This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A47E2E33E158272009AD8E7C1E7BE86D93C52A1D.cer
File:                     A47E2E33E158272009AD8E7C1E7BE86D93C52A1D.cer (raw, json)
Hash identifier:          2vBu8XWd1or73sI5n7zTMQWxR4x1upW56dSig5X+cxA=
Subject key identifier:   A4:7E:2E:33:E1:58:27:20:09:AD:8E:7C:1E:7B:E8:6D:93:C5:2A:1D
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       0428B3AAEF539266B24C396675CE96CF5961248B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/B2FA4526391DCCF0A7A34631F3E3D15ECEC49D8879255F2526C3E5BF8BAA81F4/0/A47E2E33E158272009AD8E7C1E7BE86D93C52A1D.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/B2FA4526391DCCF0A7A34631F3E3D15ECEC49D8879255F2526C3E5BF8BAA81F4/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 12:20:26 +0000
Certificate not after:    Wed 27 Jan 2027 12:25:26 +0000
Subordinate resources:    AS: 274036
                          IP: 2803:53d0::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:28:b3:aa:ef:53:92:66:b2:4c:39:66:75:ce:96:cf:59:61:24:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 12:20:26 2026 GMT
            Not After : Jan 27 12:25:26 2027 GMT
        Subject: CN=A47E2E33E158272009AD8E7C1E7BE86D93C52A1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:52:91:9c:99:89:0b:0a:12:c5:a8:9a:b4:ce:
                    94:aa:b4:5a:7f:2b:a1:83:2e:f3:c0:b7:88:82:90:
                    fd:c5:f4:b3:ca:f9:7b:b4:7c:b6:07:32:80:56:ec:
                    09:a0:74:b4:bb:4a:b1:c4:79:96:ae:6b:48:e7:16:
                    7b:33:b9:fd:04:b5:f9:44:1e:df:e7:8e:d5:0c:7e:
                    90:44:e9:b4:f2:13:fe:db:ac:eb:01:59:87:26:78:
                    26:d8:0e:35:5b:cc:b9:8d:47:1a:a6:8b:c1:61:85:
                    05:85:15:bf:7b:28:fc:9d:0d:11:fb:2a:8a:c0:bf:
                    34:fc:a8:d6:1e:99:ab:7d:a8:a7:30:46:df:58:44:
                    ed:3b:d9:40:f8:b3:59:8f:62:35:2a:45:40:c8:90:
                    6e:ee:d9:11:4f:01:41:96:80:59:56:20:d3:ba:5c:
                    da:41:09:76:3d:cd:0c:2e:ac:ed:8f:94:b2:4d:da:
                    e1:d7:08:66:f6:c3:f5:3c:cc:bd:8e:47:6c:83:d9:
                    88:31:96:c4:b9:26:ad:7b:a6:46:ba:d9:a8:c7:d2:
                    a2:e5:df:60:47:17:04:97:42:db:23:71:10:9d:d7:
                    53:a2:6c:a1:94:86:ee:6e:0e:c3:65:65:c8:e8:f4:
                    82:ee:f7:d2:3e:a2:3a:d2:fc:ee:47:f3:d0:c8:92:
                    90:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:7E:2E:33:E1:58:27:20:09:AD:8E:7C:1E:7B:E8:6D:93:C5:2A:1D
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B2FA4526391DCCF0A7A34631F3E3D15ECEC49D8879255F2526C3E5BF8BAA81F4/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B2FA4526391DCCF0A7A34631F3E3D15ECEC49D8879255F2526C3E5BF8BAA81F4/0/A47E2E33E158272009AD8E7C1E7BE86D93C52A1D.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:53d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274036

    Signature Algorithm: sha256WithRSAEncryption
         64:4e:e1:fd:6c:17:42:20:66:e3:37:3c:f9:ae:01:21:c7:23:
         63:6b:a9:c1:7f:39:7a:39:17:70:5a:73:00:0c:2b:c1:68:1d:
         d2:66:f4:66:b1:dd:03:d4:82:be:b8:3b:d8:03:59:d1:e5:c6:
         73:d0:3e:28:8c:98:40:ad:0f:38:69:41:eb:40:ff:a5:33:07:
         df:40:3b:96:35:72:fc:0c:03:91:39:44:4f:29:eb:36:18:c8:
         b2:3a:31:32:e5:b6:09:07:ad:b8:89:b0:78:2c:62:59:29:ea:
         6a:c9:fb:ba:cb:63:c5:51:3b:b2:bd:b6:55:28:05:13:71:36:
         a0:30:29:cd:27:d1:9c:91:78:0f:58:94:11:c6:dd:5e:3e:4c:
         55:a8:e1:37:5a:f1:a1:fe:21:f0:31:d1:7c:82:38:ff:72:03:
         1c:a2:35:9a:43:30:f8:e9:78:2b:f2:ae:56:38:54:4e:7d:3b:
         08:2e:9d:54:db:17:a6:00:39:7b:96:6d:d2:5f:63:14:27:84:
         f8:0c:0b:ba:73:aa:cc:f3:f2:18:ae:8b:88:0f:31:da:0d:63:
         83:63:49:eb:89:2e:5e:a6:17:bd:e1:2c:4b:57:80:a3:07:fe:
         00:6e:5e:1c:12:8a:b8:be:77:20:50:66:af:56:26:6f:66:85:
         2d:a0:fe:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 02:14:33 2026 by rpki-client