Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
File: bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer (raw, json)
Hash identifier: VO/QYXSfe2kAf50kxselUpJcBWLTFNUpwLxW5HC38ik=
Subject key identifier: 6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 174C
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:25:13 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 160.119.240.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 14 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5964 (0x174c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 01:25:13 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36C95F1AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:4c:43:40:cb:f7:cd:de:14:4b:b7:ab:f1:
4c:e2:68:26:dc:8b:55:b8:50:8e:5f:7f:00:5a:87:
f8:af:15:75:3f:94:e8:30:78:af:1e:9b:26:18:7a:
4f:36:4b:2b:2e:4b:a4:f7:38:83:2c:9e:f4:2a:a8:
5c:ea:c9:4d:36:0d:90:89:e9:7b:98:b7:0c:04:7a:
88:dc:23:b6:99:c5:f1:e5:4e:25:20:09:63:8c:f0:
bb:0d:05:5a:fa:87:bf:69:1d:9c:bc:10:79:22:9b:
38:c7:69:db:d3:c2:f9:31:ae:41:dd:fa:f6:00:40:
b4:71:d1:6c:11:90:2b:bd:b4:f5:ad:8a:4b:86:36:
a4:56:ea:cb:94:3b:74:d8:73:67:a7:20:7a:a8:ab:
db:f5:b9:02:b0:fb:f2:48:22:09:a4:6c:5d:02:0b:
90:c3:27:1c:f7:f0:a0:46:d2:92:0e:f2:0e:42:d3:
1d:b2:a5:03:b3:7a:31:3c:3e:8b:04:9f:0b:04:0a:
5a:d5:13:c9:3b:5b:17:2f:1a:d9:b1:d8:89:e0:72:
38:27:fd:fc:00:90:5a:62:09:4d:49:ee:cf:e6:ee:
c2:53:68:12:0a:ab:d2:af:ac:26:17:a1:98:ab:30:
2b:20:57:b6:34:8d:28:94:1e:8c:dd:ff:0e:1d:99:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
sbgp-ipAddrBlock: critical
IPv4:
160.119.240.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:6d:c0:eb:eb:a8:3a:53:91:94:34:a1:5e:9d:61:53:29:c6:
26:66:50:4a:71:e5:d3:ae:9b:e8:85:9d:9b:e0:02:da:20:2a:
74:25:eb:ea:dd:dc:c5:25:58:23:b1:72:3d:1f:e1:70:83:18:
dd:39:0d:6d:88:bf:b1:62:9f:d5:9a:e6:64:3f:7b:43:5a:ac:
f0:8b:92:3e:fe:71:50:a4:c0:15:1e:54:88:2d:8f:7f:6d:20:
5c:86:7a:e6:4c:eb:84:bd:0e:ee:26:b1:59:f0:a0:f8:3d:e0:
70:4d:fc:5a:13:47:8c:3e:bb:ee:ab:db:af:7a:ea:df:af:48:
2c:bb:76:54:68:e3:8e:e0:34:f5:dd:fd:83:92:5a:57:62:af:
fb:5c:9f:41:75:d7:e4:85:3f:18:a7:cf:10:71:a9:0b:73:c8:
3d:a6:fb:54:35:f2:6d:e3:4b:f4:b4:57:42:37:61:60:84:ed:
6a:95:19:e1:a9:b6:c5:1c:fa:27:67:ed:6b:5e:0a:fe:7a:5e:
4d:3b:5b:e2:6a:d9:ee:46:a5:16:82:37:a2:ad:89:f8:96:3e:
a6:89:d2:45:75:ff:44:f1:25:e8:e4:ab:f6:2a:60:2d:e8:94:
8e:cd:4c:22:9c:09:dd:95:cf:c9:ed:bd:a7:38:69:e6:b5:26:
c2:6c:ef:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:37:55 2025 by rpki-client