Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer
File: QVvN73HfdO_cZVY4QJM9lPIraRM.cer (raw, json)
Hash identifier: YxMT3HiaTes6cqQBpeEMRiXj3reKCdREYs3vKfAn94k=
Subject key identifier: 41:5B:CD:EF:71:DF:74:EF:DC:65:56:38:40:93:3D:94:F2:2B:69:13
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 164A
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:35:20 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 45.222.64.0/19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 14 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5706 (0x164a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 00:35:20 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36374C9AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4d:41:9e:f6:c8:c5:19:68:bb:ba:71:e5:89:
cf:07:fb:a8:08:15:e2:0c:36:c7:75:cc:55:c0:72:
f3:c6:ec:5f:2c:20:b3:29:38:b6:ea:74:82:da:e6:
ac:92:85:b9:93:16:c8:81:5d:f2:d7:45:06:46:02:
07:16:59:33:19:5b:dd:98:91:aa:e0:cf:b3:e4:4e:
1f:ef:d7:0b:69:7c:2e:94:50:d5:0c:05:f9:93:77:
94:4d:8c:e4:c6:ec:4e:6f:91:22:55:a4:6c:d4:0c:
65:7b:45:4a:fc:8b:50:0d:cf:b7:4f:c0:8e:b2:ef:
0a:5a:20:ee:6c:c7:99:f6:84:32:b2:6f:ab:fd:57:
16:dd:31:02:22:a2:09:c6:88:73:90:52:a7:8c:69:
9d:08:41:45:f1:63:3b:ed:69:fd:55:9f:9c:4b:47:
69:83:d1:1a:45:11:a8:ac:7b:64:d7:be:86:86:8b:
2d:c7:09:f9:fa:d5:1e:6e:45:bc:1f:8b:f3:62:b9:
15:6d:d2:f3:60:9a:d6:e9:1b:98:99:e3:a9:88:ce:
c0:1f:e6:4a:b7:ce:da:89:6c:50:92:da:b9:05:0f:
e1:83:f1:45:69:90:22:9b:ce:03:86:61:10:24:a8:
c6:ae:a1:8d:24:a7:d5:86:1c:a0:87:35:62:b9:cd:
fc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5B:CD:EF:71:DF:74:EF:DC:65:56:38:40:93:3D:94:F2:2B:69:13
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
sbgp-ipAddrBlock: critical
IPv4:
45.222.64.0/19
Signature Algorithm: sha256WithRSAEncryption
ab:8c:92:7b:22:42:3f:c8:13:fb:c7:18:fe:53:1c:80:fa:c5:
46:93:5c:7b:1b:b3:32:b1:ad:ae:e3:1c:21:05:fb:2b:2a:a5:
bd:01:89:7d:d9:6c:ff:17:8c:5a:e2:25:eb:5b:bf:04:14:82:
99:ab:e4:24:df:29:f9:c4:b0:75:4a:0c:c7:81:c1:96:97:7f:
e1:94:80:f3:f5:8d:dc:61:4f:6d:72:88:d7:7d:b2:b9:c7:97:
f7:8b:9b:bf:f7:28:3f:aa:d0:3e:12:68:f9:49:a6:63:57:dd:
76:73:e8:dd:9e:04:a4:3c:ad:1d:5a:80:06:ff:c9:56:47:34:
26:cd:07:a0:ef:91:98:52:43:f3:b1:fc:ac:66:1c:32:cb:31:
d4:45:cf:5b:77:d7:04:31:ad:48:0a:d5:8e:47:65:a9:83:d1:
aa:1b:a1:c8:90:dd:39:09:fa:2d:f7:fd:10:18:6f:65:b1:87:
83:1f:aa:7a:f5:d2:f8:70:e5:62:85:39:6c:c4:fa:2d:c6:17:
58:05:66:72:9f:5f:dd:44:9c:4a:b1:1b:3b:4d:bf:cc:c2:70:
8f:d4:a8:f2:d4:4d:9a:6a:e5:01:c0:e6:5b:bd:ad:e4:2c:03:
0b:95:13:1f:55:74:08:1f:61:e1:d7:a3:43:13:aa:b8:80:9c:
dc:ef:eb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:28:07 2025 by rpki-client