
Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
File: kkLGCS_iI5rNMMSPNawbxN313L4.cer (raw, json)
Hash identifier: 7S0wro3h46JH+rlRCaD53KK9nEvcWhavg/Dftd92I6k=
Subject key identifier: 92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 176B
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:31:23 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 129.205.96.0/19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5995 (0x176b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 01:31:23 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36ECAA2AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:f7:d7:84:37:41:15:30:e8:8d:8c:c1:ac:
62:ed:4e:69:d5:2c:f4:57:61:3d:a8:7a:d2:71:c2:
b5:2e:59:d5:a7:e6:27:f9:4c:61:0f:e2:88:41:6d:
d6:b3:a2:2b:b3:78:8a:7e:06:19:db:b6:0c:9e:50:
de:41:f1:12:4e:16:60:3a:ff:4f:46:57:2c:c5:73:
20:22:ad:e8:d3:63:e1:6a:04:ce:26:b6:70:8e:69:
f8:88:9f:16:b8:cf:e2:4f:e6:89:85:8a:82:67:2f:
95:45:c9:05:cf:e9:be:86:de:2f:a6:cc:61:a0:39:
f3:10:8f:37:b8:34:99:8e:05:36:ec:e7:a7:5b:66:
69:72:5f:f3:e3:14:fb:cd:30:2c:3a:25:6c:0c:64:
56:bf:68:4e:b0:fc:06:7e:48:19:3a:d9:80:4f:e6:
7f:4b:f8:b2:5c:cb:50:1c:54:02:46:3e:f2:90:70:
c6:f2:a4:0b:a2:53:aa:19:9e:38:ad:99:47:9f:64:
cd:71:78:88:a0:2d:c3:94:eb:83:19:0e:65:f6:11:
63:38:c8:0b:e5:eb:e5:8e:97:6f:c9:d0:ec:42:a2:
21:66:07:dc:06:84:ea:84:b5:ca:d7:50:fd:6b:01:
13:5b:b8:0b:80:3f:e7:ed:0b:75:25:00:c9:ff:60:
09:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
sbgp-ipAddrBlock: critical
IPv4:
129.205.96.0/19
Signature Algorithm: sha256WithRSAEncryption
59:c5:c3:58:3b:7e:08:e3:42:3f:05:06:92:d5:9a:99:a3:b6:
47:97:96:9e:db:42:69:27:81:33:4d:da:3f:f7:d5:b3:08:03:
f0:44:91:20:3d:35:ae:b6:47:e5:ac:39:da:b7:6b:b4:ab:38:
51:ec:7e:9e:2a:ca:21:63:6f:c9:c0:93:4b:06:91:62:13:a4:
fb:ea:12:13:d7:85:8b:34:62:86:f8:38:74:91:81:89:e4:58:
53:3e:86:6f:ef:ca:55:d8:c6:ed:f0:83:c4:3c:c2:74:2d:93:
09:2e:0e:ea:96:28:ea:4e:81:25:6b:24:29:dd:ea:07:bd:d0:
5e:a5:e4:5d:11:3b:3e:ab:3a:2d:14:92:28:9a:16:89:1e:a0:
dd:24:a9:f9:98:b9:82:dc:59:2b:a6:03:e2:b4:76:0a:08:b6:
71:d8:14:cb:6f:fb:a0:8c:6c:9a:be:90:8c:52:8c:3c:21:94:
f2:67:dc:21:3d:70:69:3a:3b:85:19:bf:15:8c:f8:06:c6:10:
2b:df:f9:24:c4:ba:4e:62:d4:b4:f9:87:3d:b2:ce:44:27:28:
fb:e7:57:4b:75:2a:6f:b7:2f:8c:f1:74:52:49:1e:ac:ad:9c:
92:78:f5:1a:50:04:e4:50:d4:3d:0a:62:e3:e0:eb:c3:03:6d:
44:b4:f1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:33:27 2025 by rpki-client