This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CDB97C410028B5C8AFF4E3DF7960EDB7330E7D0.cer
File:                     6CDB97C410028B5C8AFF4E3DF7960EDB7330E7D0.cer (raw, json)
Hash identifier:          9JOAzzcDaFaIbBf3NedN+Qz2MdPk+R056JVwRrbKE4U=
Subject key identifier:   6C:DB:97:C4:10:02:8B:5C:8A:FF:4E:3D:F7:96:0E:DB:73:30:E7:D0
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       3A4196384B76E22BE38FC78AAB25CE2FE6E4C4D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/848B7C827600EB0903D3D36F5E0B43264D8D30A33D7C3FBE6B9E843FAE2E0F55/0/6CDB97C410028B5C8AFF4E3DF7960EDB7330E7D0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/848B7C827600EB0903D3D36F5E0B43264D8D30A33D7C3FBE6B9E843FAE2E0F55/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Jan 2026 21:26:51 +0000
Certificate not after:    Tue 26 Jan 2027 21:31:51 +0000
Subordinate resources:    AS: 272818
                          IP: 190.113.33.0 -- 190.113.35.255
                          IP: 2803:a490::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:41:96:38:4b:76:e2:2b:e3:8f:c7:8a:ab:25:ce:2f:e6:e4:c4:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 27 21:26:51 2026 GMT
            Not After : Jan 26 21:31:51 2027 GMT
        Subject: CN=6CDB97C410028B5C8AFF4E3DF7960EDB7330E7D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e7:85:11:b8:8f:85:76:38:1d:c3:5c:58:a3:
                    a5:9a:3c:d8:39:df:b9:9f:f7:52:70:81:9b:df:7a:
                    64:91:91:c9:e4:06:f0:9c:9d:6e:7f:09:a9:28:ad:
                    26:a3:d3:ce:9a:40:b5:51:cd:b4:84:da:f2:9d:d0:
                    dc:20:5d:f4:11:8b:96:a3:f2:e5:14:df:72:37:7e:
                    19:c0:ed:86:c3:42:88:f8:38:82:fe:b4:bd:f9:05:
                    72:47:f0:1b:72:71:58:7b:a0:69:44:82:e9:0f:5e:
                    6d:db:bc:db:d6:da:c8:34:f2:88:04:73:52:2e:ee:
                    43:65:93:60:24:93:89:a5:4d:37:d2:fe:df:e1:f8:
                    f7:8a:62:06:79:34:50:92:ec:b9:36:f8:07:e1:93:
                    3b:00:c5:52:86:cc:1e:bc:d8:bf:83:2c:0a:ad:02:
                    d9:3a:16:0e:67:a1:30:42:7f:15:aa:80:85:84:4e:
                    49:0e:23:02:87:96:bc:a9:bf:8e:a2:3a:cf:34:20:
                    71:a2:75:18:c7:80:ee:87:b3:13:dd:03:12:1a:35:
                    8d:96:a8:4f:69:be:cc:23:02:60:b1:98:09:d0:c9:
                    ed:46:73:45:2d:ff:b3:62:02:4f:8d:0a:30:5e:89:
                    2b:ac:e8:fa:f7:51:90:85:b7:6b:7a:9e:45:62:77:
                    59:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6C:DB:97:C4:10:02:8B:5C:8A:FF:4E:3D:F7:96:0E:DB:73:30:E7:D0
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/848B7C827600EB0903D3D36F5E0B43264D8D30A33D7C3FBE6B9E843FAE2E0F55/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/848B7C827600EB0903D3D36F5E0B43264D8D30A33D7C3FBE6B9E843FAE2E0F55/0/6CDB97C410028B5C8AFF4E3DF7960EDB7330E7D0.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.33.0-190.113.35.255
                IPv6:
                  2803:a490::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272818

    Signature Algorithm: sha256WithRSAEncryption
         39:c5:38:96:31:39:ab:02:fc:ab:a5:74:77:db:a5:6c:8b:e9:
         4c:f1:6a:ae:3d:0f:cb:32:9f:4c:a9:66:f0:38:31:be:03:e2:
         3c:c9:95:eb:56:b7:cf:7a:4c:d2:f1:1f:9b:5d:48:29:4a:4d:
         c9:d7:42:6a:08:1d:47:6a:56:13:65:e0:a3:b7:b6:0c:db:d9:
         8c:dc:7d:0b:bd:c3:8c:ec:77:19:ec:d5:b5:f7:33:67:97:26:
         3c:ef:38:63:5d:e8:15:80:e0:4d:b6:f8:09:b2:55:71:66:87:
         47:88:f6:5a:14:d4:25:3f:2a:71:60:da:ac:a3:ef:31:9e:24:
         5c:5f:3a:72:04:5b:4c:c3:89:62:fc:11:06:76:fe:b3:3b:c8:
         c4:d0:3d:a2:5c:ed:0e:53:a8:31:a9:18:1c:7e:33:78:cf:9f:
         c2:46:ae:73:d3:b7:cf:26:e7:89:ec:87:2a:dd:f3:57:7a:bb:
         01:9f:b0:c1:1a:28:82:fe:fe:d4:88:c0:6a:bc:90:84:73:7e:
         cd:fb:1b:9e:24:2c:79:ed:b6:90:2b:7d:2c:c4:45:ed:5e:73:
         bd:bb:43:9e:b1:2a:cb:cd:c6:8a:de:d8:88:e7:4a:5b:6a:cc:
         1a:4d:5c:dd:eb:0b:f2:31:38:57:dc:39:9f:56:9e:5d:b2:0c:
         53:ff:77:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 02:08:48 2026 by rpki-client