This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E840769E201D72D7EA098EEE7538061FBEA58116.cer
File:                     E840769E201D72D7EA098EEE7538061FBEA58116.cer (raw, json)
Hash identifier:          8Q4wh41IU3CXp/k+VtpeNKBn5dohQIYjmObdukM9C5w=
Subject key identifier:   E8:40:76:9E:20:1D:72:D7:EA:09:8E:EE:75:38:06:1F:BE:A5:81:16
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       5AA49F9E79383091D1950CF7435F8B9AC28D478C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/E840769E201D72D7EA098EEE7538061FBEA58116.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Jan 2026 20:29:35 +0000
Certificate not after:    Tue 26 Jan 2027 20:34:35 +0000
Subordinate resources:    AS: 52250
                          IP: 166.114.0.0/20
                          IP: 200.9.165.0 -- 200.9.168.255
                          IP: 2001:1378::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Feb 2026 19:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a4:9f:9e:79:38:30:91:d1:95:0c:f7:43:5f:8b:9a:c2:8d:47:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 27 20:29:35 2026 GMT
            Not After : Jan 26 20:34:35 2027 GMT
        Subject: CN=E840769E201D72D7EA098EEE7538061FBEA58116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:05:fd:f4:f4:68:57:07:6f:b1:77:5d:cd:51:
                    3a:4d:b8:fa:5d:f9:83:1a:ae:63:e2:97:e4:1e:a4:
                    e5:91:1a:35:20:d6:08:95:fe:ef:e7:52:c4:3a:dc:
                    2c:14:e9:d9:19:34:a6:19:f8:ff:a6:0d:0d:aa:2f:
                    d8:cc:d8:40:be:95:68:12:74:05:e8:8a:b7:29:cd:
                    0f:27:30:b2:8b:fe:65:f7:7a:32:a9:63:5a:5a:f1:
                    69:de:96:f7:f1:98:8b:0c:d5:9c:6b:4c:f8:e8:33:
                    b4:b5:57:2a:28:ab:d0:e9:6c:8a:4c:7c:a2:22:20:
                    77:a6:bc:80:1e:2c:2f:b4:7e:4f:a1:d1:9f:4f:f4:
                    b0:35:36:9e:92:ad:2a:81:3b:a4:0a:5b:7f:ab:55:
                    d8:66:bf:3d:97:64:54:39:70:e6:a9:80:06:88:f0:
                    ce:10:0f:81:bc:37:45:7f:56:dc:65:10:29:65:a9:
                    ca:ad:6b:07:fb:db:44:05:2b:bb:7a:dd:6a:54:b2:
                    1f:99:5b:3b:8b:8b:22:d7:62:49:e8:c9:c9:54:16:
                    0d:1b:49:b5:28:68:5f:a0:3e:fb:db:be:84:07:1e:
                    1e:1d:10:2d:6a:b5:ad:12:83:96:d7:5e:ad:fb:58:
                    f0:21:59:fe:c9:9f:f5:61:27:31:9b:04:7b:be:7a:
                    cc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E8:40:76:9E:20:1D:72:D7:EA:09:8E:EE:75:38:06:1F:BE:A5:81:16
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/E840769E201D72D7EA098EEE7538061FBEA58116.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.114.0.0/20
                  200.9.165.0-200.9.168.255
                IPv6:
                  2001:1378::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52250

    Signature Algorithm: sha256WithRSAEncryption
         4c:e3:c4:fe:13:e0:c6:67:25:e3:b2:72:72:4d:0c:5c:3e:a8:
         9e:c4:23:fa:a3:cd:52:bd:7b:fb:f2:08:f6:62:14:4f:42:ce:
         69:ef:c8:40:4b:57:05:be:b5:13:19:fa:f6:89:45:c3:5c:47:
         95:ff:e8:3f:ed:ec:53:6b:be:3a:4e:b1:60:3d:b3:8b:7a:54:
         f8:ac:c2:e3:a9:59:5d:5a:20:10:0c:a1:03:7f:6a:2e:2f:ed:
         33:3d:79:68:fc:5f:75:88:91:98:69:3c:bd:34:7b:73:e7:1a:
         35:aa:d2:8f:d0:85:2c:b7:2f:6f:e3:fd:9f:c0:62:5b:03:aa:
         fe:14:35:15:7d:90:2b:21:f3:ea:17:b1:bd:45:92:86:1e:78:
         22:4e:f3:c0:fe:b0:da:37:3e:1e:6f:47:1a:f8:fd:4c:20:23:
         02:63:8b:9f:dc:78:38:2e:4a:4d:e5:7a:9e:f8:05:79:f3:dd:
         b1:22:8a:f2:b2:2b:f1:03:49:3f:63:47:55:e5:7a:9d:d9:8c:
         82:5d:99:46:e0:57:92:98:3f:54:54:21:a8:ad:6b:16:b6:c3:
         ef:bd:41:fd:f4:32:e9:85:c7:81:a2:2e:d2:3b:14:9f:5d:1c:
         6e:a2:40:e3:11:02:4a:06:ac:83:d3:eb:6a:84:48:5e:34:6e:
         54:d3:18:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 07:18:48 2026 by rpki-client