Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.cer
File: WY2gHeTpzVR0rQpoJmJb5rgI8Ks.cer (raw, json)
Hash identifier: Crq/GuHzZaPGx8WCcFY7ImzuWygZkV+YI+mTm4+F/n8=
Subject key identifier: 59:8D:A0:1D:E4:E9:CD:54:74:AD:0A:68:26:62:5B:E6:B8:08:F0:AB
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 16CF
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:01:16 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 169.255.112.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5839 (0x16cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 01:01:16 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F367D68CAR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:f8:db:1c:be:02:9e:a4:6e:c8:42:f1:b3:
a0:3c:b7:4a:7b:ba:aa:65:8f:dd:4b:f4:ff:80:83:
d2:f0:08:5c:72:65:e1:0f:68:21:62:8e:c9:70:fa:
a5:cc:99:7e:51:f2:b2:1e:2b:f6:df:ec:b0:05:31:
52:27:ee:55:b2:de:5e:67:8b:bb:86:b0:a8:42:f8:
8b:26:f8:20:5f:22:8d:1c:da:72:06:32:ec:4c:15:
38:de:29:e0:af:50:a9:60:1d:14:26:08:e6:3e:d2:
21:c4:98:36:35:2d:bb:5b:c4:e5:d2:d3:2a:9f:34:
4a:f4:21:ce:b4:d0:4e:26:94:1f:93:8a:ac:ea:ec:
49:4f:83:4c:8e:f9:b0:01:d4:4a:6c:11:4c:17:8f:
ef:3e:70:d3:0a:63:c4:55:a1:26:e5:50:d5:9b:7f:
72:fb:70:41:87:75:eb:97:cf:41:d7:16:26:b9:2c:
84:13:b9:1d:7a:c1:ab:bd:a5:74:41:b0:fa:0d:99:
13:e1:c3:72:f0:35:82:6f:18:54:ee:77:78:87:5d:
21:d5:ec:87:e6:4b:ae:3c:a8:fe:bc:cf:b7:b5:2f:
62:47:25:a9:19:35:54:e5:a4:4d:09:f4:bf:2b:0b:
f8:e2:10:65:5c:cb:f5:d0:b4:2b:47:67:a7:75:7f:
97:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8D:A0:1D:E4:E9:CD:54:74:AD:0A:68:26:62:5B:E6:B8:08:F0:AB
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.mft
sbgp-ipAddrBlock: critical
IPv4:
169.255.112.0/22
Signature Algorithm: sha256WithRSAEncryption
57:25:b6:29:3f:96:9b:8a:ef:0e:7f:74:02:b1:3c:4f:6d:f6:
79:bc:61:2c:8f:8d:64:26:54:36:7c:ab:70:d9:23:19:1e:ab:
b5:ea:0b:2c:a1:84:62:9f:a2:58:ec:09:d7:f4:0a:03:86:b7:
d7:28:8c:39:d1:72:5c:8d:0c:d1:d5:f1:7f:1d:c7:f3:ef:18:
40:30:ab:93:a8:1d:bd:f1:66:10:21:96:de:22:c3:5d:36:fe:
41:7b:23:f3:8c:18:0b:02:c7:62:1c:33:97:de:93:ac:99:a1:
b2:f7:b5:8d:32:97:70:82:3a:6b:24:93:d7:03:72:86:f3:15:
a1:8b:a5:80:74:4a:84:9d:44:31:4c:24:61:a6:5e:e7:72:5f:
67:6d:1f:fb:8c:3f:d7:bf:10:e2:2a:92:d4:99:f8:09:70:7f:
da:31:1c:30:80:a8:7c:8b:d7:d4:d1:83:09:61:10:d1:d1:48:
f4:f5:a3:4d:08:21:b8:1d:97:4d:d5:47:3f:91:de:37:ef:06:
e2:c6:b7:61:c9:b4:10:56:30:ae:28:ed:50:92:34:97:94:61:
2a:c7:c9:a7:a9:32:1b:a3:f0:43:ac:82:f0:38:25:1e:e4:96:
cc:d8:ba:39:95:cd:b0:20:5b:a4:2a:4c:f1:f8:94:41:fa:1e:
26:5e:06:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:08:16 2025 by rpki-client