This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.cer
File:                     816EC1F9E069407800183BB75F557CA6DBF5A3AA.cer (raw, json)
Hash identifier:          hmaW+FS9k9Dzdtmk8cgJREWDOpwP6OOwqoA8yADwvMk=
Subject key identifier:   81:6E:C1:F9:E0:69:40:78:00:18:3B:B7:5F:55:7C:A6:DB:F5:A3:AA
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       6C201EF61BB0080635AC60047A0B8217FDD64931
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 06:47:22 +0000
Certificate not after:    Wed 27 Jan 2027 06:52:22 +0000
Subordinate resources:    AS: 264843
                          IP: 170.82.247.0/24
                          IP: 2801:14:d000::/44
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:20:1e:f6:1b:b0:08:06:35:ac:60:04:7a:0b:82:17:fd:d6:49:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 06:47:22 2026 GMT
            Not After : Jan 27 06:52:22 2027 GMT
        Subject: CN=816EC1F9E069407800183BB75F557CA6DBF5A3AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a5:8c:aa:42:29:ed:ff:80:91:51:d2:33:fd:
                    eb:26:95:7c:8d:f0:e1:4d:04:98:05:be:68:de:a6:
                    67:13:62:f2:f4:69:d9:ab:5d:a1:29:c4:70:26:47:
                    f0:26:70:d6:8a:08:6e:b4:c6:bc:34:11:aa:67:c8:
                    de:96:0d:9f:17:fd:79:9a:56:43:ac:a5:1c:9d:d3:
                    58:c4:8e:63:50:6d:d2:e4:c0:47:fd:78:84:88:41:
                    61:6f:67:b1:5d:bb:25:aa:a0:12:35:f7:97:e8:6c:
                    23:ae:64:9a:4d:e5:5a:65:b5:00:be:16:e5:cd:b2:
                    44:b0:bb:3e:cb:32:dd:a8:9a:21:eb:2e:60:17:68:
                    8b:c4:b6:da:da:ae:3c:41:82:55:3c:f4:6e:92:49:
                    f1:7b:a4:a7:33:10:18:3c:47:de:d5:fc:db:35:c1:
                    e9:24:66:b0:23:fd:ea:13:f6:76:87:61:07:bc:7f:
                    99:07:dd:06:6e:59:51:99:df:76:1c:2d:c0:c0:79:
                    ce:59:5d:bd:62:8e:5b:cd:78:ff:65:62:00:36:67:
                    d4:42:18:6f:12:9c:98:9f:e2:1d:48:c1:e1:c1:ec:
                    8b:03:c1:21:77:a1:65:4d:6e:52:e4:69:0e:c7:73:
                    2a:76:d3:6c:6f:19:a6:0a:7b:ac:55:ba:50:e3:cf:
                    2e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:6E:C1:F9:E0:69:40:78:00:18:3B:B7:5F:55:7C:A6:DB:F5:A3:AA
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.247.0/24
                IPv6:
                  2801:14:d000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264843

    Signature Algorithm: sha256WithRSAEncryption
         7d:54:b2:ec:17:c6:36:03:c8:3a:24:cd:a0:38:0f:6d:db:c3:
         a5:7a:83:2f:ff:9d:4b:29:be:88:86:14:be:9d:3c:9b:b0:dd:
         ad:fc:8b:6a:0d:0f:f8:05:9e:b7:6f:8e:0f:85:2e:b1:04:bd:
         74:12:8f:2c:c7:ed:f4:7e:4f:0a:bb:ba:54:f3:b1:99:25:4a:
         fe:07:34:f3:29:90:23:b1:10:b6:1f:b2:55:e6:3e:d0:82:c2:
         eb:83:ef:44:bf:12:45:96:d3:d9:1e:e2:a8:ff:85:41:7f:c9:
         11:11:c6:f5:3c:de:28:3d:ff:da:ef:49:ea:05:68:d4:4e:2a:
         50:00:a2:46:61:98:53:5b:36:48:6f:c8:94:a4:50:39:9c:fa:
         4b:57:8e:26:48:c1:25:fa:8c:6b:20:11:40:ab:f8:e3:51:78:
         df:a3:58:3f:6c:77:e8:0e:9a:ab:05:e6:3f:5e:e1:ab:d5:46:
         40:77:e4:32:7c:b5:3f:8c:a6:26:4f:99:ae:64:f3:f0:99:df:
         a7:b7:8a:9c:31:d0:b5:84:85:cf:a1:9a:7e:fd:76:ad:ba:ba:
         82:7d:68:3c:13:28:b7:b7:43:03:94:2c:40:62:ac:7b:26:25:
         2d:ae:81:0b:8f:d8:63:3d:4c:6d:31:41:1a:ef:17:c4:3f:ed:
         34:52:9d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 02:12:29 2026 by rpki-client