![](/console.gif)
Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
File: xcFCD1BxamsUb136joK_0eTdmRA.cer (raw, json)
Hash identifier: KukzodLd8M26fb5j7BFJINPceYjU6na5C4ydx6pcX3k=
Subject key identifier: C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 17A8
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 16 Jan 2025 21:38:31 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 160.226.184.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6056 (0x17a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 16 21:38:31 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36CFBB0AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6d:52:cf:0f:77:f0:3e:f6:aa:e5:3c:30:c3:
60:86:4c:0e:24:1c:77:ae:ae:9d:09:0b:58:cb:1b:
36:c0:37:47:86:0f:8d:1d:97:1b:cd:2e:0c:a9:f7:
3f:98:50:91:c2:fb:c3:ae:06:6f:ec:ae:40:14:4a:
e4:87:e9:47:aa:cd:b1:66:2f:d4:54:5e:05:45:9e:
46:ff:8a:17:1e:20:ac:24:eb:f2:8f:3a:95:ea:e6:
d5:7d:f4:d2:2c:21:30:c5:6c:e3:f4:fa:7e:23:7a:
cf:45:e3:99:a8:cb:33:6c:ea:3a:3f:3a:9e:28:58:
eb:12:8c:fb:a7:8c:d6:75:21:7c:6b:2f:4f:cd:e2:
f8:5c:5d:46:b7:76:d0:66:a7:4a:c0:b4:a5:fc:80:
82:b1:97:c5:2b:c8:a4:19:d7:f0:2f:a5:71:72:60:
76:52:eb:cd:98:02:86:ba:2b:8f:92:6c:32:55:81:
d7:b5:36:09:5a:6d:fa:1d:79:73:69:5e:53:20:9b:
fc:11:91:cc:7b:ac:9a:66:70:9e:eb:3d:f6:9e:05:
b4:2f:fb:5b:c3:ed:90:a3:c0:27:49:bb:ec:2f:60:
5a:4c:c9:bf:87:3d:b7:5b:f3:88:b1:14:f5:5d:c5:
99:3a:0b:fa:e7:c7:9e:1e:87:8e:1a:f9:ba:1e:bd:
be:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
sbgp-ipAddrBlock: critical
IPv4:
160.226.184.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:6c:9f:e2:fd:4a:cd:6d:a1:5e:b3:aa:5d:1d:c0:f8:98:49:
de:6c:60:27:f6:0f:8e:e6:b7:bd:6c:4e:ba:77:75:63:38:d4:
7a:72:30:11:83:47:69:54:63:e0:02:9e:5b:d1:46:c6:aa:af:
dc:e1:74:e7:67:df:da:9c:d5:fa:af:ce:8d:5b:4f:f1:b8:b7:
29:4b:f0:1c:5e:1d:c9:0c:dc:85:f2:e3:00:83:a8:cd:eb:e6:
6d:d8:dc:a2:bb:f0:f6:01:27:98:15:a9:ae:51:01:e7:1a:c5:
4c:0d:bb:45:a7:0e:fe:51:a6:53:86:d6:1f:65:a7:0b:70:85:
9e:d7:58:f7:98:13:bc:1c:79:17:6b:cd:2d:4a:de:a2:5e:00:
a6:c4:71:09:14:87:88:97:0e:4e:0c:ef:ac:76:19:4e:0f:12:
a8:9b:65:84:44:c7:2e:ec:b6:b6:6f:0e:bb:5a:1b:8f:07:11:
bc:13:69:e0:ec:21:9c:81:9f:93:cc:cb:a2:74:2c:eb:27:86:
3d:d6:86:ea:09:95:42:b0:f9:45:2f:50:2d:33:ce:ff:e2:b4:
93:2c:81:68:f2:07:15:f8:c1:5f:f7:75:95:73:ae:2a:75:7b:
08:2e:ad:67:6c:e3:be:fa:90:e7:b1:ba:a6:3d:4a:4d:05:75:
cb:20:56:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 22:50:43 2025 by rpki-client