Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
File: xkc2Jerv1nNskH0jHdnF29ufXqs.cer (raw, json)
Hash identifier: 1mr0OBkeQxt0qCf0ejHiNj4vZtfCJyyZoHqJUnvmRj4=
Subject key identifier: C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 177F
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:35:28 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 160.120.0.0/16
IP: 160.154.0.0/15
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 14 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6015 (0x177f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 01:35:28 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36F731FAR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:02:aa:a0:f0:db:3c:79:bd:80:07:ac:19:aa:
15:b8:c1:36:dd:94:81:3e:7f:42:a2:20:7e:43:2c:
ca:08:cf:54:9f:55:a6:af:39:21:9f:d5:1a:b5:d7:
aa:10:16:fa:a1:88:25:e0:81:96:d0:d7:b0:c8:ef:
1c:90:e4:ca:9f:bb:b6:e8:f5:73:55:95:40:6c:51:
89:fd:6c:ad:a1:53:81:4b:76:03:25:61:38:51:8b:
85:06:22:95:30:1a:0b:2f:c5:35:2d:02:9f:42:1b:
82:95:c8:22:b0:b6:89:75:10:28:43:04:0f:7f:1d:
c4:8d:8d:c3:9b:29:a6:4b:9c:f1:d5:6d:3f:66:54:
80:2d:51:28:df:ec:4c:2f:17:d0:61:f3:49:f8:8b:
c3:3a:68:eb:ad:41:f2:1a:84:33:96:31:0b:79:1a:
60:5b:a0:49:3f:0d:1b:0f:7c:34:dc:fc:22:3b:05:
00:09:7b:01:22:0a:17:0f:ce:43:fe:d8:c3:ab:eb:
ea:7a:8f:ec:5b:e9:be:9a:24:fa:fa:a0:2d:7d:6a:
9d:86:8c:73:c6:81:4f:df:90:a7:c7:4f:b4:a2:04:
3b:72:32:d6:82:2b:78:01:61:c5:ba:6b:44:2e:ba:
44:8a:d1:01:59:16:38:a9:14:36:6f:5f:59:d9:43:
a5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
sbgp-ipAddrBlock: critical
IPv4:
160.120.0.0/16
160.154.0.0/15
Signature Algorithm: sha256WithRSAEncryption
32:00:0f:f9:c1:2d:11:3c:fc:1c:92:87:99:5f:e1:79:b0:c4:
aa:06:74:2b:a3:d6:9c:66:c4:00:5d:49:e8:30:e6:f2:b9:59:
ca:f8:97:63:81:bf:6c:66:91:6f:bf:3a:09:67:0f:80:b9:26:
4c:d0:d7:47:25:1f:9d:1e:54:48:58:8b:98:74:55:d1:29:f6:
23:eb:ac:d4:68:73:ae:66:aa:0f:f1:cf:da:6d:21:c5:b5:bb:
fd:a1:5b:dc:5b:7f:92:3b:0f:df:e8:1d:51:54:a8:28:61:6e:
03:e3:24:4d:ab:93:bb:47:ed:3d:35:d0:78:8a:60:82:87:fb:
85:7c:39:92:be:f5:47:2b:01:a6:f3:ca:ff:0f:37:6b:d3:5e:
04:b3:c7:57:95:ea:f5:34:47:5e:7e:41:b5:20:54:b9:88:ab:
16:1b:98:8b:e1:53:bc:73:e2:4a:87:36:d8:2f:ab:cd:e1:08:
8d:15:88:05:f6:29:c0:fa:eb:f6:23:aa:66:60:ea:91:3f:13:
ef:ed:27:58:69:a1:5c:75:4a:87:f4:a2:54:4c:74:bd:da:f0:
cf:45:d2:15:89:2a:58:65:75:d2:48:20:91:ec:d7:32:ee:a6:
0d:fe:0c:c2:73:bc:d5:e9:bb:90:57:f2:3a:0e:77:af:74:6a:
88:09:64:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:36:18 2025 by rpki-client