This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF.cer
File:                     6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF.cer (raw, json)
Hash identifier:          Kc+zLh8ajWOYvSsvCGCWjgfsljIXD8qPHaV0pSPV8BI=
Subject key identifier:   6F:E8:D9:F3:26:C9:49:74:AC:24:CD:1C:C7:5E:4E:49:EF:AF:1C:FF
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       62BDFF30DA696D88BB31667342AE2430B75077AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/B9F88FEFA10AD3C74FA5F98AFBCD23FC6FAA4C78F1D4EB18464ED3704CACA7DC/0/6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/B9F88FEFA10AD3C74FA5F98AFBCD23FC6FAA4C78F1D4EB18464ED3704CACA7DC/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jan 2026 05:11:51 +0000
Certificate not after:    Tue 19 Jan 2027 05:16:51 +0000
Subordinate resources:    AS: 61450
                          IP: 201.150.96.0/22
                          IP: 2801:108::/44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:bd:ff:30:da:69:6d:88:bb:31:66:73:42:ae:24:30:b7:50:77:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Jan 20 05:11:51 2026 GMT
            Not After : Jan 19 05:16:51 2027 GMT
        Subject: CN=6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8d:6b:3f:90:64:a7:82:ec:0d:1d:b2:47:22:
                    41:2a:18:e4:76:a0:5a:f8:2d:ea:7c:a2:b5:8b:cc:
                    5b:ba:94:ee:6b:43:9b:26:01:75:25:24:b9:fe:35:
                    61:53:97:01:40:6a:4c:38:cf:49:b9:95:11:77:59:
                    6f:ec:c8:5e:9c:fd:39:35:25:d1:ff:13:15:c8:88:
                    90:b4:f2:0e:ce:ff:33:8b:44:ed:3b:74:22:21:4e:
                    90:fe:dd:93:5f:5d:4c:e9:cf:40:d7:1b:a4:6a:64:
                    07:ea:ee:f7:dd:9b:0a:3f:fd:cf:59:26:b7:d6:13:
                    e4:74:4b:90:ac:5e:4d:9a:07:e7:a3:9a:84:53:3a:
                    fc:29:ef:44:ce:e6:83:94:25:59:4d:04:8c:5d:39:
                    6e:ba:bb:cf:c2:a4:68:64:0f:51:b6:99:be:7f:e6:
                    dc:11:e4:11:c7:ad:c3:be:59:4c:42:b9:1b:56:c9:
                    a7:24:23:ec:8b:0c:a7:56:c3:4a:cb:8e:f2:12:9a:
                    b4:3a:43:6e:f6:d6:8e:f5:6e:60:7e:0b:b7:d2:ab:
                    16:ad:eb:d3:ff:27:dc:05:43:09:26:2b:e9:29:5e:
                    2b:fd:22:9b:55:29:26:d6:af:38:80:c7:9f:27:af:
                    c4:27:47:68:6d:19:27:b3:e7:cc:65:1f:9f:a8:72:
                    c2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:E8:D9:F3:26:C9:49:74:AC:24:CD:1C:C7:5E:4E:49:EF:AF:1C:FF
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B9F88FEFA10AD3C74FA5F98AFBCD23FC6FAA4C78F1D4EB18464ED3704CACA7DC/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B9F88FEFA10AD3C74FA5F98AFBCD23FC6FAA4C78F1D4EB18464ED3704CACA7DC/0/6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.96.0/22
                IPv6:
                  2801:108::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61450

    Signature Algorithm: sha256WithRSAEncryption
         11:23:57:bb:30:30:5c:50:5b:6e:71:4e:9f:20:97:ec:df:fe:
         42:c5:83:af:fc:d3:f9:2f:0d:1b:88:a7:6d:21:0d:cf:88:81:
         eb:8f:76:d9:fc:9f:8d:05:3f:7a:4c:a9:7f:cf:b0:8c:ae:17:
         08:f1:c5:2e:8c:db:a1:2e:19:82:2b:f6:7c:fe:ca:4c:b5:ca:
         94:94:4d:20:71:3a:a0:a7:68:77:ec:04:73:11:0c:7f:a0:ac:
         9c:cc:d3:5f:9a:8c:de:0a:e5:3c:35:97:b3:7d:ed:af:57:61:
         74:59:65:7d:24:b0:29:bc:49:04:95:4d:2a:56:e5:3c:d9:12:
         b9:23:36:03:08:e9:62:da:a2:d4:3d:b9:5d:db:4d:a8:ff:57:
         86:ab:4a:39:5c:99:8c:cd:50:81:92:ab:cb:9d:85:87:3c:9c:
         71:6c:c3:59:21:78:09:ef:43:fd:dc:da:78:27:84:99:b1:37:
         18:35:34:34:f1:3d:79:a5:e4:d7:45:9e:3e:8e:f0:a7:07:a2:
         86:af:4d:a3:b4:fc:a5:0d:21:08:3b:7f:c2:43:bf:d2:b4:bc:
         75:bb:97:92:61:a3:0d:f5:9a:7f:af:30:01:42:72:32:9f:c5:
         d5:25:c7:6c:2d:e1:88:a3:88:35:b9:52:5f:33:94:b0:15:0d:
         fd:0a:19:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----