Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
File: kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer (raw, json)
Hash identifier: 5WUPiI3ilNQztxlfR98SCJ8OJ8s/ABXCnCCahkY6pcM=
Subject key identifier: 93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 1636
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:31:28 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 146.231.0.0/16
IP: 192.42.99.0/24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 14 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5686 (0x1636)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 00:31:28 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F362AF02AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:69:b7:89:e5:05:78:81:1a:1f:1f:25:d4:
7c:6e:53:25:47:ac:82:ae:d4:9f:89:3f:e8:ed:f2:
d0:6f:eb:7d:0c:80:d3:dc:ba:7d:7c:09:0a:bb:b5:
07:47:1f:4a:81:32:7a:30:d6:46:3c:5d:3d:0c:01:
13:19:5c:e2:c5:9c:85:28:8a:52:14:00:fd:d8:b9:
e3:19:da:fb:4d:58:96:69:d0:2f:6c:50:07:d9:2c:
40:0b:be:b5:c5:4b:31:ce:c9:56:bb:5c:a0:6d:82:
85:8c:7e:cf:af:b4:68:61:35:76:ef:2c:f8:16:0e:
ee:f1:dc:28:cc:eb:cb:6a:ce:2c:01:9b:02:29:aa:
e5:29:9c:fb:0b:e0:7e:42:8f:63:6d:45:77:c6:7e:
46:47:a7:ae:9a:71:e9:26:ae:63:20:58:d4:fc:c7:
8e:ad:d3:c6:1c:54:30:b3:af:99:dc:3d:ba:6c:63:
bc:ac:67:b9:bc:f1:ff:4d:ad:99:d1:45:ea:38:2d:
3b:8d:18:8b:51:88:d5:16:2e:d6:1d:4b:33:fe:45:
aa:0d:da:8a:a5:43:be:17:c8:dd:3e:84:b7:0a:b8:
f1:5a:5a:e4:68:66:82:84:a2:a7:6b:a3:58:a3:70:
06:43:79:9d:ea:26:e9:00:7a:9a:8e:9c:bb:9d:07:
e9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
sbgp-ipAddrBlock: critical
IPv4:
146.231.0.0/16
192.42.99.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f0:70:90:63:09:6f:d6:a3:e8:58:79:46:65:0f:20:a7:6a:
ac:eb:33:63:1d:2d:4a:fd:9b:83:e2:55:b2:e2:52:d9:47:65:
b0:3c:b3:9f:b3:8e:ad:6b:42:f5:6f:61:ca:e5:2e:47:65:c6:
42:e4:50:8d:e1:35:b1:f1:d8:89:e3:0e:eb:c5:d0:e3:97:05:
ba:5f:b3:83:e5:ce:a0:8d:6f:ad:e2:b0:89:7a:3a:dd:e8:24:
c8:84:57:e1:08:1c:58:2d:f0:e8:9c:cb:01:d1:81:d9:52:7d:
25:2f:54:42:bc:f8:00:13:cf:dd:b9:8f:b3:09:3a:6b:08:97:
c2:6a:8e:48:8c:17:ed:4d:ef:de:15:56:64:54:28:61:fc:e9:
93:70:0a:c5:5d:cb:c8:94:e7:e4:ac:cd:6b:1d:95:79:6e:51:
b3:e3:6b:51:a1:b7:54:43:d3:23:a9:15:31:69:e2:fe:2c:94:
c4:d0:61:2c:aa:a0:85:c6:30:5d:84:7f:ed:31:dd:05:df:88:
ad:e3:ce:a1:c2:23:42:f1:f4:ca:e0:38:1d:ba:d0:31:ac:fe:
98:46:f0:a2:bd:31:7d:b6:70:89:0b:c5:49:43:36:21:94:6a:
3a:12:5f:de:31:71:bf:01:1c:a3:da:5b:f3:d3:8f:48:79:09:
1a:55:e8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:43:04 2025 by rpki-client