This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer
File:                     921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer (raw, json)
Hash identifier:          pxhZQtYSldlEtyTlJhkC+McdSVrwls2YsWTVlcxvtVA=
Subject key identifier:   92:19:35:ED:D6:7E:9C:18:16:E7:03:F1:DA:BF:FB:F8:6C:FA:1B:78
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       89BA2E45DDCCEBFC813EABFE3AC19DA807F010
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 02:22:31 +0000
Certificate not after:    Wed 27 Jan 2027 02:27:31 +0000
Subordinate resources:    AS: 271813
                          IP: 190.123.66.0/23
                          IP: 2803:f010::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 09:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            89:ba:2e:45:dd:cc:eb:fc:81:3e:ab:fe:3a:c1:9d:a8:07:f0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 02:22:31 2026 GMT
            Not After : Jan 27 02:27:31 2027 GMT
        Subject: CN=921935EDD67E9C1816E703F1DABFFBF86CFA1B78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c2:bc:78:a6:7b:3e:b1:1f:7c:6a:72:04:6c:
                    85:44:66:09:3d:02:79:01:db:9a:b7:2e:22:78:3e:
                    e5:d9:fe:8f:13:87:03:2c:b6:2e:c2:fd:9d:e2:4e:
                    44:20:94:8b:d9:01:05:3f:32:87:72:22:4b:b4:83:
                    b4:c3:bd:46:64:bb:4f:88:4a:f2:a0:b4:2e:af:24:
                    f2:78:05:72:6d:e7:2b:43:2e:d7:26:1a:10:85:33:
                    a8:2e:44:88:25:d6:46:3a:f0:34:d0:1f:bb:2f:d3:
                    46:dc:e9:6b:f7:0f:7e:7c:3f:9c:77:7a:0d:24:e8:
                    66:b2:5b:9a:d6:76:26:d5:fe:d1:45:f7:82:9b:2d:
                    6c:0e:76:c8:d7:37:d4:37:1e:de:cf:68:c8:b2:5b:
                    63:54:cc:e1:76:f2:7c:15:dc:ff:62:73:e4:5d:03:
                    27:b1:41:26:55:d1:26:81:a1:89:cc:a3:e0:7d:f9:
                    4e:57:ec:56:c5:82:8c:4d:07:fd:bd:7b:0f:66:c0:
                    ba:50:5b:87:2c:e8:91:08:fc:95:33:6b:57:24:79:
                    61:97:dc:eb:ce:c4:65:87:c4:2d:91:e2:0a:a5:d5:
                    67:5c:d6:96:9d:07:38:01:fc:25:98:00:30:24:50:
                    7d:87:75:92:7e:5b:e9:7f:fe:06:70:b8:3e:c5:50:
                    c3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                92:19:35:ED:D6:7E:9C:18:16:E7:03:F1:DA:BF:FB:F8:6C:FA:1B:78
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.66.0/23
                IPv6:
                  2803:f010::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271813

    Signature Algorithm: sha256WithRSAEncryption
         3e:99:74:fb:4f:c6:ff:8b:51:fa:37:1f:43:60:d1:3b:79:94:
         c4:0f:f7:05:ae:46:9b:0b:f2:fd:97:8a:0f:61:0f:fe:d7:a0:
         d8:a9:90:a2:58:83:ea:ee:e8:1d:9f:a9:09:77:dd:1a:d4:07:
         ca:7e:42:06:aa:ef:34:3c:6f:57:64:de:85:0e:d0:39:e4:7c:
         ff:e2:fd:9c:c4:2e:f1:96:c1:9f:8f:74:61:7f:af:5f:8d:43:
         4b:ec:17:67:07:c7:f2:4a:2d:bb:1f:94:2f:bd:14:f6:92:d4:
         f9:18:4c:36:93:81:21:e4:75:7f:53:04:15:35:03:7b:bd:3c:
         a2:d4:86:ce:51:ce:af:0d:d7:f4:2f:95:90:fc:1c:6a:e9:e0:
         41:a8:f8:3a:ed:f0:93:28:f1:84:62:06:59:8c:35:01:47:2b:
         24:e0:7e:bb:02:4e:b7:cc:1b:d6:48:18:f0:98:da:61:63:5f:
         f6:52:ea:20:18:6c:19:16:75:2a:ee:4c:e6:c6:c5:3f:36:6e:
         e6:06:45:dd:64:86:77:cd:8c:97:3a:0b:40:78:fa:d7:77:47:
         91:c1:fb:a5:f0:90:59:37:b8:d1:38:47:d9:fa:f6:68:e5:13:
         4c:38:6e:09:be:17:5c:f8:cc:fa:2b:ab:b5:a0:bd:02:eb:70:
         95:68:ac:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----