Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/arin/htscudi9_Ntk5yx843BiWWXoPT0.cer
File:                     htscudi9_Ntk5yx843BiWWXoPT0.cer (raw, json)
Hash identifier:          kg8Cp5uaCpizPOoqeZYrOvrgoAEhXdnl7TzQScbnaVk=
Subject key identifier:   86:DB:1C:B9:D8:BD:FC:DB:64:E7:2C:7C:E3:70:62:59:65:E8:3D:3D
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1C1C
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3664D8D/DC9E287ACD6211F196C5CF07CF1D38B0/htscudi9_Ntk5yx843BiWWXoPT0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3664D8D/DC9E287ACD6211F196C5CF07CF1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 21 Oct 2026 15:19:59 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 45.221.208.0/22
                          IP: 169.239.84.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Nov 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7196 (0x1c1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Oct 21 15:19:59 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3664D8DAR, serialNumber=86DB1CB9D8BDFCDB64E72C7CE370625965E83D3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d8:b0:36:bb:ab:c8:b1:30:1e:df:14:79:ba:
                    d8:25:16:20:7e:4d:09:53:70:fa:b4:e6:26:87:c5:
                    8c:8c:21:f2:95:d4:ac:56:6f:dd:8c:00:af:36:1f:
                    c2:0c:7f:7b:2d:da:4a:6b:80:f0:49:85:0b:34:80:
                    49:1a:28:85:2d:dd:db:07:5d:79:f4:50:99:ba:49:
                    84:98:93:3b:d7:3b:5a:4e:29:3e:c5:13:35:b6:18:
                    09:f6:80:c9:e7:d2:52:1f:80:59:38:31:51:e7:d2:
                    5a:0d:9f:73:90:75:e9:33:29:96:6c:8a:f8:ca:8a:
                    d8:18:9f:a0:c2:21:49:dc:58:bb:74:52:87:01:c3:
                    92:8d:8f:bd:5d:a7:c3:55:c6:54:0d:e5:0f:fa:4e:
                    42:5c:ae:80:0e:ea:37:0c:4c:1b:85:d3:f0:40:7c:
                    c3:1d:bf:64:78:a9:dd:bb:b2:67:19:5c:8c:b0:19:
                    35:0e:cd:47:83:08:9e:12:08:77:6d:97:38:ff:0c:
                    d7:cb:a9:2c:2e:fe:47:dc:e1:bf:36:10:05:ba:f7:
                    48:df:58:1c:d9:60:39:63:93:94:ef:57:ff:93:e9:
                    d6:d9:f5:61:87:ee:bf:d6:e8:d0:92:54:d4:4a:8f:
                    95:be:13:fe:63:4b:6a:c4:e5:64:fb:c7:75:ed:e4:
                    d3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DB:1C:B9:D8:BD:FC:DB:64:E7:2C:7C:E3:70:62:59:65:E8:3D:3D
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664D8D/DC9E287ACD6211F196C5CF07CF1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664D8D/DC9E287ACD6211F196C5CF07CF1D38B0/htscudi9_Ntk5yx843BiWWXoPT0.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.208.0/22
                  169.239.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:3f:23:36:e6:e2:a0:3e:c9:0a:d9:df:47:13:2e:1b:ff:48:
         d0:c6:fe:84:23:b0:59:1d:d1:d1:38:7d:96:5f:40:01:f0:b4:
         b3:03:8a:aa:fa:b4:41:aa:43:55:3b:94:39:d8:3c:44:1a:55:
         08:68:24:fc:1c:cc:f4:78:09:49:da:a1:2b:15:d0:a0:45:c7:
         e1:e5:8f:12:fc:68:36:e0:a7:31:e9:58:d1:0e:2e:7b:e5:41:
         d6:27:89:9e:78:70:73:78:82:20:b3:81:ce:6e:da:e5:e1:33:
         d2:c0:f5:1f:e8:98:ea:61:70:21:af:1a:92:6c:77:d0:27:71:
         e0:e4:d8:64:8a:f3:c7:67:f7:1e:1e:3c:02:74:e6:8b:76:ff:
         98:05:16:16:18:88:bc:47:56:97:23:d5:ce:1d:13:82:ae:10:
         8f:b9:f7:f7:d4:68:23:92:47:7c:c6:20:a8:03:47:0b:3c:3f:
         cd:13:b1:c6:88:02:76:14:a7:33:09:9a:69:fb:be:2b:77:a2:
         43:ee:7e:32:e0:3e:9e:cb:f0:08:d1:42:96:10:b9:10:82:64:
         c3:f5:90:e7:fe:39:5d:2c:3e:f4:23:b1:65:09:42:40:f1:f1:
         0d:e1:0a:08:f3:ec:b7:c9:d5:95:c2:a7:34:93:f0:74:64:1e:
         13:5b:47:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:04:24 2026 by rpki-client