Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.cer
File: _zNjsSKdG9mpRJR9Tbvdnn6CSaw.cer (raw, json)
Hash identifier: EJd4sNYEqo96zIfSfjDAnnJHZydSU36VUTTyKbDgW3U=
Subject key identifier: FF:33:63:B1:22:9D:1B:D9:A9:44:94:7D:4D:BB:DD:9E:7E:82:49:AC
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 1650
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:36:30 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 45.221.12.0/22
IP: 169.255.216.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5712 (0x1650)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 00:36:30 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F363C3E1AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:ad:2c:4f:86:a5:91:8e:b5:2a:d7:e3:4c:
e2:35:c8:57:b8:80:bc:7d:af:30:c7:2f:1e:72:24:
4d:8e:0a:29:6a:cc:02:f3:39:f2:a2:8b:28:27:ba:
9b:4f:34:ff:e8:27:46:34:76:8d:e1:38:aa:9b:84:
fb:cc:56:95:e8:65:b7:8e:8c:2e:94:62:5a:34:41:
14:5c:09:32:60:7b:b0:6a:a1:c2:3c:39:b4:84:a3:
a0:68:ec:05:37:27:f0:46:d4:d2:5f:6d:9f:5f:56:
62:f1:3d:a2:21:d8:e1:b3:7a:72:9b:64:67:75:cf:
cf:8f:84:e1:4c:43:f2:2e:4c:eb:15:1e:10:99:80:
ea:53:3a:4d:0f:44:d8:85:c4:35:80:2e:c1:e3:9b:
6b:c8:18:97:c6:89:4a:88:99:46:12:cd:b6:c7:d1:
2b:55:31:a5:e1:b5:3a:2a:0f:cf:08:b2:2b:06:8f:
4a:3c:ed:d7:6a:74:c7:7e:80:71:c3:e1:cd:69:32:
24:2e:47:d7:4e:99:1a:4f:bb:da:b7:69:20:a2:15:
ac:db:ca:63:c8:f2:94:05:e6:a8:34:19:f0:98:cf:
a8:aa:81:8f:59:45:cc:db:8d:ea:c2:bf:61:3f:76:
29:11:df:47:1c:c2:4c:bc:80:1b:a9:1d:90:40:9f:
7c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:33:63:B1:22:9D:1B:D9:A9:44:94:7D:4D:BB:DD:9E:7E:82:49:AC
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/BF8E07A4821611E9A25C183DF8AEA228/_zNjsSKdG9mpRJR9Tbvdnn6CSaw.mft
sbgp-ipAddrBlock: critical
IPv4:
45.221.12.0/22
169.255.216.0/22
Signature Algorithm: sha256WithRSAEncryption
55:91:96:48:84:f1:e4:3e:03:a1:08:67:c8:fe:57:29:10:79:
22:fc:bc:32:10:98:50:30:c6:a7:bc:a7:36:08:39:49:5f:fa:
04:68:ad:e1:f0:14:f6:4b:10:16:0a:4e:9a:c2:10:4b:83:ed:
27:5a:cb:e3:f4:96:87:2f:4b:c3:3a:04:80:46:06:b2:c0:bd:
94:07:9b:2d:84:b2:b7:e0:e8:6d:b0:d3:57:3f:84:54:bd:db:
e8:3e:a2:78:2b:ff:07:88:43:d8:cd:35:7f:dd:cd:16:07:3d:
e0:6d:9e:0a:44:22:a6:5a:82:eb:94:bf:c5:58:bc:ac:1b:7c:
11:4a:c3:6a:15:d2:27:ff:2e:2d:b2:9f:10:39:1b:c6:d4:a8:
21:2b:c4:e4:d0:6d:c1:da:c9:fb:4d:c3:31:38:b3:15:9f:60:
e2:91:af:f0:4b:2a:b9:0f:f6:0b:05:de:ab:f1:bc:9f:0c:be:
5a:3a:ac:be:71:85:e7:78:77:66:c3:68:8a:29:c1:6d:47:8a:
be:27:18:27:7c:b3:29:30:f1:70:1e:92:c9:f5:4c:57:7c:36:
ad:b9:f6:00:8a:be:e0:2d:6b:39:5a:4a:c8:14:24:cb:36:a2:
3f:aa:6c:31:5b:7e:8b:f2:a7:41:a5:fc:36:1a:8b:7d:e3:0f:
bd:65:8f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:04:57 2025 by rpki-client