This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
File:                     9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer (raw, json)
Hash identifier:          69g1Urjunoh4XcxzWwxmBnPe7sokWQXi9ULrHEr7EFI=
Subject key identifier:   9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       64522C379240B91FEFACA374B150A31ECFBA33D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 16:00:27 +0000
Certificate not after:    Wed 27 Jan 2027 16:05:27 +0000
Subordinate resources:    AS: 8048
                          AS: 10293
                          IP: 161.196.0.0/16
                          IP: 186.88.0.0/13
                          IP: 190.9.128.0/19
                          IP: 190.36.0.0/14
                          IP: 190.72.0.0/13
                          IP: 190.198.0.0 -- 190.207.255.255
                          IP: 200.11.128.0/17
                          IP: 200.44.0.0/16
                          IP: 200.84.0.0/16
                          IP: 200.90.0.0/17
                          IP: 200.93.0.0/17
                          IP: 200.109.0.0/16
                          IP: 201.208.0.0/14
                          IP: 201.242.0.0/15
                          IP: 201.248.0.0/15
                          IP: 2800:1000::/24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:52:2c:37:92:40:b9:1f:ef:ac:a3:74:b1:50:a3:1e:cf:ba:33:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 16:00:27 2026 GMT
            Not After : Jan 27 16:05:27 2027 GMT
        Subject: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:bd:78:2b:aa:5b:e8:fd:30:c4:bf:ef:d6:
                    4a:fb:e3:3d:30:ae:1a:92:78:8f:40:c3:af:32:d2:
                    a5:ed:96:a6:dd:bf:c4:33:ed:62:5b:cf:84:c1:b5:
                    c3:42:6b:46:9a:cd:4d:8f:64:a9:a1:ac:f2:68:d5:
                    11:b0:fb:bd:62:cd:87:1c:dd:e9:7f:82:4a:f1:77:
                    14:66:c2:ab:d3:c0:ee:3a:7e:ec:b0:82:c8:14:dc:
                    79:40:63:6f:bc:f1:42:8c:40:95:c5:bf:73:e6:d4:
                    a5:21:67:88:09:a8:67:d1:c7:db:7e:07:19:f0:01:
                    57:5a:81:58:fa:7f:14:e6:3c:2d:80:dd:9f:55:86:
                    e6:fb:0c:fc:2c:56:b4:f9:23:b7:12:50:9f:a8:35:
                    b8:43:5c:42:0d:e5:a6:ba:b8:64:11:74:8b:66:4e:
                    3f:32:1c:cf:dc:11:7f:82:45:b7:be:6e:ce:fd:72:
                    bc:f7:5e:2d:b5:97:d7:ae:95:ac:1b:59:ed:f8:41:
                    07:9b:b8:27:4e:3b:bf:c3:bb:87:bf:fe:e4:c8:ab:
                    a4:dd:88:45:09:87:65:b9:42:50:fa:22:88:7d:9d:
                    69:6f:ab:8d:85:39:30:f1:bf:15:c0:42:e1:5c:ee:
                    e0:ca:4d:6e:fb:dc:1f:9d:cd:72:9e:ad:82:d6:df:
                    92:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.196.0.0/16
                  186.88.0.0/13
                  190.9.128.0/19
                  190.36.0.0/14
                  190.72.0.0/13
                  190.198.0.0-190.207.255.255
                  200.11.128.0/17
                  200.44.0.0/16
                  200.84.0.0/16
                  200.90.0.0/17
                  200.93.0.0/17
                  200.109.0.0/16
                  201.208.0.0/14
                  201.242.0.0/15
                  201.248.0.0/15
                IPv6:
                  2800:1000::/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8048
                  10293

    Signature Algorithm: sha256WithRSAEncryption
         6d:3a:05:fd:b1:51:3b:07:c0:b7:20:7c:33:5f:28:1b:f9:e4:
         d7:f6:99:eb:e6:5d:d6:ac:d0:e4:7b:cf:e1:61:76:d6:65:5c:
         70:cd:a4:22:eb:7d:c8:96:ed:12:44:93:1c:8a:fc:6c:bd:0c:
         f9:6b:ab:6e:54:6f:5c:3f:8f:ac:c4:ec:af:40:d0:43:fe:84:
         9d:de:ad:63:34:eb:b3:f1:f4:1a:ae:98:d1:f4:cb:04:05:c8:
         23:6c:63:3e:1b:ff:56:fa:0f:ac:8b:2a:66:a6:87:60:ff:3d:
         da:be:9f:e7:de:ad:ce:02:ab:6c:56:39:a7:4f:e9:0e:30:c3:
         c6:a5:48:77:71:fb:93:22:56:84:c2:7e:2c:5e:95:4f:50:5c:
         b1:86:4a:f0:8d:d5:84:c1:fb:88:df:c8:ef:93:5f:ac:29:b0:
         29:28:0a:3a:f4:08:12:2f:1a:dd:b4:f3:c9:31:b2:af:0e:44:
         54:f5:ca:ac:74:0f:6f:c1:d4:0a:73:c1:d3:46:bf:05:36:47:
         41:78:2e:e6:ee:a5:11:65:17:59:c7:9f:7d:fc:bf:a0:1a:55:
         6a:e2:1b:61:87:b2:47:98:4e:7d:c8:7d:00:32:ca:c6:4f:2e:
         a5:53:29:d1:89:e4:0c:88:88:d3:b2:a6:7e:79:ff:1f:99:fa:
         0d:88:0a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 02:10:09 2026 by rpki-client