Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/DvkmEDvQsHzkfClwcAqgSp3WCVo.cer
File:                     DvkmEDvQsHzkfClwcAqgSp3WCVo.cer (raw, json)
Hash identifier:          Et2+ReWIr3+Rnj+Elm55bWYarcUdHxfsGALTYqhyF/o=
Subject key identifier:   0E:F9:26:10:3B:D0:B0:7C:E4:7C:29:70:70:0A:A0:4A:9D:D6:09:5A
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1B40
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36424BF/78129E3E3A6611F18F50121ECF1D38B0/DvkmEDvQsHzkfClwcAqgSp3WCVo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36424BF/78129E3E3A6611F18F50121ECF1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 17 Apr 2026 14:05:28 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 192.145.168.0/21
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 07 May 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6976 (0x1b40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Apr 17 14:05:28 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36424BFAR, serialNumber=0EF926103BD0B07CE47C2970700AA04A9DD6095A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:56:e0:b9:f8:61:e5:e1:a7:2a:7b:9c:95:8f:
                    f8:e6:f5:99:c5:94:f4:40:15:d0:7b:c5:89:5e:83:
                    1e:70:05:b2:df:92:44:5c:b9:d4:03:6f:49:68:49:
                    73:fc:ba:b2:6e:6b:4d:aa:98:10:a1:4e:31:e1:22:
                    ae:3f:b9:e6:38:c6:a7:47:ea:6f:bc:0c:60:c1:af:
                    97:f3:97:ac:a4:da:a5:e2:f0:68:85:d5:d2:5d:f6:
                    4d:7a:00:20:48:97:4c:c9:ac:80:8b:54:d0:b8:8e:
                    6e:cc:e3:dc:2a:3a:00:77:3e:5c:50:ac:4d:d0:ec:
                    69:01:fd:91:0b:59:f2:44:c5:d4:60:f2:41:1f:93:
                    4f:6c:eb:51:f1:34:b2:0a:b3:ee:ad:bd:a0:b8:4e:
                    0c:43:2e:f7:26:c9:e5:e8:d2:24:a8:cc:c8:b1:22:
                    2f:8e:2a:04:b1:84:1f:bc:2c:26:63:10:0e:f9:bd:
                    a2:2b:ae:0e:ce:39:02:ac:d1:f4:8f:11:d2:ad:aa:
                    53:a1:75:f6:cc:f9:fb:d4:2e:4b:77:86:64:46:8d:
                    63:33:6c:1d:77:90:25:f0:83:94:5d:60:00:04:42:
                    b6:e5:eb:72:b0:8f:d5:40:8b:db:ae:e1:a0:3a:e8:
                    38:a2:ea:bd:45:33:c1:71:f4:5a:3e:0b:01:fe:40:
                    a0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F9:26:10:3B:D0:B0:7C:E4:7C:29:70:70:0A:A0:4A:9D:D6:09:5A
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36424BF/78129E3E3A6611F18F50121ECF1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36424BF/78129E3E3A6611F18F50121ECF1D38B0/DvkmEDvQsHzkfClwcAqgSp3WCVo.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:82:19:5c:de:08:4e:d9:f5:17:39:9b:9d:b6:05:aa:3e:73:
         2f:0e:28:2d:bb:b9:15:2c:e9:6f:c7:85:27:4b:e2:52:ea:a9:
         ea:67:1b:97:bd:1f:36:ff:8e:fc:f6:f7:a9:9d:dc:ca:6b:e0:
         a0:55:e5:3d:f0:e6:c1:eb:86:27:eb:96:be:d3:26:68:92:38:
         f3:57:fd:95:14:17:37:dc:60:40:b4:10:1a:2c:19:09:26:f1:
         df:ec:21:ba:b1:3b:60:bb:1f:28:fe:5d:0a:2f:fb:95:e4:38:
         b5:bb:5b:a5:88:2f:09:c0:16:e0:e3:52:47:5c:45:dd:1d:d4:
         a5:3f:b0:64:9d:1f:71:a6:2b:71:ae:cb:00:d2:16:66:02:46:
         b7:1a:71:b1:31:c2:e9:af:6a:7f:b5:3a:00:36:80:af:06:f1:
         b6:dd:b4:ae:67:f0:eb:16:3b:31:f5:4a:55:d1:59:0c:68:f5:
         79:15:66:3c:df:1f:ca:0b:6b:82:62:e2:21:1b:23:a4:cd:1c:
         46:20:74:95:fe:fb:5c:70:78:af:20:6d:48:0f:f6:a9:43:33:
         79:38:77:fe:5b:52:f5:25:b6:c1:11:1c:56:00:bb:23:c3:dd:
         87:49:60:b9:7d:fb:e0:71:62:8f:cf:97:1b:80:0f:81:65:31:
         f1:dd:4b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 21:18:46 2026 by rpki-client