Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/5PfkpBui3-Gkmtw2NMzweTXpIRg.cer
File:                     5PfkpBui3-Gkmtw2NMzweTXpIRg.cer (raw, json)
Hash identifier:          zHNFcW6WI7NP6i4cQw8Wgotom9UELz05aBjgqyiZLqk=
Subject key identifier:   E4:F7:E4:A4:1B:A2:DF:E1:A4:9A:DC:36:34:CC:F0:79:35:E9:21:18
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       187B
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 22 Jul 2025 10:16:33 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 45.222.192.0/18
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6267 (0x187b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jul 22 10:16:33 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F368356FAR, serialNumber=E4F7E4A41BA2DFE1A49ADC3634CCF07935E92118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ca:20:5a:c3:67:d4:c6:b9:59:ee:7b:02:bc:
                    1d:b4:61:36:63:c9:0c:94:85:1b:fd:a2:fb:0b:5e:
                    8f:74:59:f9:56:77:f4:77:b1:88:5f:c9:d8:b7:ab:
                    ed:34:a2:db:fc:c7:d9:a7:36:69:7b:e4:fe:a3:51:
                    a4:e7:32:14:bc:4d:81:05:6f:5b:b0:9b:7f:74:de:
                    84:61:2e:e7:05:d1:79:84:71:16:96:00:6c:6f:e2:
                    e9:ab:aa:c4:73:8e:bb:7e:84:15:3e:37:56:54:42:
                    87:bd:95:3e:17:8e:ff:7b:e7:0b:ec:6c:c1:88:ed:
                    5d:06:a1:f6:ee:86:cd:59:52:30:66:02:53:ed:37:
                    fa:48:c9:4b:f7:9e:b8:6b:e1:24:a7:4a:6e:66:8d:
                    58:68:c5:01:e0:83:2b:3c:cd:da:5e:39:a0:b7:41:
                    e9:6a:15:85:10:2a:36:12:ca:ff:a5:86:33:c6:77:
                    b1:46:dd:dd:b1:61:54:aa:27:d5:e4:9f:0a:78:5b:
                    1b:5b:38:f2:93:95:2e:72:7b:67:f1:4f:5f:40:34:
                    f3:04:47:af:3f:74:b4:c2:52:8e:6f:8d:54:5d:60:
                    eb:04:6c:f4:d3:f9:d8:74:6b:a6:8f:ac:72:dc:b9:
                    81:f2:27:57:4f:e4:d7:d1:21:16:37:d4:4f:f5:64:
                    d8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F7:E4:A4:1B:A2:DF:E1:A4:9A:DC:36:34:CC:F0:79:35:E9:21:18
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.222.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         48:ba:d7:38:f9:84:4d:9b:28:0b:32:54:58:8d:7b:15:e2:a5:
         8c:e0:91:3e:3b:91:4f:46:2d:95:7a:09:f1:1c:f9:e0:03:e3:
         ac:d9:cc:b0:29:1b:e8:1e:19:3f:a0:68:ad:c9:26:cd:46:95:
         bb:57:02:72:f2:e7:45:86:bf:1d:79:e6:6d:c7:36:ca:12:f3:
         e5:64:3d:f7:06:9f:ed:cf:e8:fa:89:e5:9e:56:50:b5:e4:d8:
         37:da:17:c2:01:66:fd:9c:21:f3:76:8d:cc:ee:82:64:1a:91:
         40:8e:c8:26:0e:bd:65:5d:bf:85:fa:bf:8f:d9:cb:a9:5b:bd:
         99:da:e7:9f:12:60:17:64:4f:fb:52:c1:5c:c4:d2:2b:6f:de:
         07:b1:49:4e:87:d4:d2:d3:85:6e:f6:54:82:f2:b5:5b:80:d8:
         27:ca:47:9f:f2:e6:8f:e7:19:7e:e1:0a:55:01:b9:a8:e2:f9:
         d5:ea:65:ab:49:ab:91:ef:b6:bc:48:50:bf:10:5d:1e:34:ad:
         58:a9:8b:d7:ee:f8:d9:66:f9:97:1e:7e:17:f4:8d:14:89:e1:
         88:c9:29:06:f8:b6:cc:62:6f:02:09:30:1b:93:fe:cd:65:28:
         11:c0:c6:9d:81:b4:f7:8c:9a:78:93:f4:ee:c7:f5:5b:33:a1:
         3b:ee:12:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:09:06 2025 by rpki-client