Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
File: kz9w25gXuEj4wIYagksQEX3FGSw.cer (raw, json)
Hash identifier: RHpJvv746SZa0EP9pvp1S8qqCoPUX0w1mQo7JvTgDLY=
Subject key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 165C
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:38:51 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 139.26.0.0/16
IP: 164.160.68.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5724 (0x165c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 00:38:51 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F364321AAR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:00:0e:a6:a8:39:fe:99:8d:5b:57:79:81:
4a:9f:c2:ef:ea:2f:6f:3d:94:39:fc:9e:9a:50:6e:
d5:5c:d5:61:03:ce:10:06:76:0d:f0:e1:65:42:4f:
b2:21:79:c6:ee:2d:83:de:83:88:0f:2e:e6:8a:1a:
58:42:a5:8e:78:28:36:61:ba:36:0c:44:e1:71:0c:
aa:d6:56:85:1d:49:2f:b4:2a:8f:01:cd:08:c0:94:
ad:09:c6:af:b2:8c:e6:ea:f0:1f:91:b8:e9:91:8f:
f2:e6:6b:10:ee:d5:a5:bb:c6:e4:d6:83:f6:27:ba:
7d:28:99:6a:32:71:f4:ed:cc:ff:76:e7:43:1b:38:
6b:b7:0c:e5:8f:d6:49:4c:39:41:ea:56:79:ec:70:
fb:18:81:c2:96:27:71:57:55:d7:cd:37:ef:6c:bf:
8d:3d:e4:b6:7a:83:64:87:65:9b:bc:54:9c:8a:18:
00:69:a7:33:3c:ac:bc:d1:13:98:14:58:f0:5e:5d:
aa:0a:d2:07:33:a9:01:15:fb:64:ca:6b:c0:e3:73:
a0:83:56:af:28:49:3d:ab:01:93:3e:9f:f2:fa:09:
53:a1:96:f1:34:cf:33:4f:82:b7:a2:d4:02:d5:67:
7a:cc:3b:fd:97:2c:c5:52:6c:8f:e8:6c:83:88:96:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
sbgp-ipAddrBlock: critical
IPv4:
139.26.0.0/16
164.160.68.0/22
Signature Algorithm: sha256WithRSAEncryption
03:4a:de:f8:cc:bf:9c:3e:ae:eb:72:3f:a0:db:2d:77:4f:e6:
cf:10:38:7f:4a:2e:1f:fd:79:5a:28:25:bc:b2:c6:a2:c7:b4:
68:16:c8:fc:34:95:0e:85:2b:4c:98:2f:4e:f6:54:37:ed:36:
72:b6:11:e1:bb:94:05:a2:37:57:ec:ec:7e:a8:d4:d0:01:dd:
c2:ad:b2:db:f9:de:6e:72:a8:8d:3b:ec:03:13:11:79:23:d2:
1c:bc:ca:63:55:d8:6d:01:06:b7:6f:18:9a:f5:3f:a8:4f:7e:
5b:9e:99:61:a3:4f:eb:fd:ab:a0:a9:cf:9b:7e:5c:2c:f9:c1:
c6:91:d6:2a:c5:70:70:df:51:df:8f:97:2b:6e:e2:b2:dc:94:
53:26:70:1f:5f:36:9e:ad:fa:30:52:03:78:79:9e:b0:bd:bf:
f9:5e:67:63:97:49:78:58:7e:f6:de:d0:fe:ba:f0:bd:07:a6:
66:e9:8f:d1:99:38:1d:19:12:24:df:fa:e6:1e:1c:71:02:6b:
69:d4:a0:b4:ca:d9:33:b4:8c:0c:b1:14:95:ea:1f:e7:8d:12:
12:05:d1:01:68:be:15:3e:b8:e1:ea:c5:ce:e2:37:09:bf:b0:
28:82:1d:df:22:74:78:0c:d7:ee:94:7d:81:00:3f:7e:11:4c:
ed:1d:65:22
-----BEGIN CERTIFICATE-----
MIIGBzCCBO+gAwIBAgICFlwwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNTAxMDEwMDM4NTFaFw0yNjAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNjQzMjFBQVIxMTAvBgNVBAUTKDkzM0Y3MERCOTgxN0I4NDhG
OEMwODYxQTgyNEIxMDExN0RDNTE5MkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQC3hAAOpqg5/pmNW1d5gUqfwu/qL289lDn8nppQbtVc1WEDzhAGdg3w
4WVCT7IhecbuLYPeg4gPLuaKGlhCpY54KDZhujYMROFxDKrWVoUdSS+0Ko8BzQjA
lK0Jxq+yjObq8B+RuOmRj/LmaxDu1aW7xuTWg/Ynun0omWoycfTtzP9250MbOGu3
DOWP1klMOUHqVnnscPsYgcKWJ3FXVdfNN+9sv4095LZ6g2SHZZu8VJyKGABppzM8
rLzRE5gUWPBeXaoK0gczqQEV+2TKa8Djc6CDVq8oST2rAZM+n/L6CVOhlvE0zzNP
grei1ALVZ3rMO/2XLMVSbI/obIOIlsB/AgMBAAGjggL2MIIC8jAdBgNVHQ4EFgQU
kz9w25gXuEj4wIYagksQEX3FGSwwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNjQzMjFBLzQ5M0U0
NjJFQkNEQTExRURBMUZCMEZCMEYxMjIyNDY4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY0MzIxQS80OTNFNDYyRUJDREExMUVEQTFGQjBGQjBGMTIyMjQ2
OC9rejl3MjVnWHVFajR3SVlhZ2tzUUVYM0ZHU3cubWZ0MCQGCCsGAQUFBwEHAQH/
BBUwEzARBAIAATALAwMAixoDBAKkoEQwDQYJKoZIhvcNAQELBQADggEBAANK3vjM
v5w+rutyP6DbLXdP5s8QOH9KLh/9eVooJbyyxqLHtGgWyPw0lQ6FK0yYL072VDft
NnK2EeG7lAWiN1fs7H6o1NAB3cKtstv53m5yqI077AMTEXkj0hy8ymNV2G0BBrdv
GJr1P6hPfluemWGjT+v9q6Cpz5t+XCz5wcaR1irFcHDfUd+Plytu4rLclFMmcB9f
Np6t+jBSA3h5nrC9v/leZ2OXSXhYfvbe0P668L0Hpmbpj9GZOB0ZEiTf+uYeHHEC
a2nUoLTK2TO0jAyxFJXqH+eNEhIF0QFovhU+uOHqxc7iNwm/sCiCHd8idHgM1+6U
fYEAP34RTO0dZSI=
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:58:17 2025 by rpki-client