Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/2eVaqLw0ZL9JPYZgcu8wvEaGGqg.cer
File: 2eVaqLw0ZL9JPYZgcu8wvEaGGqg.cer (raw, json)
Hash identifier: usM5nr9XZWhzI2CYFJWsq57Qy+I7ktYyRn6wgvOncwo=
Subject key identifier: D9:E5:5A:A8:BC:34:64:BF:49:3D:86:60:72:EF:30:BC:46:86:1A:A8
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 163A
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/A5EBEFE4BB6B11EEA0811C57775412E6/2eVaqLw0ZL9JPYZgcu8wvEaGGqg.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/A5EBEFE4BB6B11EEA0811C57775412E6/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:32:14 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 169.239.116.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5690 (0x163a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 00:32:14 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F362B5C8AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:44:5a:b2:5f:7d:83:75:ef:6a:bd:11:80:2d:
75:d5:93:73:12:bd:64:d0:de:78:e4:c9:95:1e:0c:
8a:4a:a8:01:71:37:e9:82:ea:30:3d:c9:21:89:01:
7e:fb:69:d1:5d:5f:12:c7:41:23:d0:96:25:7c:fd:
84:a1:f9:ab:64:c9:49:ec:8d:97:9a:67:fd:57:51:
e8:91:2c:ca:e3:29:9a:36:8c:23:37:af:0d:ac:48:
94:51:f7:bb:af:4b:89:4e:c3:26:c8:2f:c7:6d:7a:
6e:69:50:6a:3d:99:2e:7e:24:8f:28:57:b2:8d:ca:
ef:46:3f:91:8b:d2:9d:53:9e:16:cb:8b:73:e6:33:
49:f2:6f:0b:c4:87:85:88:4c:2c:f7:a2:21:2d:31:
27:90:f2:80:a3:07:38:41:8e:e5:1b:b6:14:50:18:
7f:f0:0a:25:64:b3:86:f1:88:80:65:75:37:e0:a4:
b4:eb:62:17:41:dc:2e:ad:cc:8d:85:45:82:f8:a6:
b2:b1:97:f4:4e:af:a0:09:3c:86:fd:12:2f:df:4b:
82:e3:da:51:43:3a:66:83:02:86:24:50:99:a0:73:
fc:76:d8:14:61:4e:77:11:1e:1a:00:89:61:8c:46:
1b:00:1f:28:14:37:9e:ed:c3:a2:92:be:e3:2d:32:
82:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E5:5A:A8:BC:34:64:BF:49:3D:86:60:72:EF:30:BC:46:86:1A:A8
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/A5EBEFE4BB6B11EEA0811C57775412E6/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5C8/A5EBEFE4BB6B11EEA0811C57775412E6/2eVaqLw0ZL9JPYZgcu8wvEaGGqg.mft
sbgp-ipAddrBlock: critical
IPv4:
169.239.116.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:68:e0:e6:b4:6d:86:0e:75:b6:5d:55:1d:3f:73:b7:d6:09:
c1:95:a4:91:da:e4:55:e0:5e:2e:6c:96:20:9c:7e:ec:2b:60:
96:2a:ba:00:4f:08:3c:52:57:11:e9:b4:f2:54:ce:d3:55:55:
55:9f:14:36:39:23:4f:6f:e2:d8:7c:0d:7a:d4:d4:3a:c4:69:
7b:cd:5c:e8:ff:2f:91:fa:92:42:16:ec:d0:c7:ab:a4:6a:13:
d2:c8:75:ae:01:e6:23:a3:f5:da:af:50:93:e1:d7:3e:a0:67:
22:c4:79:e5:35:a0:c2:6e:67:04:13:7c:fc:f6:2f:5a:f5:b1:
db:eb:65:6b:00:2f:30:8e:6d:6c:13:bf:ea:c2:29:a6:ca:da:
2e:30:bd:67:1a:7e:83:f1:be:31:32:f0:c7:b7:9f:e9:c3:29:
fc:c4:9b:ca:91:27:b4:bd:f1:77:b9:f8:39:6d:13:57:52:88:
86:a8:64:da:dc:31:28:a8:15:c9:80:d5:ba:38:b4:de:5e:ac:
60:3d:34:0b:d8:f7:35:c9:15:ac:19:8a:3c:5c:03:e7:f0:a3:
40:f8:04:e5:9d:01:06:50:54:4e:fa:66:80:a4:14:a2:0c:b9:
5b:32:ea:ca:55:c8:3c:b2:1e:c6:64:80:35:af:47:13:93:a9:
39:48:f4:67
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICFjowDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNTAxMDEwMDMyMTRaFw0yNjAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjJCNUM4QVIxMTAvBgNVBAUTKEQ5RTU1QUE4QkMzNDY0QkY0
OTNEODY2MDcyRUYzMEJDNDY4NjFBQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCxRFqyX32Dde9qvRGALXXVk3MSvWTQ3njkyZUeDIpKqAFxN+mC6jA9
ySGJAX77adFdXxLHQSPQliV8/YSh+atkyUnsjZeaZ/1XUeiRLMrjKZo2jCM3rw2s
SJRR97uvS4lOwybIL8dtem5pUGo9mS5+JI8oV7KNyu9GP5GL0p1TnhbLi3PmM0ny
bwvEh4WITCz3oiEtMSeQ8oCjBzhBjuUbthRQGH/wCiVks4bxiIBldTfgpLTrYhdB
3C6tzI2FRYL4prKxl/ROr6AJPIb9Ei/fS4Lj2lFDOmaDAoYkUJmgc/x22BRhTncR
HhoAiWGMRhsAHygUN57tw6KSvuMtMoJXAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
2eVaqLw0ZL9JPYZgcu8wvEaGGqgwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjJCNUM4L0E1RUJF
RkU0QkI2QjExRUVBMDgxMUM1Nzc3NTQxMkU2LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzYyQjVDOC9BNUVCRUZFNEJCNkIxMUVFQTA4MTFDNTc3NzU0MTJF
Ni8yZVZhcUx3MFpMOUpQWVpnY3U4d3ZFYUdHcWcubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCqe90MA0GCSqGSIb3DQEBCwUAA4IBAQCjaODmtG2GDnW2
XVUdP3O31gnBlaSR2uRV4F4ubJYgnH7sK2CWKroATwg8UlcR6bTyVM7TVVVVnxQ2
OSNPb+LYfA161NQ6xGl7zVzo/y+R+pJCFuzQx6ukahPSyHWuAeYjo/Xar1CT4dc+
oGcixHnlNaDCbmcEE3z89i9a9bHb62VrAC8wjm1sE7/qwimmytouML1nGn6D8b4x
MvDHt5/pwyn8xJvKkSe0vfF3ufg5bRNXUoiGqGTa3DEoqBXJgNW6OLTeXqxgPTQL
2Pc1yRWsGYo8XAPn8KNA+ATlnQEGUFRO+maApBSiDLlbMurKVcg8sh7GZIA1r0cT
k6k5SPRn
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:34:58 2025 by rpki-client