This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2949913DC6C3E739C74D8B456424411BD4668DD8.cer
File:                     2949913DC6C3E739C74D8B456424411BD4668DD8.cer (raw, json)
Hash identifier:          uxUZsV1AZBHoEoyflv/hx6LUFuEIwQ8OizDuSkMYWSk=
Subject key identifier:   29:49:91:3D:C6:C3:E7:39:C7:4D:8B:45:64:24:41:1B:D4:66:8D:D8
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       6E6C8A70CE04CF36F80020EDC7AAAF473A7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/2949913DC6C3E739C74D8B456424411BD4668DD8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 19 Jan 2026 23:09:50 +0000
Certificate not after:    Mon 18 Jan 2027 23:14:50 +0000
Subordinate resources:    IP: 161.22.64.0/18
                          IP: 2803:1680::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:6c:8a:70:ce:04:cf:36:f8:00:20:ed:c7:aa:af:47:3a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Jan 19 23:09:50 2026 GMT
            Not After : Jan 18 23:14:50 2027 GMT
        Subject: CN=2949913DC6C3E739C74D8B456424411BD4668DD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:50:dc:5b:9d:64:7f:d2:dd:b1:61:42:55:7d:
                    8f:b4:1a:dd:14:85:0c:03:51:0c:f7:08:dd:42:4a:
                    91:c6:f3:60:07:e9:4a:75:ef:94:a6:8d:38:ea:0f:
                    12:a2:63:e7:ed:6d:ef:7e:70:33:f5:0d:ca:36:fd:
                    66:d7:ea:55:52:75:ed:18:cf:d6:c5:75:58:9b:ec:
                    4a:bc:45:1a:b3:4e:49:fd:8a:81:f7:18:7c:8b:17:
                    6f:c4:86:9c:55:c3:f9:66:61:0c:78:a3:d5:a7:46:
                    68:2e:33:fc:cb:b6:57:fd:3f:0e:44:ce:bd:67:5c:
                    98:d5:0d:cb:72:79:0d:81:4d:25:26:78:7a:c6:8f:
                    db:04:9d:ea:a6:1d:df:18:df:2b:ef:14:72:c5:1e:
                    09:ba:40:e5:61:14:2c:88:1a:66:f5:a5:1c:09:d1:
                    71:0c:9c:21:99:80:d3:e7:b0:ea:90:90:05:e3:24:
                    42:17:8e:d7:16:a7:0c:03:b2:fe:34:5a:1f:22:48:
                    77:68:25:d0:6d:b0:e7:d9:9b:ae:31:6f:9c:6e:56:
                    c0:cf:a2:c5:a9:b6:e1:c5:7a:76:6c:c9:e9:70:63:
                    6b:0c:ea:af:59:0d:05:f7:ff:90:bd:c9:64:f3:7c:
                    bd:94:9c:7a:8a:91:22:7d:8b:71:aa:b8:a7:d0:5c:
                    f7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:49:91:3D:C6:C3:E7:39:C7:4D:8B:45:64:24:41:1B:D4:66:8D:D8
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/2949913DC6C3E739C74D8B456424411BD4668DD8.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.64.0/18
                IPv6:
                  2803:1680::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:39:86:46:3d:6b:01:d2:aa:b2:12:e5:df:90:67:5d:5a:52:
         3b:b3:11:e3:ea:f1:19:34:34:f7:1f:15:d2:09:bb:5d:50:99:
         92:39:63:3f:f4:dc:44:7d:b9:24:94:be:0e:57:46:df:3d:44:
         bd:0b:59:2e:24:d9:00:47:1e:df:cd:73:77:80:be:93:57:df:
         44:a8:06:f5:8e:bc:95:13:36:e3:1c:dd:de:6c:53:fa:04:12:
         50:64:55:ec:de:17:7f:99:9c:c6:16:26:35:fe:ed:3e:b2:95:
         5c:38:1c:ba:09:11:c2:a8:73:7b:79:e7:c0:48:e2:3a:4f:9e:
         cc:3c:83:3d:eb:c3:07:6c:ba:62:46:29:da:5b:7c:e7:c2:00:
         ea:0b:35:b9:d3:fd:5a:e1:3b:44:cc:00:47:79:7f:3e:35:37:
         10:6e:bb:76:55:15:78:bc:b0:76:98:c8:f7:73:c7:c9:b9:a6:
         8e:ed:ba:95:5f:a8:21:e7:b9:58:20:56:3f:80:15:3d:30:b3:
         24:7f:c1:dd:8b:40:69:65:94:93:4d:d5:d3:1c:d3:e8:a5:47:
         71:2e:26:1d:a0:b8:42:27:a3:bf:a5:15:0e:a1:9b:84:bd:aa:
         b7:6c:89:30:a1:6d:24:25:b7:af:0c:3a:f9:93:34:04:f3:e8:
         85:5d:eb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----