Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/WsYHxJzTMEH1jO7lTHZg4EWb9yc.cer
File: WsYHxJzTMEH1jO7lTHZg4EWb9yc.cer (raw, json)
Hash identifier: xuHhxuh3BvhOUjJjyIzotWz5gF+UllnkrdNeX/c57nc=
Subject key identifier: 5A:C6:07:C4:9C:D3:30:41:F5:8C:EE:E5:4C:76:60:E0:45:9B:F7:27
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 178F
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/788C9C7272B111EE89C1B56D4AD9E6FC/WsYHxJzTMEH1jO7lTHZg4EWb9yc.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/788C9C7272B111EE89C1B56D4AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:38:50 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 169.255.176.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 14 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6031 (0x178f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 01:38:50 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36FCA07AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:d7:bf:71:7a:e2:11:ec:e7:79:8c:bf:b9:
52:f6:25:cb:99:1d:15:8a:47:85:ce:59:e2:a9:ed:
1b:ac:c5:fa:41:15:5d:d3:41:75:0d:fd:52:92:cf:
c6:2b:e3:8b:b1:49:63:b8:ee:c3:25:2d:e1:7e:2f:
8f:ff:8a:4b:3d:f9:6a:21:17:ad:ce:ed:bf:99:6e:
b1:f2:12:ca:75:2a:30:6f:c7:05:f7:5a:88:3f:3b:
d9:8e:d5:39:da:26:44:04:a1:f8:a0:cb:b0:ad:07:
88:d0:f3:4d:bc:7a:8d:d1:41:1a:a9:d4:f6:c5:3b:
0d:0d:ea:7d:7d:92:fe:f8:26:02:71:5b:74:8f:ef:
37:1f:a1:27:f1:fa:f3:2d:16:50:50:f9:aa:d3:69:
b1:be:aa:a8:0c:fe:ee:60:d1:c4:6b:78:d6:36:27:
f4:3d:13:e2:f2:61:c6:b0:e0:d7:1e:65:d3:d8:a6:
28:73:03:32:d2:f7:26:bc:75:0d:b1:87:30:c2:c7:
e0:f3:c1:3a:cb:99:ba:3f:46:a3:04:06:96:8e:ce:
0a:c9:1c:be:04:01:0e:45:0e:67:8f:e5:73:be:78:
f1:e8:b6:63:b1:af:11:c9:0b:a2:e9:51:61:40:88:
b4:ce:ce:44:b0:84:12:51:95:aa:96:f5:94:ae:67:
50:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C6:07:C4:9C:D3:30:41:F5:8C:EE:E5:4C:76:60:E0:45:9B:F7:27
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/788C9C7272B111EE89C1B56D4AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/788C9C7272B111EE89C1B56D4AD9E6FC/WsYHxJzTMEH1jO7lTHZg4EWb9yc.mft
sbgp-ipAddrBlock: critical
IPv4:
169.255.176.0/22
Signature Algorithm: sha256WithRSAEncryption
73:e3:04:e6:4a:7b:fa:ad:6f:76:06:a1:f2:2d:5d:2b:80:06:
5d:2a:fb:c9:2b:39:b9:b4:33:dd:92:19:e2:1b:39:7d:3f:d2:
b9:8a:1d:44:be:ee:71:3f:63:30:b7:e8:b7:2c:d8:e6:49:22:
e9:38:bc:2a:e2:56:47:67:3d:9c:6c:9a:76:47:01:35:da:ba:
bb:81:72:b7:c6:57:e7:6d:78:0d:47:27:94:56:4c:71:8f:59:
3d:e0:28:c4:1a:fa:3a:38:de:d4:b9:4d:f9:69:90:72:bf:62:
80:26:99:c2:f5:8e:99:b3:34:53:c2:9e:68:86:4c:7f:15:82:
a9:10:f4:4e:47:fa:2d:ea:98:ca:00:2e:b0:e0:eb:91:ac:a5:
12:db:63:a5:c2:9e:82:5b:cd:41:3d:fd:7d:b1:16:71:6a:ae:
dd:4c:16:6b:13:8c:1f:26:57:aa:35:9c:0a:9d:69:8b:fe:59:
bb:97:18:53:cb:c1:07:38:5d:0d:ba:19:76:88:77:da:4e:47:
80:1f:77:3e:52:8e:93:ac:f8:eb:41:5c:2c:72:8c:03:6a:4e:
f9:ef:05:60:54:17:be:c3:34:51:b9:e8:c7:2f:ff:d8:03:ed:
86:ee:87:b7:e5:2b:4e:b9:60:ed:c8:ad:ff:81:b4:70:6d:18:
ca:03:e6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:23:30 2025 by rpki-client