This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/869E74EC658810B8C74561739A32C426E77C2A2F.cer
File:                     869E74EC658810B8C74561739A32C426E77C2A2F.cer (raw, json)
Hash identifier:          I7f4NBjcQgPvBqOEdVEq7PBSNAlONoCwri+MtysJwO0=
Subject key identifier:   86:9E:74:EC:65:88:10:B8:C7:45:61:73:9A:32:C4:26:E7:7C:2A:2F
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       484472EF2AEBEF39EDE5B1BEFE31F666C980C370
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/301F196C3EC034EE5857625AFA5548C3F8774A3CE0D5511EA9019F1A3E4E6515/0/869E74EC658810B8C74561739A32C426E77C2A2F.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/301F196C3EC034EE5857625AFA5548C3F8774A3CE0D5511EA9019F1A3E4E6515/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Jan 2026 18:08:55 +0000
Certificate not after:    Tue 26 Jan 2027 18:13:55 +0000
Subordinate resources:    AS: 263737
                          IP: 138.59.140.0/22
                          IP: 2803:df80::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Feb 2026 05:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:44:72:ef:2a:eb:ef:39:ed:e5:b1:be:fe:31:f6:66:c9:80:c3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 27 18:08:55 2026 GMT
            Not After : Jan 26 18:13:55 2027 GMT
        Subject: CN=869E74EC658810B8C74561739A32C426E77C2A2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:72:fd:74:cd:00:dd:84:64:7c:35:4f:dd:b6:
                    88:cf:1c:ca:88:f0:8f:28:31:28:a5:9e:18:15:0b:
                    0f:a7:10:c3:42:81:2b:86:68:55:98:a2:a5:7c:64:
                    66:ce:a5:1b:96:8f:af:d6:bd:ac:3b:f6:81:30:55:
                    21:2d:49:b6:68:bf:d0:25:91:f9:96:72:be:51:df:
                    b4:13:9e:2c:09:17:86:b7:dd:10:50:3e:05:64:d4:
                    cb:6b:a5:5f:e9:93:7c:90:88:c6:ac:de:0f:b8:f2:
                    1c:72:69:29:57:7f:2c:2a:b5:45:4d:d3:6a:78:b5:
                    bd:e8:08:eb:92:62:81:1d:13:7c:35:e8:a4:db:23:
                    ea:86:57:8e:43:62:cc:5e:9b:8d:20:0b:68:75:65:
                    18:e9:a8:0a:ee:5e:30:5d:fe:98:e8:b1:e1:4d:04:
                    47:b0:d3:b4:fb:6d:1e:4b:87:67:1e:62:38:c6:37:
                    80:12:dc:8e:d3:59:8a:90:4e:f3:62:5c:3b:2b:b0:
                    cf:93:0a:26:ec:80:3f:53:07:4e:71:10:b4:b3:01:
                    ad:67:cd:79:d0:a2:0a:17:d3:a0:56:2d:19:e2:ad:
                    f2:67:9a:f5:fd:21:af:1c:29:23:c6:50:cb:0f:b5:
                    16:dd:66:30:93:a5:b0:2e:9a:58:21:e1:52:1e:76:
                    31:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:9E:74:EC:65:88:10:B8:C7:45:61:73:9A:32:C4:26:E7:7C:2A:2F
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/301F196C3EC034EE5857625AFA5548C3F8774A3CE0D5511EA9019F1A3E4E6515/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/301F196C3EC034EE5857625AFA5548C3F8774A3CE0D5511EA9019F1A3E4E6515/0/869E74EC658810B8C74561739A32C426E77C2A2F.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.140.0/22
                IPv6:
                  2803:df80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263737

    Signature Algorithm: sha256WithRSAEncryption
         2d:32:6e:59:11:82:1d:28:4e:49:28:35:38:cf:52:34:0d:54:
         3d:31:0d:73:f6:a9:11:32:5d:cd:4c:91:07:c2:5b:8f:6b:4f:
         6f:84:9a:97:74:06:47:55:3d:8f:fc:95:68:bd:a8:0a:48:ac:
         b1:e9:ed:7a:0f:c7:82:e1:8b:56:c6:d4:1b:c0:c2:65:ca:5c:
         d9:4b:e1:a7:51:b1:94:c0:61:41:1a:c1:5e:f3:eb:d2:ba:9a:
         79:cc:a5:5a:b0:4e:c5:df:e2:0f:cb:b5:bd:41:8d:cd:72:06:
         f3:db:24:d3:e8:fc:f8:e1:4a:aa:43:73:e8:fa:99:6a:0f:30:
         d2:cc:27:51:b2:7f:79:bf:fb:88:39:cf:c0:bf:3d:cf:d7:5d:
         59:0d:f5:19:3e:2d:5b:50:0d:b6:d6:b9:6b:dd:0a:c4:90:54:
         9f:ce:a2:3d:c6:8e:4a:a9:76:32:9a:cd:5a:b9:ec:41:56:99:
         31:6b:ec:bc:bb:80:99:ec:3f:ea:2c:6d:2e:02:5c:43:ff:21:
         f2:38:9d:59:55:aa:7c:2c:20:13:96:8d:9b:12:cc:f8:c6:34:
         3f:bd:0e:1c:cd:56:68:c2:f3:e8:1d:c2:50:b5:e4:70:63:e4:
         56:36:ec:6a:5d:06:7d:21:7f:b2:27:58:4f:d5:86:df:71:0a:
         7d:28:d8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----