Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/arin/0f6CoLZPGCIMUQXHlp_6VeKZKlY.cer
File:                     0f6CoLZPGCIMUQXHlp_6VeKZKlY.cer (raw, json)
Hash identifier:          Y5XOwtcGTP4YlLhy+754C5p9QJNIcVrW2qmNhnEwWV8=
Subject key identifier:   D1:FE:82:A0:B6:4F:18:22:0C:51:05:C7:96:9F:FA:55:E2:99:2A:56
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1C07
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FB4CD/E052A112C17D11F1AA791ADFCE1D38B0/0f6CoLZPGCIMUQXHlp_6VeKZKlY.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FB4CD/E052A112C17D11F1AA791ADFCE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 06 Oct 2026 12:03:08 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 160.77.0.0/16
                          IP: 160.89.0.0 -- 160.90.255.255
                          IP: 160.105.0.0/16
                          IP: 160.160.0.0 -- 160.179.255.255
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Nov 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7175 (0x1c07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Oct  6 12:03:08 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36FB4CDAR, serialNumber=D1FE82A0B64F18220C5105C7969FFA55E2992A56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c8:52:2d:9e:14:5f:9f:5e:e3:e2:72:1c:31:
                    ec:1a:d2:3e:16:ca:42:70:39:86:26:3f:6e:c8:fd:
                    f9:ab:35:d1:3e:c6:63:11:61:8e:bc:0d:a0:e4:d9:
                    eb:cd:d3:cb:d7:8e:c6:8f:49:02:c3:43:26:44:bb:
                    2f:2b:e0:85:8c:30:03:18:30:c9:72:23:e9:6c:b1:
                    8f:27:b0:e6:01:a3:bf:4e:19:77:41:d3:b5:4d:3b:
                    19:65:4e:8f:86:56:c1:9b:b5:6c:d9:bf:f2:c3:d9:
                    1f:d2:0d:8b:bc:59:e4:0a:e5:5a:e1:ad:b5:93:af:
                    83:fd:48:75:19:5f:0f:20:44:0f:cd:42:c1:05:a5:
                    33:ad:f4:45:cb:71:82:5c:33:cb:4e:88:69:d0:fc:
                    ce:97:0c:ce:9f:62:2a:29:2b:6b:18:38:63:88:27:
                    56:fc:50:01:5b:e9:bd:f9:ce:ab:7e:8a:d8:14:ea:
                    47:19:f3:eb:23:70:c7:2d:42:38:d8:ed:ef:01:a3:
                    c4:ea:f6:44:14:b7:22:d0:b1:58:5f:fd:43:03:23:
                    90:58:c4:d0:13:60:5d:37:60:7c:e6:ec:47:a8:7b:
                    fb:90:df:56:58:3b:55:b1:a6:e2:d1:97:bd:88:5a:
                    55:f5:e4:52:55:d3:c6:68:b9:79:d2:a9:f9:c0:d7:
                    ca:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FE:82:A0:B6:4F:18:22:0C:51:05:C7:96:9F:FA:55:E2:99:2A:56
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB4CD/E052A112C17D11F1AA791ADFCE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB4CD/E052A112C17D11F1AA791ADFCE1D38B0/0f6CoLZPGCIMUQXHlp_6VeKZKlY.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.77.0.0/16
                  160.89.0.0-160.90.255.255
                  160.105.0.0/16
                  160.160.0.0-160.179.255.255

    Signature Algorithm: sha256WithRSAEncryption
         5c:ad:4d:13:59:35:7b:28:8c:25:20:e4:75:1a:19:00:a0:1c:
         4d:6c:76:e6:c6:fd:60:8f:2e:22:a0:a4:19:5d:5c:63:11:e9:
         4a:28:d5:03:14:60:7f:c1:21:1a:46:dd:66:52:43:62:b7:92:
         91:f7:c7:7d:9e:a5:9f:09:62:b0:9b:4a:ef:ba:64:4f:3b:14:
         ff:bc:85:46:83:3e:fb:40:04:08:42:90:69:cd:02:60:bb:55:
         9d:d4:da:8c:a3:c4:12:df:6e:73:75:8e:d6:01:39:f9:17:97:
         2b:1a:ad:e9:d6:23:4f:d9:d6:50:1b:35:38:32:c3:44:72:aa:
         a9:ad:10:dc:91:1e:54:2b:32:95:83:5b:bd:08:ae:c6:cf:e7:
         e8:65:f0:03:2b:f4:ae:15:b8:ec:85:d2:b5:16:13:2b:b3:75:
         e7:99:b5:72:79:61:8e:07:f9:63:1c:84:a7:02:1d:db:29:f9:
         8c:e0:29:a6:7e:64:66:6f:38:31:10:73:bc:b1:e8:c3:b8:b2:
         75:9b:78:53:bd:f8:ce:7e:39:f6:b4:53:57:ce:8a:46:45:06:
         cb:6b:32:c9:6a:da:56:51:f1:e1:d5:85:0a:ba:e4:67:12:04:
         09:df:63:9c:4d:fe:38:eb:74:9b:66:0d:2e:4e:6f:0a:3a:a5:
         b1:82:7a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:52:53 2026 by rpki-client