Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
File: rHWTnKcrl03kXiFyCNngbn4brAI.cer (raw, json)
Hash identifier: NiN0Iy8G4e7gVYPAs0Z6I+V4MmmxFmfIj6oO3Sj25jA=
Subject key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 1755
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:26:57 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 168.253.216.0/21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 14 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5973 (0x1755)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 01:26:57 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36D8637AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:cf:dd:58:33:27:55:ed:71:fa:84:58:2e:
2d:71:06:66:f8:5b:82:36:aa:8b:a6:93:18:34:8c:
c9:b1:95:31:3c:ea:fd:2f:a3:fa:1f:c2:50:38:e8:
ad:67:8b:ee:05:98:0c:12:29:62:03:8e:af:a3:bc:
27:be:3a:fb:b3:53:b9:2b:3b:01:92:a8:4f:68:bc:
72:50:66:1c:bb:62:58:09:30:97:3d:0f:1f:66:d2:
c9:70:e4:82:f4:39:bc:f4:f1:bc:9f:9e:8a:45:ec:
07:df:03:18:7c:92:84:fa:31:df:b6:54:e4:f8:45:
65:c0:bd:41:f1:a0:ae:ff:f7:b1:be:41:2f:bf:f1:
55:57:4c:9a:8c:21:1a:44:e7:06:94:96:5d:03:4c:
e4:25:bb:c8:3a:55:ac:96:2a:c7:28:71:9c:c2:84:
82:59:85:f3:cb:5b:f2:75:6c:93:45:9a:c5:dc:47:
62:81:8b:d1:15:13:c5:0b:e9:0c:85:c0:79:01:24:
07:72:5b:fe:4f:fb:54:6c:1b:6d:68:37:c9:74:7e:
1f:50:c4:71:ad:4d:24:fc:3e:5d:91:14:aa:b7:f2:
e0:d5:40:29:6d:97:c1:6d:07:e7:6b:76:58:f0:8e:
b1:4b:53:83:5b:56:f8:d5:22:c2:39:a4:96:70:84:
e0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
sbgp-ipAddrBlock: critical
IPv4:
168.253.216.0/21
Signature Algorithm: sha256WithRSAEncryption
91:ea:7b:f2:d3:36:1b:11:70:3f:d0:b6:87:b8:c8:06:73:95:
70:99:2b:a9:f6:99:66:6f:54:b1:04:f7:ca:9b:88:9c:39:e0:
f7:a2:c9:8a:98:49:2e:13:c8:61:9d:19:ce:fd:38:90:69:ae:
7e:9c:f8:b3:3d:bc:a8:f3:2d:29:07:ea:2c:09:33:f8:b7:1e:
fc:fd:e3:0b:df:64:e0:b5:95:5c:0f:12:d3:d5:c4:26:42:15:
29:d2:b1:f8:fa:19:b6:b0:17:15:d9:99:fa:da:05:ae:8a:e6:
40:7f:62:96:6e:b9:71:7e:06:31:12:69:22:94:0b:09:9e:14:
1e:da:4d:52:ed:13:4f:40:30:1b:62:4b:38:d6:94:b0:a1:1a:
35:12:aa:73:7a:45:4d:f2:62:74:34:64:63:04:b7:bd:93:a7:
dd:8a:9e:26:2d:80:01:f6:d4:99:a3:31:bf:79:1f:b6:74:7a:
dd:a4:a6:67:d9:02:b6:5a:c2:ed:81:7e:b5:5b:4e:b4:4d:08:
4a:a4:60:db:1c:49:98:90:ac:61:28:b1:f2:24:56:5c:1e:f6:
62:04:2e:56:3a:65:86:51:ab:d8:51:c5:5d:03:1f:be:17:68:
98:93:de:10:cc:33:a5:ec:0c:71:04:f4:65:1e:de:05:32:01:
87:72:75:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:20:04 2025 by rpki-client