This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C50C0142533E0F182F6D25231B18914021FD89CA.cer
File:                     C50C0142533E0F182F6D25231B18914021FD89CA.cer (raw, json)
Hash identifier:          shRkO4/mM1dHl3jr2CiJF9WhPJfxlwOFWEVbYk+p29w=
Subject key identifier:   C5:0C:01:42:53:3E:0F:18:2F:6D:25:23:1B:18:91:40:21:FD:89:CA
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       661135B2A9ECC53EBE99493D616893858DC7BF7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/CE2347F4ED160C0B8976D59CBD52587212F0B728600E90E3890532DD6E08024F/0/C50C0142533E0F182F6D25231B18914021FD89CA.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/CE2347F4ED160C0B8976D59CBD52587212F0B728600E90E3890532DD6E08024F/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Jan 2026 20:14:34 +0000
Certificate not after:    Tue 26 Jan 2027 20:19:34 +0000
Subordinate resources:    AS: 264614
                          IP: 200.9.169.0/24
                          IP: 2801:1f:e000::/48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:11:35:b2:a9:ec:c5:3e:be:99:49:3d:61:68:93:85:8d:c7:bf:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 27 20:14:34 2026 GMT
            Not After : Jan 26 20:19:34 2027 GMT
        Subject: CN=C50C0142533E0F182F6D25231B18914021FD89CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:47:5a:76:94:80:eb:e5:1d:2c:b9:d9:65:50:
                    ea:2a:8e:c1:e8:5c:ec:d9:8f:f4:71:f5:b2:f2:c5:
                    6f:3b:79:4d:88:5a:80:6a:eb:0d:8a:91:a0:f5:ee:
                    13:de:ac:59:25:42:d2:af:53:1c:25:46:56:cd:26:
                    90:d1:37:52:4e:04:34:7f:48:a5:bd:6a:6b:6d:1f:
                    69:b6:dd:e3:1e:43:fd:6e:87:e9:f0:a9:e7:7f:d2:
                    81:37:80:62:1e:e4:69:e6:9c:59:01:65:6e:c9:ad:
                    e2:ce:72:86:10:1d:97:69:52:e1:bb:95:72:55:81:
                    91:a2:af:47:7d:3c:13:10:1c:56:9b:95:b4:70:c4:
                    9c:77:bc:e2:fa:fe:56:de:25:b8:5d:28:7d:28:1e:
                    96:06:d3:93:98:6d:db:f4:a8:e9:51:95:a3:ce:5a:
                    e4:84:24:36:dc:d6:31:bd:ab:7f:ee:10:f4:f3:60:
                    e7:9b:c7:5d:ec:a3:b4:2a:c0:8d:7a:54:c8:45:46:
                    49:aa:d3:18:b3:66:d1:04:b8:e0:45:a4:b3:92:b8:
                    26:96:b2:3c:64:cf:76:71:e7:71:92:ec:38:40:17:
                    ab:f3:d2:d7:b4:66:60:1d:6d:4e:7e:af:ec:cd:f2:
                    89:3e:ec:38:27:8c:87:c0:a6:5f:25:de:14:b0:e2:
                    46:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C5:0C:01:42:53:3E:0F:18:2F:6D:25:23:1B:18:91:40:21:FD:89:CA
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/CE2347F4ED160C0B8976D59CBD52587212F0B728600E90E3890532DD6E08024F/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/CE2347F4ED160C0B8976D59CBD52587212F0B728600E90E3890532DD6E08024F/0/C50C0142533E0F182F6D25231B18914021FD89CA.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.169.0/24
                IPv6:
                  2801:1f:e000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264614

    Signature Algorithm: sha256WithRSAEncryption
         37:f9:61:79:f7:f7:47:4e:78:0b:97:7a:e3:6b:b6:8c:91:6c:
         08:99:59:49:15:d8:45:59:e1:0c:f8:29:3c:40:00:4e:1d:d6:
         53:d7:84:05:bd:c9:67:71:f4:14:bc:bd:78:67:68:9f:65:0c:
         9a:e0:50:20:c4:c4:5f:d1:b2:17:33:5b:7c:3f:7f:a7:af:86:
         13:8c:4a:1b:74:68:88:17:a2:66:e1:4f:a9:c7:57:17:62:6f:
         dc:25:50:1b:a9:93:53:c3:c8:8f:ee:63:1f:14:70:a0:3a:cd:
         f8:5e:29:15:f7:c1:b0:81:2f:ff:9d:fe:6d:35:bd:26:10:42:
         e2:63:e3:ed:ee:88:2f:42:ff:78:bc:ec:6e:7a:4f:00:03:3e:
         ee:d5:fd:69:78:34:09:45:39:52:8d:37:9d:ba:6a:d9:6a:0d:
         c8:fe:b1:76:c5:82:1d:08:9d:58:2a:4c:cd:c0:7f:6b:d0:80:
         85:1e:5b:39:72:b4:d1:81:df:f5:d6:ed:0f:60:c0:a2:9f:9b:
         90:f1:cc:14:91:82:d7:5e:31:5c:76:fe:d2:6f:3e:55:15:26:
         2f:72:f8:f6:b7:c1:e5:b4:25:a3:c1:1b:5c:c7:29:e5:99:2f:
         d5:ba:07:2c:ba:14:62:12:3e:d5:d4:1f:0d:ff:58:bd:ac:6f:
         25:57:cf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----