This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.cer
File:                     D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.cer (raw, json)
Hash identifier:          vA1L+OUwx/9U1Onzzd3PJ0aG130m34CclHYmhEwou64=
Subject key identifier:   D1:FF:BC:86:B2:5B:48:77:36:23:5C:5C:A0:D6:DD:00:4C:0C:AA:6A
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       50CE5EC59D3BB2A9AC7DCF565BE4075C78B70647
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jan 2026 23:20:42 +0000
Certificate not after:    Wed 27 Jan 2027 23:25:42 +0000
Subordinate resources:    AS: 264765
                          IP: 45.181.128.0/22
                          IP: 168.196.224.0/22
                          IP: 2803:7160::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ce:5e:c5:9d:3b:b2:a9:ac:7d:cf:56:5b:e4:07:5c:78:b7:06:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 28 23:20:42 2026 GMT
            Not After : Jan 27 23:25:42 2027 GMT
        Subject: CN=D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a8:8a:45:c2:8a:45:17:58:9f:04:6e:f0:88:
                    f6:76:46:68:bb:6d:5f:0e:72:f3:36:40:12:93:3a:
                    5e:e6:70:6d:13:d6:0a:c5:82:5f:4d:ec:9b:c1:18:
                    3e:4c:89:3b:e9:8c:09:44:c0:8b:59:ec:2f:49:dd:
                    73:a2:c7:14:fc:11:1e:ac:76:0b:7a:94:ec:82:1c:
                    a0:06:62:db:d8:a0:33:5e:d9:55:cc:7a:cd:1c:8d:
                    f5:ac:81:36:c8:69:10:ef:b4:2f:34:a5:71:33:5a:
                    0c:10:c1:79:22:68:a9:a9:1d:8a:00:31:ce:fa:a5:
                    0a:ef:50:65:30:74:84:ab:82:69:10:8c:c9:3b:02:
                    80:f4:af:4a:5e:19:7b:b8:e7:2e:89:37:ba:1d:6b:
                    7d:4b:c6:f4:6f:6f:aa:33:77:d3:0d:30:6d:3d:4c:
                    49:da:75:60:1d:56:c9:26:68:ed:93:11:f5:15:a9:
                    37:4c:bb:49:78:e5:ea:f4:18:bc:20:65:8c:db:f0:
                    76:d0:3f:d7:90:6b:12:2a:5c:54:64:e5:cf:5c:e0:
                    24:f9:62:14:51:db:3a:2f:12:c7:aa:93:47:97:a5:
                    c8:99:2b:e7:0d:e9:ea:bf:13:9e:32:2b:48:17:53:
                    68:e7:d7:e6:eb:f4:85:04:f0:d3:3c:0a:28:9f:4f:
                    e1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D1:FF:BC:86:B2:5B:48:77:36:23:5C:5C:A0:D6:DD:00:4C:0C:AA:6A
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.128.0/22
                  168.196.224.0/22
                IPv6:
                  2803:7160::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264765

    Signature Algorithm: sha256WithRSAEncryption
         71:c0:07:da:57:d4:1a:4f:7c:0f:87:4d:2f:b4:98:94:3a:f0:
         66:71:aa:6a:01:ea:8c:be:ff:59:51:12:71:86:83:96:04:8d:
         c9:19:ec:5d:23:5f:46:0d:c1:42:2f:fb:30:4a:6e:f4:af:06:
         82:d9:4a:a0:ca:15:0b:92:39:89:03:46:3d:bc:f8:d9:d8:79:
         f6:4a:27:62:db:c2:aa:09:0a:46:89:39:23:0c:2a:5c:05:ae:
         1e:b3:62:20:c8:7d:1e:a4:3a:b2:68:70:a8:4b:e4:36:40:11:
         d9:44:50:38:ac:1d:f6:e0:9c:58:f0:0a:8e:6d:78:6c:32:44:
         6a:7e:db:e1:21:4c:c5:ca:ca:00:44:28:2d:84:3a:d6:81:40:
         c8:85:a2:cf:7c:c4:07:5d:c9:64:d8:e0:d4:d5:fa:9a:5e:13:
         31:89:c0:31:94:7d:9a:92:d1:5a:ad:3f:f7:a2:c2:5a:05:20:
         f0:df:23:a1:bd:28:1c:aa:4c:ab:39:03:16:c5:93:3a:d2:97:
         75:91:6b:60:b9:e9:57:1f:70:66:74:4c:b9:93:e6:29:b9:7b:
         d6:ca:01:f2:30:ed:37:0e:71:86:e8:ae:09:45:81:ed:5a:94:
         28:18:7a:3b:da:51:fb:43:bb:6f:c0:1c:f2:f8:2f:f7:3e:21:
         52:16:9b:63
-----BEGIN CERTIFICATE-----
MIIGqzCCBZOgAwIBAgIUUM5exZ07sqmsfc9WW+QHXHi3BkcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE
NjA1ODY3ODAeFw0yNjAxMjgyMzIwNDJaFw0yNzAxMjcyMzI1NDJaMDMxMTAvBgNV
BAMTKEQxRkZCQzg2QjI1QjQ4NzczNjIzNUM1Q0EwRDZERDAwNEMwQ0FBNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNqIpFwopFF1ifBG7wiPZ2Rmi7
bV8OcvM2QBKTOl7mcG0T1grFgl9N7JvBGD5MiTvpjAlEwItZ7C9J3XOixxT8ER6s
dgt6lOyCHKAGYtvYoDNe2VXMes0cjfWsgTbIaRDvtC80pXEzWgwQwXkiaKmpHYoA
Mc76pQrvUGUwdISrgmkQjMk7AoD0r0peGXu45y6JN7oda31LxvRvb6ozd9MNMG09
TEnadWAdVskmaO2TEfUVqTdMu0l45er0GLwgZYzb8HbQP9eQaxIqXFRk5c9c4CT5
YhRR2zovEseqk0eXpciZK+cN6eq/E54yK0gXU2jn1+br9IUE8NM8CiifT+E7AgMB
AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTR/7yGsltIdzYj
XFyg1t0ATAyqajAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy
NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzBBMkY0M0YzRkI1Njk0NEYzMUY4RTc0
ODkyNzY5QTBEMkNGQzJCMDA4MTBCQzBGRTBEN0U4NjE3OEY5OUJGMy8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy8zMEEyRjQzRjNGQjU2OTQ0RjMxRjhFNzQ4OTI3NjlBMEQyQ0ZDMkIwMDgx
MEJDMEZFMEQ3RTg2MTc4Rjk5QkYzLzAvRDFGRkJDODZCMjVCNDg3NzM2MjM1QzVD
QTBENkREMDA0QzBDQUE2QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLbWAAwQCqMTg
MA0EAgACMAcDBQAoA3FgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQKPTANBgkq
hkiG9w0BAQsFAAOCAQEAccAH2lfUGk98D4dNL7SYlDrwZnGqagHqjL7/WVEScYaD
lgSNyRnsXSNfRg3BQi/7MEpu9K8GgtlKoMoVC5I5iQNGPbz42dh59konYtvCqgkK
Rok5IwwqXAWuHrNiIMh9HqQ6smhwqEvkNkAR2URQOKwd9uCcWPAKjm14bDJEan7b
4SFMxcrKAEQoLYQ61oFAyIWiz3zEB13JZNjg1NX6ml4TMYnAMZR9mpLRWq0/96LC
WgUg8N8job0oHKpMqzkDFsWTOtKXdZFrYLnpVx9wZnRMuZPmKbl71soB8jDtNw5x
huiuCUWB7VqUKBh6O9pR+0O7b8Ac8vgv9z4hUhabYw==
-----END CERTIFICATE-----
Generated at Thu Jan 29 02:13:23 2026 by rpki-client