Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
File: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer (raw, json)
Hash identifier: ++ezUziSp2rGFKzjTxwzDtLmynaFofU3b5xF4Yekb7M=
Subject key identifier: 94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 1787
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:37:07 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 45.221.192.0/21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6023 (0x1787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 01:37:07 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36FA5EAAR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dd:68:22:15:76:0e:87:41:bc:8f:a1:f4:5d:
d1:4c:a3:c1:16:1a:90:f1:99:30:1d:5f:78:9a:6e:
89:09:45:c4:15:d7:90:e2:86:13:5a:ce:48:39:66:
7d:90:08:32:42:c8:f9:d9:00:55:10:5f:62:0f:a1:
8c:bf:51:2b:9a:76:5e:b8:a2:29:3e:73:d8:83:a3:
dd:ac:3a:d9:7c:25:7e:70:c0:53:95:a1:88:e5:8d:
2e:7c:9d:66:0a:57:1f:0f:f0:c6:3c:a3:be:23:bc:
56:46:2d:67:d0:d8:cb:94:ad:46:12:4e:d5:fa:97:
99:67:0e:ff:c8:48:5b:33:f9:a8:f4:56:84:e5:f9:
c7:75:4b:b4:eb:e6:3f:87:5e:09:08:86:a9:61:71:
46:f9:4d:5a:b6:0c:f7:85:33:63:10:de:d6:fb:62:
76:7a:df:db:85:ac:02:10:06:ed:ee:2d:2e:9b:db:
5a:82:fa:ab:e8:3c:e6:eb:6c:08:9c:69:2d:b3:47:
66:de:d2:15:a0:e0:a4:78:46:1c:8d:69:37:7d:14:
fc:96:34:94:91:26:82:eb:c5:5a:89:2f:72:bf:6f:
fc:33:c8:f9:ab:38:02:a9:bd:54:fe:27:c2:02:a6:
14:98:1b:18:7c:8a:5c:f8:7c:06:96:a0:ff:32:05:
6f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
sbgp-ipAddrBlock: critical
IPv4:
45.221.192.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:a8:fe:63:35:77:bc:76:72:e2:0f:68:b6:f7:b6:8a:2d:5b:
ec:3b:0e:04:29:6a:9a:22:6b:c9:29:79:d8:89:20:f7:f7:95:
d1:66:74:a2:74:17:07:a2:30:6e:49:ea:a2:de:33:c7:55:e4:
b4:5b:71:fd:36:b7:30:6f:43:77:4e:9a:78:fc:c0:cc:53:91:
bb:ef:35:a6:6b:bf:84:2d:c5:9f:ae:a8:db:f8:ad:9d:de:02:
36:d9:8f:72:30:c4:54:18:c1:c7:8e:3d:cc:91:f2:21:ae:24:
75:24:97:eb:15:84:8b:4b:c2:9c:01:3a:dd:f5:9e:7b:e9:42:
9d:43:ea:cd:e8:ba:7d:1f:6d:45:85:df:73:59:fb:d2:c6:76:
0e:b8:5e:ac:3c:b4:ec:16:d2:46:5e:3e:71:ab:2a:da:49:69:
b2:d6:4f:aa:cb:33:fc:cc:0f:d1:39:20:40:33:13:cf:9f:6b:
f3:d1:c4:5e:0a:5a:9b:47:bd:0b:8d:cf:13:38:8c:ae:86:bc:
29:38:a3:09:f2:62:df:4c:0c:04:b8:f5:31:44:64:b9:92:73:
ec:6e:59:6e:81:f6:8d:d8:63:ce:f9:32:e8:34:fc:f2:6c:29:
b6:24:13:58:db:05:4a:24:03:6c:13:94:56:96:c6:ff:b1:96:
49:78:8c:2c
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgICF4cwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNTAxMDEwMTM3MDdaFw0yNjAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkZBNUVBQVIxMTAvBgNVBAUTKDk0NzdGMEU0NzVBNzQ3Rjk2
QzU2MTYyMTY3RjBDMTZGOTlDNDgzQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDb3WgiFXYOh0G8j6H0XdFMo8EWGpDxmTAdX3iabokJRcQV15DihhNa
zkg5Zn2QCDJCyPnZAFUQX2IPoYy/USuadl64oik+c9iDo92sOtl8JX5wwFOVoYjl
jS58nWYKVx8P8MY8o74jvFZGLWfQ2MuUrUYSTtX6l5lnDv/ISFsz+aj0VoTl+cd1
S7Tr5j+HXgkIhqlhcUb5TVq2DPeFM2MQ3tb7YnZ639uFrAIQBu3uLS6b21qC+qvo
PObrbAicaS2zR2be0hWg4KR4RhyNaTd9FPyWNJSRJoLrxVqJL3K/b/wzyPmrOAKp
vVT+J8ICphSYGxh8ilz4fAaWoP8yBW+TAgMBAAGjggLxMIIC7TAdBgNVHQ4EFgQU
lHfw5HWnR/lsVhYhZ/DBb5nEg7swHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkZBNUVBLzIwOTg5
MzBDMzhCMjExRUQ5MERCMkVEQ0YxMjIyNDY4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZGQTVFQS8yMDk4OTMwQzM4QjIxMUVEOTBEQjJFRENGMTIyMjQ2
OC9sSGZ3NUhXblJfbHNWaFloWl9EQmI1bkVnN3MubWZ0MB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQDLd3AMA0GCSqGSIb3DQEBCwUAA4IBAQB9qP5jNXe8dnLi
D2i297aKLVvsOw4EKWqaImvJKXnYiSD395XRZnSidBcHojBuSeqi3jPHVeS0W3H9
Nrcwb0N3Tpp4/MDMU5G77zWma7+ELcWfrqjb+K2d3gI22Y9yMMRUGMHHjj3MkfIh
riR1JJfrFYSLS8KcATrd9Z576UKdQ+rN6Lp9H21Fhd9zWfvSxnYOuF6sPLTsFtJG
Xj5xqyraSWmy1k+qyzP8zA/ROSBAMxPPn2vz0cReClqbR70Ljc8TOIyuhrwpOKMJ
8mLfTAwEuPUxRGS5knPsbllugfaN2GPO+TLoNPzybCm2JBNY2wVKJANsE5RWlsb/
sZZJeIws
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:37 2025 by rpki-client