Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
File: YAxslYLhTzef1aWysY2CLjZRry4.cer (raw, json)
Hash identifier: hOf21bOuljYFOFXXb/O5AzNagaKz/ScyHDvl/7BbXwM=
Subject key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 164E
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:36:06 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 45.221.64.0/21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 11 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5710 (0x164e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 00:36:06 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F363BA19AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:af:b2:2b:e7:77:6c:50:a2:30:1b:43:b5:6d:
55:db:bb:96:30:f2:60:1f:05:25:62:f9:5f:6d:0f:
72:3f:5e:13:0c:1b:b6:e6:26:57:e3:39:57:22:0d:
e7:f5:d5:55:30:0d:d6:86:9a:bf:dd:d1:dd:16:7f:
74:ae:0a:78:5d:b1:0d:b3:e6:74:c1:59:f8:47:8b:
a7:60:73:15:76:09:11:2d:8b:1a:c4:20:79:2d:be:
c3:10:c4:99:3f:97:28:16:e3:b1:97:b2:7e:a9:c9:
64:d4:40:46:7d:ff:ee:2d:d9:84:8f:87:f9:9f:6d:
2b:d0:75:4e:ac:b2:8f:bc:6e:82:e8:9f:a7:9d:8f:
68:ce:b0:65:4d:84:dc:f2:2f:69:86:72:96:24:57:
70:eb:5a:cf:03:85:4c:28:4d:c7:29:fe:3b:b0:cc:
26:d6:67:c4:82:a0:4d:9e:d9:a0:06:bf:5a:27:4a:
8b:5f:b0:72:80:b2:42:ac:00:14:43:1d:76:e2:53:
ca:95:f0:81:0a:90:e6:3d:65:ff:c9:29:d5:30:70:
01:6d:f9:8e:32:a8:7d:34:ae:22:fb:ce:32:24:88:
b9:df:e9:aa:ca:bb:5c:73:16:c7:ea:7a:07:69:dd:
56:ab:4e:3f:ab:b5:4e:ed:00:a6:f6:68:eb:af:f7:
f7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
sbgp-ipAddrBlock: critical
IPv4:
45.221.64.0/21
Signature Algorithm: sha256WithRSAEncryption
48:94:ac:5a:d6:96:f0:a0:4c:7c:e3:12:95:fd:28:0f:1f:19:
bf:cc:27:c0:49:2c:94:e5:01:65:b6:51:dc:83:84:41:4f:34:
9a:85:8b:8a:e1:75:67:e7:b3:62:2c:d3:09:7f:d6:b8:98:89:
53:83:98:82:b6:fa:a5:31:e0:a3:d3:3c:57:1b:f5:ff:ea:68:
14:1c:b1:83:00:16:f9:f1:62:15:32:6d:46:26:38:a4:ff:5f:
85:da:15:42:7d:db:0c:a2:33:0b:24:84:7e:08:e1:d3:a4:9f:
ef:e6:13:40:cb:cc:d6:2a:4b:1e:8d:62:10:8b:e1:97:48:cc:
7e:fd:4c:59:af:c9:fb:d1:6c:db:7a:a1:13:10:0e:a2:5b:c4:
3a:0c:73:86:b4:88:47:33:40:3c:69:54:eb:21:c0:d3:ba:ba:
f0:69:7a:0f:5f:c8:e5:45:6d:b5:11:b5:e6:9b:d7:a1:5c:48:
26:e9:cc:4c:7a:ad:9d:37:64:fe:8f:7c:23:aa:ac:1f:84:17:
b6:e8:5f:aa:e5:17:2c:60:3d:e8:91:e8:5b:f5:4a:19:d6:b7:
ce:f9:73:fe:7c:9e:fd:5c:1e:6d:5a:b0:68:40:37:20:46:23:
39:3c:ff:ca:69:d7:7d:3c:75:16:db:36:11:89:61:12:13:e5:
c2:f3:81:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:17:34 2025 by rpki-client