Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/566PwJz4B97TRj3bQgAVG6UKVZ8.cer
File: 566PwJz4B97TRj3bQgAVG6UKVZ8.cer (raw, json)
Hash identifier: W0VFJiIwDIGMyMmz11bNNwb8mHlMC0jqiYwjYlcs3JQ=
Subject key identifier: E7:AE:8F:C0:9C:F8:07:DE:D3:46:3D:DB:42:00:15:1B:A5:0A:55:9F
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 169C
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/2E98855883BE11EA9D53D930F8AEA228/566PwJz4B97TRj3bQgAVG6UKVZ8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/2E98855883BE11EA9D53D930F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:51:21 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 160.119.136.0/21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 14 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5788 (0x169c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 00:51:21 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3663CEEAR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:42:53:f5:8a:63:03:94:29:3a:84:28:c5:55:
30:e0:13:6b:fe:9a:43:f7:07:25:8c:f4:87:50:6e:
a1:93:9a:24:1a:17:9e:27:cb:44:6a:ce:02:3b:95:
0e:ff:0c:ce:bf:07:f3:f6:3d:7a:fe:f8:62:b3:b4:
e4:24:76:2b:db:51:22:77:0e:f2:ef:39:1f:38:9e:
5f:f9:b4:96:b1:2a:8e:8f:b1:ef:e0:62:1b:92:60:
80:a6:4c:c2:0e:7c:16:ac:4d:af:2e:82:ec:d3:d7:
38:67:39:75:fb:df:1c:37:1d:53:43:27:f5:6b:30:
f1:95:d0:d7:6e:f1:0c:71:5e:06:e0:04:3c:cc:7d:
ad:b3:df:fc:88:f0:9c:f2:37:aa:eb:e4:e4:76:71:
84:b4:d4:b9:45:48:7c:40:51:38:d5:49:21:4d:61:
53:c6:fa:dc:8a:6d:2d:27:c8:5e:26:86:f0:c3:a5:
8d:ff:ae:27:5f:f3:99:4a:95:03:6d:a2:2d:ca:23:
d2:43:a8:52:1e:b7:cf:ba:3a:a3:af:64:e2:77:a8:
12:e1:99:25:89:07:bc:8f:af:2b:87:e1:64:12:80:
ea:76:e8:5f:45:56:e8:29:07:94:43:6c:99:31:e6:
e5:6a:d9:c7:03:5a:9d:52:a7:84:15:a9:5b:3f:cc:
1a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AE:8F:C0:9C:F8:07:DE:D3:46:3D:DB:42:00:15:1B:A5:0A:55:9F
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/2E98855883BE11EA9D53D930F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/2E98855883BE11EA9D53D930F8AEA228/566PwJz4B97TRj3bQgAVG6UKVZ8.mft
sbgp-ipAddrBlock: critical
IPv4:
160.119.136.0/21
Signature Algorithm: sha256WithRSAEncryption
70:59:70:ee:0c:44:1f:f0:dc:93:69:94:51:e3:a8:de:af:01:
d2:30:4b:70:80:73:6f:a8:18:ea:41:3c:b6:80:36:e7:04:29:
ea:3f:10:d4:68:58:6a:c8:98:78:00:1b:ab:d7:a6:21:59:2e:
74:6e:ad:3e:94:f7:13:26:03:a4:69:2c:0e:09:60:cd:9b:d4:
b4:4f:9b:2b:15:48:cb:21:f3:63:2f:da:49:18:c1:f2:53:0e:
e4:bd:11:23:f2:ed:6f:0c:87:e3:9a:f0:17:01:b7:8a:76:72:
7f:51:24:2c:d0:9f:a3:fa:3a:36:95:4e:f9:15:c4:cc:88:d6:
d0:9c:68:ea:55:78:29:de:00:aa:53:b2:de:69:38:3c:f2:88:
d6:d8:19:2a:94:64:4f:00:95:7e:77:17:46:89:8e:d7:83:9a:
b1:7a:28:90:b2:f3:b2:46:d6:47:d0:58:4d:89:2d:f8:6f:3e:
7b:de:3f:53:71:c6:0b:31:71:bd:68:93:0d:7e:ec:32:85:ef:
f2:70:50:f3:57:44:5c:f8:01:57:5f:d0:e4:e7:bd:0d:cf:c9:
29:68:63:8f:26:ae:d6:ce:12:57:3a:73:ce:5c:59:3b:b6:6c:
d3:52:8d:c9:3d:0f:5b:1f:d5:91:a9:6a:3e:97:6a:3c:ed:96:
6a:62:e4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:35:12 2025 by rpki-client