Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
File: 5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer (raw, json)
Hash identifier: +7029CNVjf9XXUOGJY1Et4hL4+bOhkdYIf/M0apIc38=
Subject key identifier: E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 1725
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:17:43 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 169.159.224.0/19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 14 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5925 (0x1725)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 01:17:43 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36AA888AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:16:61:2b:3a:32:d7:ac:4d:f2:8c:1c:91:b4:
00:cc:5e:97:d6:3e:9a:88:8c:0e:d8:e3:02:56:69:
fd:f5:52:2d:fa:42:1f:7b:e0:95:9c:60:cb:0c:6e:
4a:02:89:65:12:94:a3:c2:95:8a:c8:64:ee:4a:7d:
5c:ea:7f:c0:18:7b:a4:dc:28:1d:5d:e9:11:9e:a6:
52:85:9a:9b:bc:c6:99:97:da:94:a9:2f:cc:d8:bd:
d2:41:8d:cb:50:44:ef:58:af:d4:2a:96:7a:b3:fa:
ce:56:33:d0:64:69:c6:d7:48:a8:15:b8:e2:2d:e5:
44:a9:b5:85:7c:c6:46:06:d6:7f:19:a0:88:60:88:
51:24:84:d6:33:d9:a7:b7:09:a8:4d:cc:6a:48:d2:
c8:6a:6d:b7:d0:ca:62:94:d0:9e:d5:b8:37:84:43:
d9:5a:b0:53:b4:f1:a5:82:31:21:df:36:3b:a5:4e:
7b:04:53:f5:f3:14:af:dd:b7:03:0c:4e:c6:59:81:
34:06:99:25:03:47:63:64:98:9f:ed:11:02:bd:58:
69:4c:f6:12:1e:94:8b:b9:c7:e1:5b:20:97:4f:45:
4a:92:7b:fd:57:84:fb:6c:78:ee:06:df:24:36:14:
9b:23:26:b3:bd:e5:0d:ad:18:12:d6:42:7a:76:21:
0c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
sbgp-ipAddrBlock: critical
IPv4:
169.159.224.0/19
Signature Algorithm: sha256WithRSAEncryption
7e:a6:f9:18:ca:9d:95:8e:1f:7e:f7:2c:c7:59:bd:40:c4:2c:
9e:62:26:fe:4f:6f:ec:f5:b2:ca:f0:74:35:d0:ed:70:d0:69:
90:f1:58:c1:1a:6d:1f:aa:f5:45:c7:9e:28:12:ac:e5:03:d2:
c4:f9:f3:f2:ba:e9:45:6d:90:16:c8:8f:7f:b5:b3:62:e6:8c:
ca:93:47:3b:91:c3:a2:55:a5:3c:79:70:e7:b9:9d:90:11:af:
78:60:b4:0e:64:82:db:3d:aa:a5:5b:3a:8c:85:fe:6b:11:98:
58:30:75:4f:50:76:de:4e:c1:75:cc:ce:32:2e:a9:e6:34:69:
fa:f6:ec:df:bf:28:e2:dc:0a:c2:39:f5:47:29:9f:73:ed:6c:
56:1d:47:66:09:55:e6:b6:a3:8e:c1:46:58:a3:fc:4d:ce:1b:
38:b1:6b:ff:6d:25:db:1d:74:eb:09:9b:38:5f:c1:43:dc:45:
4f:a5:74:0f:a8:dd:bb:ce:ed:05:87:ad:ca:ed:e9:15:d3:06:
56:34:87:34:04:b9:4a:1b:af:d7:0f:28:9c:58:df:07:75:6e:
7c:88:29:e0:2b:e2:89:c6:9f:98:bf:83:6e:09:0b:28:4d:63:
26:fe:41:a8:c2:e5:24:e8:88:14:76:7b:02:6f:f8:b5:f9:9f:
f8:7c:54:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:40:17 2025 by rpki-client