Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer
File: QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer (raw, json)
Hash identifier: QA9g23N/zVNLDBk6UaCkMKYxfI8FnCFVVA/xfay44tM=
Subject key identifier: 41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 1853
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 19 Jun 2025 08:48:56 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 152.111.0.0/16
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 06:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6227 (0x1853)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Validity
Not Before: Jun 19 08:48:56 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36D2FA4AR, serialNumber=4121D28E0BB9EAFEE02003F923AC740C26F58364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a2:67:74:69:0f:75:3e:98:40:46:91:f9:8c:
8f:86:dd:cb:0d:72:43:6b:02:6e:90:a1:b8:c2:dc:
39:4b:d9:ca:bd:4b:6a:5b:41:52:6c:e7:fc:b3:00:
7b:80:42:eb:36:fc:c2:39:8a:c7:01:58:c4:6c:06:
80:af:51:63:08:ed:7d:22:f7:56:35:86:b2:1a:50:
85:4f:6d:d3:89:e0:3b:65:64:12:96:b5:5b:c6:47:
fd:d8:5e:51:f0:05:87:28:87:17:42:5c:ba:cb:39:
02:aa:92:cc:7a:e0:2d:1c:d6:41:25:91:be:3d:a8:
f1:0f:1a:c3:f7:c0:0e:2b:3d:e7:7c:bb:ad:60:70:
8a:be:03:63:90:e2:44:c2:fd:de:f4:41:dd:8a:31:
19:62:07:34:c5:19:41:f3:cd:be:e0:ff:96:da:21:
ca:3f:c7:d2:ae:7f:2a:78:4a:c5:54:1a:6c:58:13:
01:c1:31:d7:72:db:94:cf:75:35:1d:7c:06:f5:21:
43:e3:36:c0:13:c4:72:c2:80:ec:ef:aa:cd:11:1b:
76:67:dd:67:0f:c4:51:1b:a5:7f:bb:15:93:88:14:
17:67:4a:dc:19:ec:e3:a0:6a:e6:81:cc:6f:3d:9c:
58:b5:d1:3c:d8:04:2e:6a:fe:a7:db:b4:c6:07:bc:
24:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
sbgp-ipAddrBlock: critical
IPv4:
152.111.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0e:af:a9:46:72:14:3d:0d:b4:6d:bc:c3:cd:b2:0d:5d:12:a2:
79:a1:76:b6:ba:a2:3c:f8:a5:a0:f7:dd:ae:72:68:d0:47:f2:
3e:8b:95:f8:ee:14:2f:9f:ba:d9:6a:68:ac:1b:3b:55:22:7b:
2e:9e:2d:5d:78:67:0c:1f:18:ab:5c:92:ed:d6:13:1e:79:44:
b6:f9:c2:0c:7f:88:b5:5f:ed:a7:6a:6f:c3:97:39:4b:9a:00:
f1:b6:dd:69:d3:da:4b:2b:91:56:f1:ca:fc:85:6a:1a:c3:4d:
64:02:53:7e:32:6d:15:49:66:cf:77:05:67:f7:25:08:78:3f:
7b:e1:27:3b:17:52:67:91:85:0a:90:ee:ec:c4:48:b1:95:c2:
5a:33:cd:85:26:80:0e:f4:58:76:2f:90:a2:74:51:53:8b:9c:
59:83:b9:4a:fb:cb:ad:07:0a:85:d4:3f:d3:65:af:c0:59:40:
6c:3b:c8:19:06:88:b7:0e:61:52:fb:b5:df:b1:94:7b:79:cb:
ae:80:2b:7c:d6:0b:dd:2e:5d:85:24:f9:e3:84:f3:5c:59:fe:
11:20:01:89:a6:12:c3:24:07:81:4e:1c:86:4c:24:2f:8b:7b:
33:d7:7a:85:61:64:5a:00:08:4b:12:4b:21:d9:e7:8b:97:8d:
e6:21:90:19
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgICGFMwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNTA2MTkwODQ4NTZaFw0yNjAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkQyRkE0QVIxMTAvBgNVBAUTKDQxMjFEMjhFMEJCOUVBRkVF
MDIwMDNGOTIzQUM3NDBDMjZGNTgzNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDoomd0aQ91PphARpH5jI+G3csNckNrAm6QobjC3DlL2cq9S2pbQVJs
5/yzAHuAQus2/MI5iscBWMRsBoCvUWMI7X0i91Y1hrIaUIVPbdOJ4DtlZBKWtVvG
R/3YXlHwBYcohxdCXLrLOQKqksx64C0c1kElkb49qPEPGsP3wA4rPed8u61gcIq+
A2OQ4kTC/d70Qd2KMRliBzTFGUHzzb7g/5baIco/x9Kufyp4SsVUGmxYEwHBMddy
25TPdTUdfAb1IUPjNsATxHLCgOzvqs0RG3Zn3WcPxFEbpX+7FZOIFBdnStwZ7OOg
auaBzG89nFi10TzYBC5q/qfbtMYHvCQDAgMBAAGjggLwMIIC7DAdBgNVHQ4EFgQU
QSHSjgu56v7gIAP5I6x0DCb1g2QwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkQyRkE0LzM0MjVG
QzgwNENFQTExRjA5NDhFRjc5QkRBRTRFQzlDLzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZEMkZBNC8zNDI1RkM4MDRDRUExMUYwOTQ4RUY3OUJEQUU0RUM5
Qy9RU0hTamd1NTZ2N2dJQVA1STZ4MERDYjFnMlEubWZ0MB4GCCsGAQUFBwEHAQH/
BA8wDTALBAIAATAFAwMAmG8wDQYJKoZIhvcNAQELBQADggEBAA6vqUZyFD0NtG28
w82yDV0Sonmhdra6ojz4paD33a5yaNBH8j6LlfjuFC+futlqaKwbO1Uiey6eLV14
ZwwfGKtcku3WEx55RLb5wgx/iLVf7adqb8OXOUuaAPG23WnT2ksrkVbxyvyFahrD
TWQCU34ybRVJZs93BWf3JQh4P3vhJzsXUmeRhQqQ7uzESLGVwlozzYUmgA70WHYv
kKJ0UVOLnFmDuUr7y60HCoXUP9Nlr8BZQGw7yBkGiLcOYVL7td+xlHt5y66AK3zW
C90uXYUk+eOE81xZ/hEgAYmmEsMkB4FOHIZMJC+LezPXeoVhZFoACEsSSyHZ54uX
jeYhkBk=
-----END CERTIFICATE-----
Generated at Tue Jul 1 21:03:13 2025 by rpki-client