What certificate will be slated to renew

I have a simple question. I have a treafik instance operating directly from the binary a small vm that acts as a proxy to internal webservers. It has several LE certifiactes issued. Some with http challenge, other with DNS (wildcards).

I want to know what certificates are selected to be renewed. Is it those in the acme.json certificat store (even with no router rule present), or only those matching a router rule ?