Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/YYm_k4yUxTTXhDp6A0xbaoI31ZY.cer
File: YYm_k4yUxTTXhDp6A0xbaoI31ZY.cer (raw, json)
Hash identifier: GGd3tIRqKx1CnIheRZUZFjX3XHoS6sDHnqCgrNR07z8=
Subject key identifier: 61:89:BF:93:8C:94:C5:34:D7:84:3A:7A:03:4C:5B:6A:82:37:D5:96
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 171B
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:15:45 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 160.119.100.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5915 (0x171b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 01:15:45 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36A42DFAR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:48:05:c6:9f:95:6b:e8:6c:d3:4b:1a:20:
06:b4:bf:60:06:36:7f:3b:1f:5e:b6:d2:7c:3c:1d:
9f:20:6b:76:5e:96:e9:31:29:36:20:23:90:8b:c6:
12:8b:cf:47:bf:5b:ed:37:38:ac:30:26:bd:26:bc:
ea:27:ea:e7:25:bc:f7:14:e0:35:5d:c6:56:d8:fa:
5e:95:10:c5:a7:2e:ad:4c:bb:77:30:04:16:91:33:
c0:f7:cb:a7:8e:a4:05:38:09:52:1b:ab:f4:2c:ae:
25:29:5d:47:e7:24:b6:e1:45:c3:85:82:a0:03:06:
0c:47:40:2c:b2:1f:32:3c:46:31:74:fa:77:5b:0e:
16:a3:50:5d:40:e4:1c:c3:2a:a3:d4:1c:df:e6:6a:
5e:26:c3:31:48:6a:55:d6:20:7b:09:e6:0e:33:de:
b7:43:c5:36:06:bc:19:ee:31:ae:d7:50:6d:31:9c:
d7:6e:6c:ee:2b:4f:81:4c:59:d6:20:30:56:13:2a:
b9:a7:3e:1d:e0:98:77:4c:1f:0c:58:60:5b:42:5a:
8f:bf:27:13:78:01:92:5f:50:35:88:71:5a:67:d9:
57:3b:5f:02:97:ef:f0:5a:73:95:92:cc:ee:3d:21:
bf:dd:58:ca:88:55:be:8c:95:d2:d9:13:52:7d:dc:
24:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:89:BF:93:8C:94:C5:34:D7:84:3A:7A:03:4C:5B:6A:82:37:D5:96
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.mft
sbgp-ipAddrBlock: critical
IPv4:
160.119.100.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:88:0c:15:d8:be:ef:27:e4:45:8f:48:db:09:37:54:6f:93:
a9:32:78:61:c1:ff:a8:12:49:26:31:0a:ba:44:8f:90:cf:a2:
55:1e:d6:aa:9d:ed:f1:0c:e3:b2:c3:fd:ad:8f:36:6d:c9:ca:
34:62:d5:39:6e:69:9b:68:f3:9d:ac:e8:be:ff:59:21:c0:5c:
1d:e0:b0:30:0f:ad:ec:1f:fc:da:0f:04:82:82:27:2c:d7:36:
23:78:da:1b:7c:3f:74:53:e2:64:9a:7d:fa:f9:ee:f5:fb:73:
ea:33:8a:e9:a0:04:8f:b3:42:16:37:02:f2:a5:32:a6:f6:56:
c4:28:3d:49:3b:db:60:f4:5d:9a:43:b0:77:3e:bb:17:bd:de:
a2:86:7f:64:ac:cc:b1:42:4d:fb:4d:df:aa:34:1b:d7:dd:b6:
15:4a:0f:97:bd:8b:5a:da:cf:4a:88:04:9a:4d:4a:a5:b0:57:
2e:33:90:ea:81:69:0b:cb:ef:66:06:cf:58:8b:44:c3:96:6c:
8e:c4:28:12:5e:87:15:a6:fc:fb:a4:56:36:0e:bd:d2:09:6a:
cd:ce:78:d8:b3:b9:7a:38:ee:18:64:03:0b:71:68:75:65:de:
51:dd:4a:a4:39:e8:1a:2c:7d:c2:83:15:8d:4a:f2:9c:39:4b:
35:d5:0a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:39:51 2025 by rpki-client