
Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer
File: GDcf6QPvCG9cH_b2hAumd2cmdnA.cer (raw, json)
Hash identifier: d06zuB1pT3xGwDOfEtHx0EJ31iABgRxDOH2bmNVxGzE=
Subject key identifier: 18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 1680
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:45:52 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 168.253.80.0/20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 11 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5760 (0x1680)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 00:45:52 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3655EE4AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:e0:b8:60:ab:89:ae:fc:f4:0d:0f:ef:fc:
29:ed:c0:31:89:a2:94:c0:bc:1b:d2:39:39:13:33:
30:c7:33:d1:2b:3e:cb:50:1d:e9:a7:4b:46:50:b2:
34:c0:e7:00:66:ed:16:8e:68:cb:1d:02:07:82:b4:
5f:30:b3:6b:95:37:4b:6b:98:b6:fe:71:13:2a:c9:
ec:b9:bb:35:f0:5e:08:39:0d:26:c2:24:53:a8:99:
65:65:b5:0a:41:85:9e:4a:b7:60:39:f6:eb:e1:d3:
9f:31:9d:e5:22:60:fe:86:f4:81:2d:88:75:7c:f3:
73:eb:ff:1c:dd:17:73:fa:1a:54:d8:c3:37:9f:36:
40:ea:92:1c:21:c7:4c:69:2d:1e:71:08:bd:18:b9:
18:f8:15:d7:cb:f0:8b:dd:f0:b8:21:dd:13:fa:58:
60:0c:e0:c9:a2:f8:8e:45:ef:ad:cf:59:49:5e:3e:
da:43:7b:3f:ac:fb:53:f9:ce:83:03:97:5b:0d:e4:
ef:f6:2c:0b:5d:a7:a1:9b:97:38:8e:40:18:da:b5:
a0:97:ea:6a:56:8f:66:95:e7:4c:d3:d2:f4:50:60:
85:52:ce:8c:57:6c:ee:28:a1:20:c8:9d:02:bc:10:
17:3d:24:fc:46:3f:29:5d:f5:0b:ee:fd:2e:b9:ef:
1f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
sbgp-ipAddrBlock: critical
IPv4:
168.253.80.0/20
Signature Algorithm: sha256WithRSAEncryption
55:16:b8:d6:16:0b:c6:20:bf:4f:3b:5f:35:a0:b8:52:34:5a:
11:e2:fa:03:70:8b:99:d2:93:a1:02:3b:ee:a3:4b:c8:3d:03:
e6:fc:a7:63:e5:17:6c:e5:00:22:fb:9e:61:30:ce:16:23:57:
28:f5:47:ae:6c:fc:8c:12:29:76:f7:bd:7a:c8:06:85:c5:9c:
e3:3a:62:6d:9c:ee:f4:3f:45:bb:5d:54:6e:9c:0a:47:98:7e:
8a:e5:8b:36:44:4f:c1:6f:08:a3:0f:da:3f:f4:f5:e0:65:e9:
67:33:58:c0:ff:ae:00:11:69:59:0f:5f:96:47:bf:20:a6:8c:
50:64:f6:98:47:4f:39:74:dd:70:7a:f2:bf:72:90:99:5b:cd:
ad:ff:7e:f9:e0:2b:9e:5e:c4:f4:9f:45:2b:92:73:e0:62:a5:
b2:64:02:ae:83:eb:24:44:96:65:41:bf:3f:bf:51:f1:84:e0:
1d:87:b3:84:5c:e6:6c:76:a3:b5:8f:ef:e2:af:ec:5e:c4:46:
a0:84:c5:2f:c4:b3:5e:f1:6d:7c:b7:37:4f:3c:d8:d7:35:66:
6b:c4:99:7c:4b:bb:f3:71:2c:87:f2:81:d6:79:fb:13:15:18:
8c:d1:ef:c2:d6:fb:d2:b8:02:b5:79:1a:5a:36:15:74:01:a0:
d2:29:94:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:35 2025 by rpki-client