8c:
         c8:2a:8f:c7:67:46:1d:21:33:b9:8c:53:12:bf:2f:e8:c8:7c:
         92:ec:b2:a2:89:0b:2c:37:4c:b2:7a:d1:4e:bd:8f:a1:59:58:
         76:64:8b:6d:e1:9e:5c:01:a4:a9:1a:f7:34:34:c9:06:3c:4d:
         cd:10:a2:1b:7d:97:4e:b0:79:33:54:31:d1:32:27:15:c8:20:
         e7:4a:ac:ae:96:b1:d1:93:c5:c5:9c:23:1f:82:0b:b3:bd:7e:
         70:8d:92:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----