This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA705297B785897429C516E21EF896E811F0F219.cer
File:                     DA705297B785897429C516E21EF896E811F0F219.cer (raw, json)
Hash identifier:          BTQqnZpGV+c4iUMZT9notgnEebfQmpDsaVOOpuVkdoQ=
Subject key identifier:   DA:70:52:97:B7:85:89:74:29:C5:16:E2:1E:F8:96:E8:11:F0:F2:19
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       6D16830093711D49FE6F0E944F8E9DE3769BAA1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/DA705297B785897429C516E21EF896E811F0F219.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 30 Jan 2026 06:38:35 +0000
Certificate not after:    Fri 29 Jan 2027 06:43:35 +0000
Subordinate resources:    AS: 271795
                          IP: 123.200.232.0/21
                          IP: 123.200.248.0/21
                          IP: 190.12.148.0/22
                          IP: 2803:a010::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Feb 2026 02:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:16:83:00:93:71:1d:49:fe:6f:0e:94:4f:8e:9d:e3:76:9b:aa:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 30 06:38:35 2026 GMT
            Not After : Jan 29 06:43:35 2027 GMT
        Subject: CN=DA705297B785897429C516E21EF896E811F0F219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:aa:33:a4:02:9d:f9:07:69:53:a7:55:ba:c1:
                    6a:fe:25:a9:dd:6c:75:af:56:b5:6a:df:c0:bf:de:
                    9b:c4:6b:f4:5e:ec:66:10:10:73:eb:77:8c:1e:c1:
                    4a:20:6e:13:c7:7b:c6:bd:4f:10:86:42:d6:2c:dd:
                    d1:2d:df:7e:ce:4e:d9:0c:89:0d:de:ca:a4:68:4f:
                    02:34:36:d1:ad:68:1e:a6:7f:21:ce:ef:c8:98:ea:
                    ab:34:83:a5:0b:51:91:eb:75:57:e6:1c:6c:36:c4:
                    92:26:32:68:66:8e:95:76:27:31:ca:08:a3:6a:d2:
                    b6:7f:71:f5:98:69:69:61:0a:48:ed:65:e7:8f:fa:
                    24:de:0f:6f:4f:0a:02:50:f7:0f:3e:c0:85:d8:1b:
                    d3:7d:68:6a:12:e7:f9:da:ed:57:c9:ec:c8:64:46:
                    ab:f7:cc:fd:0c:37:ac:55:80:63:a5:f4:96:b0:2f:
                    70:ba:4a:60:ed:73:cf:c4:f2:eb:90:d0:dc:f5:d8:
                    54:a6:8e:06:f4:d4:b8:39:e5:6e:80:a0:f6:bb:cb:
                    0c:26:e3:cd:91:ad:92:a8:84:7b:70:d2:95:d1:08:
                    50:97:20:b4:a3:ac:07:c9:09:47:2e:a2:3b:e8:26:
                    13:1c:e2:b1:33:08:0d:6e:2c:9c:28:6d:92:b2:12:
                    84:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:70:52:97:B7:85:89:74:29:C5:16:E2:1E:F8:96:E8:11:F0:F2:19
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/DA705297B785897429C516E21EF896E811F0F219.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.200.232.0/21
                  123.200.248.0/21
                  190.12.148.0/22
                IPv6:
                  2803:a010::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271795

    Signature Algorithm: sha256WithRSAEncryption
         50:8f:87:58:3e:ad:86:e5:f1:a1:f4:ac:b2:15:20:02:5e:ee:
         d3:2e:ef:4e:84:4c:44:19:2b:c3:d8:30:df:c9:15:95:20:db:
         2e:31:70:9e:23:34:a8:fa:e6:c3:cf:79:49:92:f2:9b:7a:91:
         2f:94:49:fc:a7:06:82:d8:c2:64:36:b0:16:f3:9e:d0:f3:b4:
         d1:ab:b0:bf:0f:b8:58:47:25:52:32:29:41:29:67:ff:1e:6e:
         d2:eb:f2:65:cc:59:f7:ed:83:8b:a1:17:ba:32:0d:24:33:d7:
         11:39:e4:dd:52:2c:1e:7f:f2:fd:0f:d3:60:a8:a0:8e:d0:d8:
         67:2d:78:de:01:cb:72:db:e2:71:df:a5:e9:4a:6e:82:81:30:
         17:f5:9c:dd:4b:39:3f:f8:af:f3:0e:d4:bd:76:e6:16:84:e2:
         76:38:03:82:aa:33:25:de:49:18:43:b5:be:b1:a5:01:40:89:
         8f:58:57:9b:48:fb:de:17:e3:41:d3:5a:db:93:14:7d:1b:43:
         9c:b7:2b:7b:fd:17:c7:d9:20:18:23:86:25:fc:df:39:ce:72:
         ac:2b:5f:46:11:c4:1e:19:cb:9e:33:32:ec:91:8e:61:ef:49:
         4e:ce:2d:55:37:b2:50:87:68:02:4a:ce:ff:11:99:ac:af:92:
         a1:c6:f8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----