This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78E57A653F4F50DBE32E97A0E2737B358F4219C2.cer
File:                     78E57A653F4F50DBE32E97A0E2737B358F4219C2.cer (raw, json)
Hash identifier:          zl/rQ6uLZrzrRDI3jYh5TG4FHMiQLGxWh2rlGEfeRz8=
Subject key identifier:   78:E5:7A:65:3F:4F:50:DB:E3:2E:97:A0:E2:73:7B:35:8F:42:19:C2
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       39A0C627A1E37FB36D5D03E7D68757D60D943C18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9DA8C6A0A5D36D7F1AFFB191D4907002FFAA0AABF3C1E484B47ED02D28D7D10D/0/78E57A653F4F50DBE32E97A0E2737B358F4219C2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9DA8C6A0A5D36D7F1AFFB191D4907002FFAA0AABF3C1E484B47ED02D28D7D10D/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 00:59:44 +0000
Certificate not after:    Wed 27 Jan 2027 01:04:44 +0000
Subordinate resources:    AS: 263757
                          IP: 138.117.48.0/22
                          IP: 2803:4840::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a0:c6:27:a1:e3:7f:b3:6d:5d:03:e7:d6:87:57:d6:0d:94:3c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 00:59:44 2026 GMT
            Not After : Jan 27 01:04:44 2027 GMT
        Subject: CN=78E57A653F4F50DBE32E97A0E2737B358F4219C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1b:bf:cd:8a:eb:2a:ff:64:09:61:e9:75:86:
                    b7:5c:76:b4:cd:1d:fd:09:ad:8b:27:35:2b:fd:05:
                    b2:fe:69:a2:52:70:ea:56:a1:ff:61:9f:ec:c2:53:
                    95:00:8a:02:c1:19:d9:ee:4a:61:84:3d:d5:45:2f:
                    2d:8c:5d:2c:85:86:62:92:77:50:2b:e6:1e:83:5f:
                    00:27:d2:67:e7:92:43:72:83:5a:f3:a4:1b:d1:e4:
                    29:6f:da:34:93:0f:48:63:ff:e0:35:76:de:d1:d3:
                    00:bd:f9:01:20:a5:ca:50:4d:6a:0e:c7:3b:25:1c:
                    b6:79:60:8a:29:4d:e8:1a:ed:34:15:f3:59:3d:4a:
                    b1:fc:c7:0d:8d:27:a3:49:e4:b7:04:19:fc:21:02:
                    6d:02:43:9e:c7:ae:81:4d:7b:39:a9:ca:22:f0:d0:
                    9e:98:ed:a7:80:81:eb:40:2b:0d:bf:ea:92:ed:a1:
                    82:08:d8:40:7c:ad:8d:05:49:8d:f8:c7:93:35:a2:
                    27:37:1b:e8:11:0f:36:d7:08:c8:ff:6a:d6:6d:e5:
                    41:03:44:ea:1f:22:96:bd:96:94:03:6f:41:a6:c6:
                    f1:1f:6f:97:04:b2:25:27:6c:e9:35:81:88:3c:37:
                    bc:61:2b:2a:f4:6b:33:20:ab:2a:d2:a4:6d:d0:d0:
                    f2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                78:E5:7A:65:3F:4F:50:DB:E3:2E:97:A0:E2:73:7B:35:8F:42:19:C2
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9DA8C6A0A5D36D7F1AFFB191D4907002FFAA0AABF3C1E484B47ED02D28D7D10D/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9DA8C6A0A5D36D7F1AFFB191D4907002FFAA0AABF3C1E484B47ED02D28D7D10D/0/78E57A653F4F50DBE32E97A0E2737B358F4219C2.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.48.0/22
                IPv6:
                  2803:4840::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263757

    Signature Algorithm: sha256WithRSAEncryption
         02:e8:8f:d3:84:57:e9:db:84:28:95:6e:e0:67:ca:8a:c2:08:
         2d:35:70:6b:7f:2d:bc:46:35:8a:7e:f4:72:df:7c:2a:bb:38:
         c8:53:02:06:9c:eb:70:96:e6:62:ef:c4:6e:86:bb:51:1a:8d:
         35:84:22:b3:10:e3:c6:f6:43:00:9e:24:d0:eb:c4:a1:f9:d8:
         49:d6:e1:7e:3f:62:db:c8:a6:24:18:4b:de:2c:8b:78:a7:0c:
         d5:99:4c:55:d5:48:d9:08:20:e4:5c:96:c1:cd:76:37:e5:d7:
         cf:da:3c:b4:19:ce:16:ae:ef:a6:43:50:0c:9c:6a:57:f8:b0:
         1f:79:86:e8:fd:a3:99:f8:bf:f8:01:57:ad:ba:7e:5f:c7:1d:
         d4:ac:1d:a6:fd:da:f5:a1:7c:6c:85:8c:3f:3b:2f:86:65:1d:
         98:7b:3c:8a:74:d5:6c:82:ce:87:04:6c:eb:df:21:9f:78:29:
         28:e8:33:b2:48:70:8a:8a:6e:34:8a:b7:2c:8a:66:00:81:8b:
         7d:c6:4b:49:33:b8:aa:8d:b3:1a:e3:3f:5d:16:09:2c:b3:16:
         e3:77:6c:c9:62:01:70:29:1f:f2:7f:e9:0b:57:3b:89:41:be:
         e0:93:eb:0b:5e:97:41:e9:ec:8b:d3:b7:c8:42:19:82:f8:5f:
         3a:9d:12:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----