Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/jINMiRsip8xdph6P5KcT-Iaqv80.cer
File: jINMiRsip8xdph6P5KcT-Iaqv80.cer (raw, json)
Hash identifier: m1Hnd1waTXplXoVa+Pxm2bBOby8xlyev/Z1585GtSX4=
Subject key identifier: 8C:83:4C:89:1B:22:A7:CC:5D:A6:1E:8F:E4:A7:13:F8:86:AA:BF:CD
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 166C
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F364AE44/2F20B0E2AF4411EB9DE0BD07F8AEA228/jINMiRsip8xdph6P5KcT-Iaqv80.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F364AE44/2F20B0E2AF4411EB9DE0BD07F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:41:57 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 45.216.0.0/14
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 11 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5740 (0x166c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 00:41:57 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F364AE44AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:be:24:67:72:90:74:88:4e:44:c2:cf:4d:c6:
69:91:f8:c3:3e:89:95:2d:e9:d2:b4:8a:44:3f:f7:
ce:bf:bc:f3:7a:ec:07:9f:a9:fe:7d:48:6e:e1:d9:
e0:99:11:3e:3c:76:37:6b:42:e8:e6:d2:f8:65:7e:
ac:97:45:d1:75:39:40:a9:99:c8:74:f2:5e:03:7c:
ed:18:45:9d:a3:b7:ea:3f:83:27:fe:b1:53:4c:ef:
cd:64:d8:58:c7:68:ee:41:f8:4e:9a:63:1f:f9:18:
64:2d:71:fd:7a:10:3b:0d:c7:9c:05:ab:1b:ee:39:
29:68:a4:45:f8:7e:2e:7c:75:82:3c:59:9a:29:12:
c8:6c:17:5a:8b:4d:83:eb:cb:87:ea:18:00:b1:ce:
1f:d5:1f:20:6c:11:18:d1:35:37:2e:ab:7b:30:27:
d9:07:50:fa:4f:af:82:28:7e:d0:54:82:42:3d:c9:
9e:0e:b5:3d:47:dd:a4:0a:c9:4e:11:cd:0d:7c:ce:
39:d1:05:77:ce:a9:fe:01:b3:2b:18:8c:13:4d:97:
77:22:c4:31:28:f4:75:66:a2:b4:27:a5:4e:28:9c:
ac:e6:f8:81:48:22:15:cb:86:2c:89:2b:b5:82:db:
a1:0c:e5:8d:ca:86:3c:37:08:21:08:f1:24:47:ca:
9a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:83:4C:89:1B:22:A7:CC:5D:A6:1E:8F:E4:A7:13:F8:86:AA:BF:CD
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/2F20B0E2AF4411EB9DE0BD07F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/2F20B0E2AF4411EB9DE0BD07F8AEA228/jINMiRsip8xdph6P5KcT-Iaqv80.mft
sbgp-ipAddrBlock: critical
IPv4:
45.216.0.0/14
Signature Algorithm: sha256WithRSAEncryption
42:b8:e2:b0:47:90:12:7b:cb:60:db:42:c3:32:52:9a:52:21:
3a:e4:34:06:13:ad:cd:22:f3:af:dc:75:30:3a:2e:ac:b6:94:
8b:77:e5:b3:ee:0a:ff:ee:0d:06:b5:f5:01:c0:78:d0:95:d2:
1d:7f:3b:f6:61:fe:70:b1:fd:d8:8d:ac:02:b0:47:43:13:3a:
fb:89:ea:3f:b4:ff:65:43:9b:fb:a9:e2:ce:51:9e:32:33:5a:
be:04:96:74:80:91:8f:6f:c0:d6:89:80:6b:2c:29:9c:f2:0d:
7f:02:9d:d6:9c:f3:47:1e:16:ca:c3:89:77:f4:f8:72:18:00:
e6:38:b7:00:2b:86:3e:32:bf:0c:c9:3e:a8:4c:f2:b7:91:38:
85:22:a1:9f:9f:89:23:0a:c1:67:ec:d8:35:e7:b0:e0:a2:d0:
55:1f:7c:59:0e:42:57:73:20:a5:ed:43:a4:78:c9:e9:4f:ef:
ce:20:fc:0d:45:26:5f:5e:be:b9:f6:ab:58:ba:e9:23:f5:2d:
02:21:92:e7:1c:37:47:c3:0c:1e:88:e1:ed:a3:a8:f5:d0:06:
ed:32:d8:eb:7e:a6:3f:58:c6:09:ef:2d:14:e3:c1:c7:79:d6:
52:69:f8:1c:4e:a9:08:26:64:b5:91:b7:55:f6:fc:3c:78:3f:
80:79:14:c8
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgICFmwwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNTAxMDEwMDQxNTdaFw0yNjAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjRBRTQ0QVIxMTAvBgNVBAUTKDhDODM0Qzg5MUIyMkE3Q0M1
REE2MUU4RkU0QTcxM0Y4ODZBQUJGQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDhviRncpB0iE5Ews9NxmmR+MM+iZUt6dK0ikQ/986/vPN67Aefqf59
SG7h2eCZET48djdrQujm0vhlfqyXRdF1OUCpmch08l4DfO0YRZ2jt+o/gyf+sVNM
781k2FjHaO5B+E6aYx/5GGQtcf16EDsNx5wFqxvuOSlopEX4fi58dYI8WZopEshs
F1qLTYPry4fqGACxzh/VHyBsERjRNTcuq3swJ9kHUPpPr4IoftBUgkI9yZ4OtT1H
3aQKyU4RzQ18zjnRBXfOqf4BsysYjBNNl3cixDEo9HVmorQnpU4onKzm+IFIIhXL
hiyJK7WC26EM5Y3Khjw3CCEI8SRHypqdAgMBAAGjggLwMIIC7DAdBgNVHQ4EFgQU
jINMiRsip8xdph6P5KcT+Iaqv80wHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjRBRTQ0LzJGMjBC
MEUyQUY0NDExRUI5REUwQkQwN0Y4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY0QUU0NC8yRjIwQjBFMkFGNDQxMUVCOURFMEJEMDdGOEFFQTIy
OC9qSU5NaVJzaXA4eGRwaDZQNUtjVC1JYXF2ODAubWZ0MB4GCCsGAQUFBwEHAQH/
BA8wDTALBAIAATAFAwMCLdgwDQYJKoZIhvcNAQELBQADggEBAEK44rBHkBJ7y2Db
QsMyUppSITrkNAYTrc0i86/cdTA6Lqy2lIt35bPuCv/uDQa19QHAeNCV0h1/O/Zh
/nCx/diNrAKwR0MTOvuJ6j+0/2VDm/up4s5RnjIzWr4ElnSAkY9vwNaJgGssKZzy
DX8Cndac80ceFsrDiXf0+HIYAOY4twArhj4yvwzJPqhM8reROIUioZ+fiSMKwWfs
2DXnsOCi0FUffFkOQldzIKXtQ6R4yelP784g/A1FJl9evrn2q1i66SP1LQIhkucc
N0fDDB6I4e2jqPXQBu0y2Ot+pj9YxgnvLRTjwcd51lJp+BxOqQgmZLWRt1X2/Dx4
P4B5FMg=
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:52:00 2025 by rpki-client