Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
File: hursQpTfunBFqIZC6d_EVRs0wlU.cer (raw, json)
Hash identifier: JhWwzZ5mQszqw1SCQdYqi1JNsX0dU7ihBbKNGQsB4ow=
Subject key identifier: 86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 16DE
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:04:05 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 45.221.0.0/22
IP: 45.221.16.0/22
IP: 160.0.0.0/17
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5854 (0x16de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 01:04:05 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F368588EAR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:67:cd:94:a5:29:5b:f4:eb:d3:5c:b4:df:
bc:9e:62:fb:7a:ed:08:e0:6b:c6:a9:63:9a:d9:20:
8f:62:d3:53:27:58:24:72:28:e5:aa:b0:42:f0:4d:
71:e0:20:eb:98:34:06:6f:d5:31:dc:62:8c:3e:be:
85:af:40:04:49:f9:37:8d:31:8e:78:d0:d9:ae:72:
ed:9b:75:f8:b8:2c:f2:ca:9a:4b:28:11:d3:94:df:
b2:bd:d2:9d:9a:f9:b4:22:73:6f:05:02:a3:d8:eb:
95:19:41:77:1f:b3:7d:a9:f4:ad:69:48:74:56:f8:
60:1d:ce:50:02:b1:f0:b6:37:86:e9:76:a5:73:12:
22:58:02:cb:e9:b6:bf:c6:2d:de:44:f8:d0:50:7e:
af:99:68:d1:be:16:52:26:9c:af:a0:44:c7:48:1d:
19:c0:1e:fb:f2:be:b6:e9:e5:4d:09:ba:f8:92:26:
90:a6:65:75:b1:64:ae:a8:1d:35:de:dd:28:b1:72:
76:92:fc:eb:85:6a:17:81:d7:b3:77:64:05:96:b2:
49:6f:99:ab:ff:2c:59:e0:f6:81:fd:d8:db:b1:3e:
00:37:ba:0f:4e:53:54:f9:e7:64:47:89:17:ac:df:
ba:14:2b:d3:a9:90:f0:8f:8a:7d:ec:dd:0f:4b:01:
5a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
sbgp-ipAddrBlock: critical
IPv4:
45.221.0.0/22
45.221.16.0/22
160.0.0.0/17
Signature Algorithm: sha256WithRSAEncryption
49:a4:5c:06:47:40:d3:5f:75:35:b3:69:a5:36:5b:80:d8:26:
e7:32:be:c9:fc:73:e6:ab:68:f1:09:d6:70:9d:3b:6a:ee:4d:
89:e2:42:e4:8c:5e:1f:78:fb:9e:b5:52:95:1b:74:76:95:fb:
6c:a7:8f:bd:06:e9:c0:0e:76:54:33:5c:a4:30:32:84:9a:04:
61:59:f2:d1:12:62:d7:c4:e4:dd:7b:bd:1b:0c:9d:5c:a8:04:
72:d9:c0:f6:08:db:ae:66:94:86:98:29:26:21:52:46:01:ca:
06:1f:33:d0:d7:23:0e:dc:45:83:cb:37:55:e4:77:bc:27:86:
0d:8e:0a:89:b6:2f:c1:4e:34:66:4a:1a:8e:31:03:b6:5f:e2:
c1:1f:82:5b:d0:4a:01:a7:0d:cb:e6:66:cf:08:f8:c6:5a:67:
de:b4:cb:75:e1:a0:6c:d0:ea:3f:f5:d0:10:90:b7:20:7b:d7:
d2:14:27:fc:30:83:2b:11:44:f6:fb:c3:f0:8b:70:7f:31:63:
64:a4:f4:1f:e7:24:40:ac:db:54:ae:b1:a1:f4:c9:0a:d3:ca:
da:e1:f3:07:2c:70:da:87:0d:0e:37:52:8f:98:f9:68:12:91:
13:45:bc:bb:27:92:50:de:53:e0:e2:5f:18:17:76:66:37:d5:
74:99:9e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:11 2025 by rpki-client