Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/hgwk5dUBPSMjsLq0BphmwNwK7m0.cer
File: hgwk5dUBPSMjsLq0BphmwNwK7m0.cer (raw, json)
Hash identifier: cJ1f72i/Ah87xmIosuZZnlmB2xXWGdS6tVUJ/vRhZZs=
Subject key identifier: 86:0C:24:E5:D5:01:3D:23:23:B0:BA:B4:06:98:66:C0:DC:0A:EE:6D
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 1626
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:28:17 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 169.239.8.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 14 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5670 (0x1626)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 00:28:17 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F361F1DAAR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:9a:6b:68:2d:1d:13:18:1d:67:16:8b:0f:
73:bb:51:cf:a6:bc:cd:4a:1d:ff:9c:65:bf:6c:74:
f4:49:57:23:75:c8:b2:c5:20:6d:88:aa:d5:80:1c:
84:a5:6a:d8:31:da:2b:d3:de:6e:f8:ca:21:e0:9a:
9e:e9:4a:29:41:59:16:9a:63:81:c9:1a:a8:cd:c6:
5e:35:da:e6:bd:c2:7c:cf:77:21:04:7b:c7:35:a7:
90:d6:ca:f9:80:8d:07:e2:af:d5:b2:fd:d7:84:d7:
f5:6b:8c:e3:50:12:b0:f5:9f:f4:b2:49:cd:f0:7e:
c6:6f:49:4d:af:57:d4:32:19:64:ba:3d:58:b7:07:
84:32:e3:5c:ef:5c:d0:b8:20:b2:de:de:bf:27:5a:
df:e8:90:3c:80:de:f2:71:d3:e0:b5:40:4b:a2:f6:
3c:6b:fb:cf:e3:c8:33:1a:54:8b:22:9d:dc:1b:6c:
9d:20:86:03:bb:a0:e7:23:e3:e5:23:1c:44:e7:53:
a4:83:8e:4f:70:39:28:a4:ce:73:26:b9:99:94:fe:
ca:3d:d8:78:db:5f:9a:e0:df:3f:fa:45:77:fe:fb:
03:e4:fa:36:7c:71:00:a8:d3:3f:67:e3:a5:52:5e:
89:00:c6:2f:3d:ad:b1:96:1b:6e:35:a3:ed:19:46:
26:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0C:24:E5:D5:01:3D:23:23:B0:BA:B4:06:98:66:C0:DC:0A:EE:6D
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
sbgp-ipAddrBlock: critical
IPv4:
169.239.8.0/22
Signature Algorithm: sha256WithRSAEncryption
26:f3:ba:0e:87:0c:49:5b:dc:6f:1c:c9:c5:bb:68:2b:b6:27:
d0:cc:95:4e:2e:35:0c:0a:8e:f0:94:ca:03:ae:cf:ea:d2:56:
e4:59:6a:0c:75:4b:4b:28:02:cd:06:b9:9f:69:7f:62:74:08:
17:8b:89:ab:a5:fe:2b:a9:5a:f4:77:d6:fa:36:c0:ee:55:06:
ec:c1:e9:04:40:c8:ec:f8:0e:5b:ad:d8:b2:a1:0a:42:61:b1:
06:dc:be:bf:b0:ec:55:d7:7f:11:15:b9:6f:1e:80:35:e7:e9:
24:a6:44:8d:e9:fd:87:c8:e5:c0:5e:27:26:a2:3d:80:55:23:
7a:5a:94:87:11:c2:15:2d:e3:40:2f:f9:12:89:cb:0a:62:12:
30:f6:9f:6f:17:9a:34:b8:65:96:d4:5f:c8:d5:38:c7:88:1d:
35:a3:1a:73:5c:24:6e:3f:aa:79:92:dc:28:99:f9:5c:39:4e:
d6:90:f1:01:d8:be:2c:98:ee:12:62:74:ae:d5:5d:2c:6e:51:
e2:f2:d5:6c:01:9d:3b:82:71:88:74:82:d8:4e:c2:6f:59:86:
e8:79:62:d5:65:ab:24:50:82:7a:83:a5:82:37:b9:39:e2:a1:
3a:61:a0:b4:e3:40:93:fa:91:37:28:8f:e0:40:66:43:18:bf:
42:61:78:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:05:32 2025 by rpki-client