This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.cer
File:                     402D616A95846FF1E7CE80C99CDB443F6B8B9107.cer (raw, json)
Hash identifier:          4ySsgl/efT0g/dbURTlrylNinEJKEB69CuDhv0JJNfc=
Subject key identifier:   40:2D:61:6A:95:84:6F:F1:E7:CE:80:C9:9C:DB:44:3F:6B:8B:91:07
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       27FD32FFBDE0928C3FD5445B4EDB0E9C774DB912
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jan 2026 07:35:54 +0000
Certificate not after:    Tue 19 Jan 2027 07:40:54 +0000
Subordinate resources:    AS: 265695
                          IP: 45.5.8.0/22
                          IP: 2803:9c0::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Jan 2026 02:59:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:fd:32:ff:bd:e0:92:8c:3f:d5:44:5b:4e:db:0e:9c:77:4d:b9:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Jan 20 07:35:54 2026 GMT
            Not After : Jan 19 07:40:54 2027 GMT
        Subject: CN=402D616A95846FF1E7CE80C99CDB443F6B8B9107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:69:e6:d7:ed:2f:11:2d:69:45:81:b7:c4:95:
                    a4:56:75:61:5f:0c:83:d1:21:3b:07:a9:c5:1e:6f:
                    68:68:b0:72:66:b2:13:b1:ae:30:63:1c:ed:80:16:
                    d1:bd:91:df:b5:b1:22:96:39:59:65:f2:21:5d:21:
                    24:f0:86:ce:7c:a3:d6:ae:44:73:8d:ff:1f:b3:31:
                    dd:f9:16:23:50:70:b8:ac:b2:b6:fa:f8:ae:33:ce:
                    e0:eb:7d:d0:84:36:0d:d1:a3:f1:51:4a:a2:08:3f:
                    eb:d8:fa:70:71:f8:f5:1d:2d:91:72:37:9b:31:ea:
                    00:9c:7a:09:60:0b:38:9d:28:40:15:2c:86:06:81:
                    3a:46:a3:b7:4f:b2:f6:f9:51:90:c3:9c:d0:5a:9c:
                    36:7d:b2:92:a9:ce:1d:b0:e7:d6:45:26:1e:8b:80:
                    57:d9:b1:f6:1d:19:1d:11:c7:d3:cc:85:0f:63:80:
                    14:ad:0d:d2:d5:1d:3a:f2:01:88:58:18:ca:38:8d:
                    66:68:a8:d7:4b:2b:c3:a7:5b:09:5d:cb:d2:a6:f5:
                    27:d1:1e:2a:1e:01:b9:06:49:83:40:97:cd:04:5a:
                    8b:5e:25:a6:3c:09:26:18:00:16:6c:ce:c6:91:f5:
                    53:60:67:ad:73:48:65:38:c0:2f:c0:4c:11:31:c3:
                    a0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:2D:61:6A:95:84:6F:F1:E7:CE:80:C9:9C:DB:44:3F:6B:8B:91:07
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/11E6857B655846489B75F9B6F43F3E1DB7AE0D50839633E7274C8C14258F83CD/0/402D616A95846FF1E7CE80C99CDB443F6B8B9107.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.8.0/22
                IPv6:
                  2803:9c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265695

    Signature Algorithm: sha256WithRSAEncryption
         83:06:b6:0c:4b:da:be:fa:10:43:58:78:8b:8c:0f:91:15:c7:
         46:ab:0b:71:bb:b9:ef:2b:24:59:60:49:54:f3:95:b3:93:9a:
         a0:0d:2d:8b:ec:0e:3d:28:21:20:86:29:d4:fc:19:50:de:ea:
         d9:02:2c:af:11:62:65:88:9f:85:6c:24:90:54:bc:60:e9:9f:
         33:17:ce:d1:93:3f:94:ee:2b:aa:04:bc:94:2c:0d:18:ed:c6:
         6d:06:d4:ee:9a:0e:38:9a:48:93:3b:a4:85:59:26:d3:98:62:
         57:fe:53:88:16:5e:8b:e1:42:7c:a2:60:a1:4d:e2:8a:63:0b:
         41:70:bc:eb:6e:94:2c:97:b0:17:f9:90:91:6d:05:a1:a5:3c:
         57:35:60:9a:eb:31:d6:9d:5d:65:b7:9a:22:81:47:b0:cf:f0:
         00:1c:00:66:0d:2e:26:b9:d2:8d:12:c2:71:99:bb:62:3f:93:
         f2:a8:d7:6a:9c:24:13:4e:95:4e:bb:86:17:8a:8c:9e:0f:24:
         c9:6d:dc:59:3c:e9:83:96:97:56:f2:a9:02:86:8d:d0:5a:e6:
         dd:85:b6:51:7b:8f:9b:ab:87:99:d4:77:39:64:88:0f:4c:b8:
         e6:d6:77:83:fc:1a:fb:0c:70:3b:23:fa:4c:39:0c:a3:69:04:
         ec:5f:4c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----