Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
File: itr_GHci3uuw3c4Fe_PCmNAsfM4.cer (raw, json)
Hash identifier: Bq9izCAwVf7WA3n5O4g066E8jKfDSeuVK88Zco0j70c=
Subject key identifier: 8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 16F6
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:08:45 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 156.0.232.0/23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 14 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5878 (0x16f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 01:08:45 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36939A6AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b6:3e:55:74:f3:9e:70:f4:2a:9c:43:bb:1b:
2a:61:7f:cb:6f:fc:cb:9d:0f:24:2e:f8:a9:ec:2a:
3b:91:29:55:f4:b2:00:1d:c3:0d:09:85:92:4c:aa:
ba:57:96:3d:86:20:a6:93:e1:be:0c:a9:50:45:dd:
62:e7:5f:27:89:cb:4a:af:84:2e:97:10:49:e2:20:
6f:b6:8c:d9:7b:4b:8e:8a:c4:79:de:79:36:64:50:
d1:71:a6:fa:81:60:e3:11:84:16:32:bf:d0:da:76:
6f:38:a3:f2:9f:aa:9f:ce:60:e9:a5:b0:8b:8e:63:
27:91:8a:36:50:33:4b:74:8d:c6:64:39:da:75:1a:
35:b3:59:d2:6d:58:07:c8:8b:22:20:8a:9e:4d:b7:
98:c1:36:6a:27:ee:b3:03:32:a1:7f:e0:65:95:f3:
fe:05:dc:c4:dd:01:c6:8d:93:c8:72:f9:3d:4c:82:
23:fb:4e:da:ff:89:61:64:83:08:5c:f1:a4:bc:f9:
0c:3b:4d:47:19:87:32:53:71:cd:d1:2c:aa:03:7a:
6e:e8:32:60:19:59:83:73:be:50:4f:15:3d:c3:00:
a3:c4:54:64:7c:77:cc:26:29:8c:01:87:59:33:da:
61:53:5c:8d:bd:f4:ff:74:a0:b7:4a:a0:fa:f1:25:
c3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
sbgp-ipAddrBlock: critical
IPv4:
156.0.232.0/23
Signature Algorithm: sha256WithRSAEncryption
34:b1:78:d7:b5:6c:f9:73:a3:57:f6:4f:2e:0c:cb:6b:1b:fe:
b1:23:5d:8d:8f:1f:2d:2b:d1:ef:3d:89:72:5b:73:ab:8c:5f:
d5:e2:b1:6a:f7:73:33:2e:fe:10:39:55:4d:1b:04:8c:f4:23:
81:44:2f:98:ae:e3:6c:f1:06:b2:1d:6b:8d:53:dd:ca:41:85:
f3:35:c8:8f:06:69:c9:87:95:dc:c4:3a:2a:f5:2e:a4:dd:df:
dd:22:30:fe:83:5e:07:f1:67:f7:00:12:20:7e:2c:b1:3f:5a:
46:61:ac:9b:a9:da:52:99:52:54:be:3b:5c:58:3a:9c:11:8e:
f8:d4:3c:ef:43:b6:5b:72:91:d8:52:0b:e2:63:92:50:ee:f2:
c1:64:2a:ed:0c:60:27:c6:a1:bf:3d:43:18:34:9e:7b:9c:45:
21:b4:fb:ba:8b:41:af:06:d0:a9:76:dd:fc:6f:8e:15:69:8e:
20:3b:16:a9:71:31:3d:dc:a7:bc:7d:93:4c:d1:2c:60:cb:f8:
6f:67:7f:e3:c4:34:cb:66:55:3c:58:da:65:2a:be:b2:3e:c0:
e1:1b:21:94:82:ba:58:18:97:c0:92:37:24:2b:f5:2d:cb:eb:
3c:1d:e1:ee:2a:65:d4:23:b4:6e:7f:59:27:20:24:e9:3c:cf:
2c:d2:f1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:21:50 2025 by rpki-client