
Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
File: 3ctMnFuiLYifJQktxc7JJbqEO3g.cer (raw, json)
Hash identifier: 8U6XoomNe6Ajb1XRpSda3mPIqgkOx0kB3QrcgzHvKME=
Subject key identifier: DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 16A4
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:52:55 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 169.239.28.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5796 (0x16a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 00:52:55 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3668CFEAR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:43:80:e5:cc:31:dc:50:60:8e:5d:5b:ee:9d:
9c:b1:f8:94:54:2b:01:ba:dc:03:20:83:cd:9e:6b:
87:9e:69:83:a0:ef:ba:cf:81:51:98:c6:6c:58:00:
2c:a5:83:de:a1:d5:1a:30:cc:59:b8:81:d2:ba:69:
d1:cb:55:b9:37:16:2b:ce:45:94:36:f4:b5:18:0d:
e3:3a:24:b6:ff:c5:6f:c3:60:42:b2:c6:af:0f:47:
b6:8e:d6:e6:31:84:c3:94:21:24:68:dd:62:1a:e4:
d5:d4:3b:d5:9f:41:df:8a:e8:cd:29:50:3e:ba:43:
17:1d:ed:98:07:90:0c:67:14:d7:fc:30:42:ed:99:
cc:5a:ef:fd:f0:e1:a3:b1:b4:90:4e:02:e2:30:cb:
2c:46:3e:b3:62:b8:f3:7c:ba:1d:34:ff:c7:4e:99:
9b:8a:f4:ba:99:b3:de:0d:04:f0:0d:4f:14:5a:87:
52:cf:91:09:61:e0:b6:80:31:51:93:5d:c4:90:1d:
a9:4c:3f:27:5a:6d:92:97:e9:7d:26:d4:90:e3:df:
6f:0a:c8:0d:3c:c8:24:89:20:0a:9f:c0:c9:64:06:
f0:c5:22:dc:63:16:23:73:9c:07:51:1a:d3:0b:06:
99:c9:f8:b0:2e:76:c8:97:3b:6f:ae:1b:1e:02:f5:
5a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
sbgp-ipAddrBlock: critical
IPv4:
169.239.28.0/22
Signature Algorithm: sha256WithRSAEncryption
79:e2:80:8d:44:20:cc:71:a3:2c:b8:80:d4:a3:0f:02:ff:b2:
74:23:e1:e9:1e:fc:be:78:d4:1d:b8:9b:d6:93:f9:92:83:11:
04:ef:c7:86:77:59:34:1f:d3:5a:33:5d:e2:9a:3e:dd:f8:f7:
7c:82:89:58:ba:99:b8:f7:3e:6d:9c:34:f9:22:e9:b0:53:53:
fb:bd:b3:4a:a7:c9:ac:55:57:f1:9d:f9:8f:d6:c9:77:eb:40:
e2:ac:3b:0a:46:49:ae:a3:76:03:97:42:4f:a4:9f:2e:4a:d7:
7b:3a:ea:dd:ca:15:ff:60:6a:9e:5f:00:9c:df:31:f1:3a:1b:
a9:1f:59:ee:97:7a:9c:af:93:55:f6:d8:e0:e6:81:bb:61:1a:
c9:4b:5c:c4:e5:ab:39:3a:c7:94:20:81:ac:7c:d2:9d:0d:a7:
cb:0f:f7:1e:d9:e9:db:c9:de:86:b2:53:01:f7:9c:79:92:0d:
60:4b:af:f1:47:e4:e7:1e:fa:35:a2:2d:23:be:4b:d3:5e:26:
d5:c2:10:51:99:cb:bb:0f:6c:88:57:87:27:98:dc:d8:c5:2b:
1a:9c:3a:92:ea:31:e5:8b:21:f5:6a:8c:3a:22:63:5d:51:22:
39:de:bc:ca:f0:a3:ea:71:10:6c:a4:af:7c:a8:16:d1:f4:12:
ec:9f:74:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:36:47 2025 by rpki-client