Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/SfsOFqhdQF1bnyOWCmkJwdfBW38.cer
File:                     SfsOFqhdQF1bnyOWCmkJwdfBW38.cer (raw, json)
Hash identifier:          sJMTbGD1xGIIEI7A+RClyF24Q//yQBWzC1ru7T4Rkcs=
Subject key identifier:   49:FB:0E:16:A8:5D:40:5D:5B:9F:23:96:0A:69:09:C1:D7:C1:5B:7F
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1BAC
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 20 Jul 2026 13:51:53 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 156.38.16.0/20
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7084 (0x1bac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jul 20 13:51:53 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36D987FAR, serialNumber=49FB0E16A85D405D5B9F23960A6909C1D7C15B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9a:d5:e7:07:e9:87:3b:8a:24:fc:a5:e4:50:
                    44:e0:c9:80:f9:8d:e9:d3:34:30:b7:0f:fe:a2:16:
                    52:5f:b8:32:5e:e7:b4:9f:b1:91:eb:cf:f1:7f:ff:
                    ad:ca:6f:ae:96:3c:c9:58:05:7e:4f:a8:0d:2e:5a:
                    e7:0f:7f:07:93:33:23:c8:a5:60:42:fd:fe:6e:af:
                    80:12:08:85:30:d6:c5:5f:f5:0e:2c:bb:44:d5:e4:
                    e5:9d:3a:55:97:05:9c:6b:f0:bf:c0:ef:f2:97:95:
                    d0:ca:ca:37:a3:de:29:86:ed:f1:da:09:1c:37:ad:
                    a6:66:ab:a7:30:ca:73:32:ac:ea:9d:a9:9c:0f:87:
                    25:20:35:a4:db:6b:0a:b6:3c:46:8f:1c:74:41:b9:
                    61:23:ac:60:80:fa:dd:4a:4d:45:4a:e4:f0:37:26:
                    3d:05:b0:aa:37:74:aa:6c:17:fb:05:43:9b:09:ea:
                    59:06:bc:06:f9:36:4b:66:03:87:51:8a:2d:34:a4:
                    6a:90:0a:25:53:56:a8:ce:12:a7:fd:2e:75:33:7f:
                    4f:55:68:a5:48:d7:1a:b3:64:12:40:c0:bf:af:96:
                    40:d5:42:e8:ed:4a:02:7a:4a:a8:c4:0a:ae:22:fc:
                    1f:67:08:49:0a:11:1a:90:42:74:99:99:7c:1f:01:
                    81:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FB:0E:16:A8:5D:40:5D:5B:9F:23:96:0A:69:09:C1:D7:C1:5B:7F
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.38.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         82:e4:8d:e2:d3:2e:84:36:32:0e:2d:00:9f:d2:84:fd:f9:a7:
         7c:f8:a5:14:90:4c:33:d6:1f:7c:6b:44:52:4e:e6:32:03:53:
         d1:c7:06:7d:2e:e3:0c:4b:f8:d2:22:16:38:33:e9:ed:5d:52:
         2e:a2:96:f2:03:63:23:f4:6c:53:5d:05:a6:84:b8:35:07:1a:
         9e:fa:55:80:76:53:67:cd:19:a3:2c:65:fa:1b:7c:31:bd:a8:
         a9:bc:41:dc:7d:2b:6a:be:a4:25:1e:59:71:d1:1f:c5:d4:4b:
         41:1b:cc:7b:e0:ba:79:1c:74:d4:c4:2e:7e:04:d9:57:5a:15:
         85:2b:95:d0:74:f6:72:52:45:4a:bb:0d:94:23:2a:4b:41:a3:
         cb:bd:19:91:7a:cb:9c:38:9f:9e:5f:84:7b:63:79:5a:c4:c7:
         f6:e2:29:10:ad:2b:0e:3d:ac:de:6f:62:45:5e:b2:92:a6:67:
         39:6d:1c:e8:6e:f1:d6:d4:f8:2e:4d:c8:eb:4f:a8:b1:2d:b2:
         14:86:47:8e:de:9d:06:b3:da:48:73:89:fc:f2:d6:20:5d:a1:
         c5:c4:61:01:d5:99:3a:df:47:c7:c6:41:61:8f:38:85:e8:e3:
         8a:e0:2f:80:39:79:84:43:30:12:75:5c:6a:5d:34:ca:37:3c:
         08:09:5a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----