This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F166E23E4118700C69E87B40D8D7DD225C3DF563.cer
File:                     F166E23E4118700C69E87B40D8D7DD225C3DF563.cer (raw, json)
Hash identifier:          FxzPDz8A3idg4c6UdO++2PozKwtmRBdUn6b1AjAtgxU=
Subject key identifier:   F1:66:E2:3E:41:18:70:0C:69:E8:7B:40:D8:D7:DD:22:5C:3D:F5:63
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer:       /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial:       1AFBE5F0174C9C1A8AD9BDF366389918B9129ECF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8EBDD1DCB41F6076C7E6FEA3333A5FC30D391BAF76D71BEC58EEF5B6085A607C/0/F166E23E4118700C69E87B40D8D7DD225C3DF563.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8EBDD1DCB41F6076C7E6FEA3333A5FC30D391BAF76D71BEC58EEF5B6085A607C/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Jan 2026 17:50:50 +0000
Certificate not after:    Tue 26 Jan 2027 17:55:50 +0000
Subordinate resources:    AS: 265818
                          IP: 45.70.240.0/22
                          IP: 2803:a420::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:fb:e5:f0:17:4c:9c:1a:8a:d9:bd:f3:66:38:99:18:b9:12:9e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
        Validity
            Not Before: Jan 27 17:50:50 2026 GMT
            Not After : Jan 26 17:55:50 2027 GMT
        Subject: CN=F166E23E4118700C69E87B40D8D7DD225C3DF563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:84:61:ee:66:80:1e:85:92:78:ef:9f:93:42:
                    eb:ec:fc:31:51:ed:aa:af:b6:51:73:ad:e9:23:c2:
                    ee:5c:f8:58:c9:da:44:dd:14:cd:2a:b0:b5:15:21:
                    eb:55:a6:c2:00:9c:40:08:69:b1:a7:35:21:5a:a2:
                    9a:72:df:67:c7:3f:d4:60:64:83:43:15:8c:63:13:
                    75:db:a7:0d:96:b4:90:a6:a5:dc:69:67:c5:8a:41:
                    1d:44:47:2f:be:fb:6a:06:c7:c9:08:94:8b:ce:88:
                    54:fe:1e:15:ac:b9:38:60:2e:47:d3:f7:5f:49:9d:
                    1f:45:bf:d7:97:d0:36:fa:25:88:32:d8:c0:32:9e:
                    4d:62:e7:15:bc:b1:4d:c6:4a:4c:59:17:57:8b:37:
                    6b:54:b4:da:4e:82:54:83:51:7b:c6:fb:54:02:34:
                    18:e9:9a:04:9e:12:4d:e3:56:41:66:ee:d8:83:ab:
                    99:8b:71:5e:93:63:13:06:26:fc:00:91:59:79:85:
                    7f:22:75:83:e3:72:fb:43:94:38:94:1f:54:89:9d:
                    52:46:fc:5e:c5:d8:0e:1a:17:7a:c9:c4:cf:bc:56:
                    a3:80:54:11:8a:5e:77:af:13:c0:72:74:26:54:1c:
                    21:f1:19:34:64:8a:d0:90:1f:7c:7e:a8:06:38:8d:
                    40:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:66:E2:3E:41:18:70:0C:69:E8:7B:40:D8:D7:DD:22:5C:3D:F5:63
            X509v3 Authority Key Identifier:
                keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8EBDD1DCB41F6076C7E6FEA3333A5FC30D391BAF76D71BEC58EEF5B6085A607C/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8EBDD1DCB41F6076C7E6FEA3333A5FC30D391BAF76D71BEC58EEF5B6085A607C/0/F166E23E4118700C69E87B40D8D7DD225C3DF563.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.240.0/22
                IPv6:
                  2803:a420::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265818

    Signature Algorithm: sha256WithRSAEncryption
         1d:84:b9:ab:78:f2:eb:66:21:40:7a:dc:74:c4:5c:a5:41:85:
         00:4f:d4:c9:5d:d7:0c:81:0c:d4:96:81:af:4e:29:28:00:3c:
         0f:fc:8d:9f:18:e1:32:a6:ab:e7:16:68:d6:09:19:fd:40:dc:
         ae:35:8e:7b:40:c9:d2:a1:e8:b5:1c:5c:3e:6d:a4:52:ad:97:
         a6:5e:45:39:da:b5:79:7b:b2:b8:be:f2:d0:9b:aa:e0:17:e2:
         36:17:73:f7:1a:4b:6b:34:b6:e7:3e:71:fd:10:71:01:56:4f:
         46:12:97:8c:b7:ea:6b:cc:3c:6c:ad:8b:fe:76:f4:99:24:c8:
         07:f2:51:2c:77:33:b6:c5:4c:75:90:39:64:7c:3d:48:86:95:
         90:d5:f1:e2:0e:db:74:a7:fa:39:13:ed:b6:3b:10:4b:95:00:
         93:9c:07:2c:98:fb:75:a9:05:64:19:ea:45:74:a0:0a:f4:70:
         82:3f:3e:29:88:60:0a:d2:45:d8:28:97:24:94:5a:bb:eb:4b:
         67:ec:e5:24:ba:c0:97:2d:c0:67:5d:77:66:6d:70:c5:df:f4:
         c6:6b:bb:3a:4b:6a:22:e8:5b:7f:33:b8:11:f5:62:46:a6:98:
         b6:11:f5:2b:d4:d7:61:ad:c7:3a:98:00:09:28:64:e7:01:e9:
         80:23:80:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----