Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/WIdwDF8kkPVYQ4L55-dSatZVSLM.cer
File: WIdwDF8kkPVYQ4L55-dSatZVSLM.cer (raw, json)
Hash identifier: KXwX5VHydx2RsuMiwgQYxSKWMQI/jRNs3lR/B7k7ZdE=
Subject key identifier: 58:87:70:0C:5F:24:90:F5:58:43:82:F9:E7:E7:52:6A:D6:55:48:B3
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 1628
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:28:41 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 45.221.216.0/21
IP: 164.160.176.0/21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 14 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5672 (0x1628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 00:28:41 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3620ACFAR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:70:b8:05:9b:5e:01:9d:f8:d2:99:bb:77:e5:
04:10:dd:b8:d3:eb:8d:87:b9:33:42:0d:67:03:5f:
ea:14:95:d0:92:f1:34:96:0c:54:ae:5a:ad:35:8e:
83:79:39:b6:85:54:bc:27:0c:48:d4:e1:80:45:9b:
79:67:2b:be:3a:54:cb:9f:b4:b5:59:03:4b:81:c3:
7e:eb:b4:fe:60:f9:1e:e0:2b:c5:7a:1c:d4:d5:fa:
12:04:ce:39:2d:29:68:28:a6:bc:8f:e4:0a:c0:18:
14:9f:71:10:df:2c:0e:c9:7d:98:89:76:96:24:e0:
cf:33:0e:92:19:d7:d7:85:c9:1e:8e:73:ff:bb:98:
00:81:83:4b:95:27:75:5a:93:40:15:80:37:fb:06:
f9:a1:77:6d:29:f5:b3:51:4e:57:41:a2:fc:42:77:
5f:49:94:ce:c4:2f:3b:7e:de:dc:43:35:7b:24:f8:
73:99:ec:9a:36:38:a0:38:17:5b:93:55:90:78:5e:
4b:d1:2b:80:ce:fc:6c:50:f1:7c:61:c0:9c:57:e4:
71:8e:98:bc:c3:49:9b:a1:1b:3b:b8:29:bf:14:56:
7b:57:00:7b:61:9b:2d:94:1f:15:b0:7f:81:24:03:
d1:6d:62:2a:90:65:1e:1e:a0:9a:8c:c2:bb:6d:eb:
9d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:87:70:0C:5F:24:90:F5:58:43:82:F9:E7:E7:52:6A:D6:55:48:B3
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.mft
sbgp-ipAddrBlock: critical
IPv4:
45.221.216.0/21
164.160.176.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:29:77:c3:fc:89:3d:68:e9:7a:a2:46:61:58:23:72:18:a8:
c9:48:b2:84:dd:69:e8:c6:93:43:f7:f8:e6:52:eb:a9:8b:58:
9e:43:29:8a:5a:db:1c:2f:c6:33:a4:ab:be:ad:49:aa:c6:75:
19:3c:66:44:cf:73:e9:0e:62:39:09:0c:e1:25:29:f6:b9:1c:
1e:39:2c:27:73:a2:8a:b8:13:c3:30:de:80:eb:ec:e1:f1:76:
0d:f5:b1:1d:ce:f1:e6:15:e2:84:fc:fe:15:92:68:1c:4d:a9:
41:ea:4f:a9:90:8b:d1:1e:0a:b7:88:49:c3:f5:1d:a8:80:35:
95:f7:14:4b:1d:0a:25:fc:74:59:91:36:37:2d:34:b8:07:41:
a9:66:7f:d6:3c:ec:d3:54:ca:cb:a4:02:22:dc:41:e7:5b:18:
d3:30:6e:4e:33:d2:b4:72:cc:ac:b9:2e:a7:9d:26:e3:2b:0d:
26:a1:5a:ae:55:5e:7c:13:3c:f2:42:be:da:f4:66:05:1a:d2:
7b:75:8f:b4:7c:88:94:e1:f9:48:17:da:d5:b3:99:f3:9c:50:
94:51:d4:c9:ab:56:d7:57:5b:8a:a6:a2:76:41:d3:bb:63:9b:
39:89:f4:32:9c:58:e8:e5:35:3a:5d:4c:d6:13:56:ca:5f:5d:
04:a9:f4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:03:35 2025 by rpki-client