Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer
File: 3e9RyKD_hVBdng5v-gInbCpVrug.cer (raw, json)
Hash identifier: 5dcgi/KtkOtbhWfqQAaN78nKahrLV2Ly7Vdb87IQB6w=
Subject key identifier: DD:EF:51:C8:A0:FF:85:50:5D:9E:0E:6F:FA:02:27:6C:2A:55:AE:E8
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 1789
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:37:36 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 169.239.12.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6025 (0x1789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 01:37:36 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36FBB68AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:2f:0a:2b:2b:ab:31:76:07:d1:45:35:a1:
33:05:20:f0:b4:7f:db:38:94:96:b7:03:22:6d:82:
05:04:2f:08:3f:3b:1f:d3:96:2c:f5:36:12:74:d3:
e8:46:03:c5:9b:f6:ee:5f:b9:f6:cf:a6:92:ca:51:
66:f7:15:d1:72:b9:bd:c7:0e:b2:95:e9:91:b9:05:
3d:fa:83:50:d4:0d:8e:8b:ec:51:dc:f2:74:b4:21:
9e:f4:68:80:af:38:12:83:2e:52:d2:91:03:1d:e0:
7b:e6:f0:cf:c2:d4:69:61:a4:ea:2e:3d:49:6d:fc:
79:6b:b0:96:c9:05:c9:4b:5f:f1:c8:55:e5:6e:14:
17:45:67:16:cd:fd:ff:d1:ae:66:50:6b:3b:1b:bb:
0e:ad:cf:af:57:5b:33:ec:c8:1f:3e:75:23:8d:70:
67:24:77:dc:e5:ce:f2:f9:13:5f:44:47:86:60:31:
5a:7d:c0:f1:55:9c:af:1a:1a:1d:f7:47:f1:0c:6d:
f6:1b:23:d7:fc:f5:36:b6:0d:99:35:be:1d:ae:63:
1b:e4:f1:d9:f7:7a:d0:d7:f2:ca:5c:ac:a7:ee:aa:
dd:1e:df:17:b2:f3:19:af:0f:63:25:85:56:b7:53:
26:d3:d7:9a:79:13:c3:bf:20:30:b8:2e:98:ce:60:
eb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EF:51:C8:A0:FF:85:50:5D:9E:0E:6F:FA:02:27:6C:2A:55:AE:E8
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
sbgp-ipAddrBlock: critical
IPv4:
169.239.12.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:4d:2f:3e:98:20:1a:54:30:96:91:d2:70:d0:a7:b8:5f:17:
3c:df:d9:fe:d6:f7:3d:cd:c6:a0:33:d3:ac:f8:6e:23:7b:b2:
ca:09:46:63:d3:1d:ab:fe:45:26:e8:00:39:8c:3a:b1:b5:f8:
85:bc:24:91:8a:7d:03:ea:3e:1b:39:b1:e6:f8:7f:f8:48:c9:
d5:86:d8:f4:33:85:33:65:ea:fa:d9:62:a7:de:d9:f5:e3:44:
58:b6:de:71:2d:7b:b3:a6:6c:fb:ac:0d:01:a2:87:77:55:92:
0a:e8:03:b5:8c:9b:22:e2:f2:e6:6f:f1:8a:6d:42:47:40:c1:
5f:bf:d4:19:db:e5:25:44:11:57:7a:02:38:e9:5b:a7:dd:0c:
f2:3c:30:c0:dc:29:58:3a:ae:36:0c:d8:16:cd:96:56:08:e9:
fc:19:d2:0c:00:65:0f:c1:9e:c3:b5:7d:e3:3c:6d:f9:b9:a4:
95:25:f0:b8:e8:12:15:9c:e8:7d:eb:c1:9b:fa:f3:a2:0e:e5:
70:48:82:2d:2b:0b:13:7d:23:01:a8:0c:98:79:dd:01:18:27:
f2:38:75:c9:31:e6:9d:19:4e:8d:2d:95:0d:b9:dd:94:8b:3e:
4c:cd:50:52:91:d6:4a:48:48:04:ee:f0:a7:98:62:f1:9b:83:
b2:c6:0d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:07:14 2025 by rpki-client