Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
File: 9ghiikaC9VOASvOrLlihnDCordI.cer (raw, json)
Hash identifier: y+96h204AR3SruibGB47wARNS7k+JJF8GykNNmT+ieI=
Subject key identifier: F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 1662
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:40:01 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 45.221.96.0/19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5730 (0x1662)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 00:40:01 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3644574AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fd:a0:b4:87:f9:0f:14:a8:a0:99:5a:0e:69:
b5:bd:b3:9e:8a:54:6c:ae:69:e4:18:0a:14:4b:89:
a8:23:1c:d8:bc:58:55:5a:68:79:22:8a:b5:5e:48:
d2:90:57:93:47:46:97:69:b2:e5:11:e1:3d:41:60:
78:8b:f3:88:59:9f:f2:89:92:56:ec:49:9c:53:e4:
2a:52:77:23:9c:23:81:63:41:93:d5:91:53:11:16:
a8:2a:3c:27:d2:65:36:2f:74:d8:d7:71:ae:4d:f2:
62:a4:39:cf:ae:e1:5e:43:b4:66:7e:a8:c9:6d:f7:
fb:c3:95:18:d5:6e:03:40:71:3b:73:b9:cb:a6:60:
d9:27:4b:a6:f9:03:70:69:ea:ba:24:bc:60:dc:3b:
c4:47:72:7a:6d:3d:06:32:59:bb:70:32:3c:6f:a9:
e8:c0:5c:e2:af:02:dd:52:f0:65:ff:5d:8f:55:b7:
a2:30:62:3e:53:9b:e5:78:9a:d8:97:43:58:66:9d:
52:ba:88:f5:73:df:f8:33:e2:b6:1a:79:0a:67:44:
c9:1c:39:9e:fc:cc:ee:a7:3d:2a:44:54:f6:c9:e8:
94:c6:99:19:12:f6:97:7c:a1:35:b7:9f:2a:bd:c7:
ce:d3:81:1c:1c:f8:3d:04:9e:84:76:39:c4:05:a3:
66:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
sbgp-ipAddrBlock: critical
IPv4:
45.221.96.0/19
Signature Algorithm: sha256WithRSAEncryption
a5:54:15:29:cb:ed:fe:8a:bf:e0:ca:5e:78:ff:17:89:49:38:
82:73:ef:dc:36:3a:fc:50:eb:ce:2b:d8:72:d4:b4:ca:f0:a0:
e6:6e:61:36:aa:28:46:22:3d:1f:c9:fb:0e:6b:57:21:92:0c:
54:4e:ad:12:0a:d7:f2:36:d7:65:9b:2d:5f:d9:97:4d:77:65:
5c:66:fc:90:27:5f:0d:a4:05:01:64:92:e4:d1:ee:e7:24:7d:
cf:88:23:f7:f7:b8:3f:fa:ae:69:51:7d:cc:3a:17:47:01:d9:
91:04:ba:e4:82:86:79:f1:0e:9e:71:45:11:57:09:f2:dc:c2:
67:0b:93:31:3e:49:06:67:8d:f9:91:52:9d:f5:43:82:2f:e5:
04:e8:0e:90:a8:22:5e:bd:12:5e:f9:94:fc:13:4c:74:fa:35:
55:df:b3:b6:4d:a6:c0:73:01:ea:34:0a:46:cd:2c:fa:8f:d6:
5f:ea:e4:04:57:c0:17:14:a6:c5:84:70:1c:d7:23:f0:2e:22:
83:8f:c7:0f:f9:ab:e9:67:cc:8c:23:36:3e:e4:c1:e7:b9:25:
a2:e1:de:d0:f6:7e:0f:e8:44:a6:be:e9:f1:fd:d6:bd:a3:ab:
a2:71:12:be:42:72:cd:25:a2:52:f2:da:5a:e8:31:1c:91:31:
f7:9c:2d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:51 2025 by rpki-client