Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/VmuZsSWb_WaDTuJmVk4KreYwXH0.cer
File:                     VmuZsSWb_WaDTuJmVk4KreYwXH0.cer (raw, json)
Hash identifier:          gQg3xhhKDVNI7B5dIFBG1gr2csJe5p2JqhV4Drg8Rus=
Subject key identifier:   56:6B:99:B1:25:9B:FD:66:83:4E:E2:66:56:4E:0A:AD:E6:30:5C:7D
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1B91
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/14D57352739911F199FE7914CF1D38B0/VmuZsSWb_WaDTuJmVk4KreYwXH0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/14D57352739911F199FE7914CF1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 29 Jun 2026 09:01:22 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 169.239.244.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7057 (0x1b91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jun 29 09:01:22 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3652B4FAR, serialNumber=566B99B1259BFD66834EE266564E0AADE6305C7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c0:94:63:a6:6c:e6:ac:cb:0d:64:db:20:ea:
                    4a:c7:64:47:a8:cd:2a:e5:f3:45:93:46:f1:4a:68:
                    ff:50:35:50:ff:bb:18:3f:dc:7c:ee:66:83:e2:d8:
                    da:93:08:44:54:69:ab:cf:fa:12:bb:32:b5:c4:74:
                    23:b6:27:78:7a:f7:76:d4:2b:35:5a:74:dc:ba:c9:
                    2e:4f:85:14:f6:51:14:2d:1e:bf:31:f9:4d:a2:40:
                    96:dd:de:18:0a:57:a0:1c:3c:60:a1:d3:74:9c:75:
                    8f:5c:ee:9c:d6:ca:d6:ce:65:a1:ec:97:6b:93:43:
                    5c:f2:df:26:1c:ae:3f:fa:49:4e:fa:6f:ae:5a:3c:
                    4f:8d:9f:3f:58:b9:7f:88:eb:44:db:95:52:72:2f:
                    66:20:7d:73:86:6d:26:d5:98:4c:00:45:1d:58:08:
                    1d:2f:a1:80:64:01:cf:a2:cb:92:42:dc:d0:7a:f1:
                    68:15:07:85:93:bc:70:76:1c:61:ff:84:b5:17:9e:
                    45:16:00:5a:7b:65:e0:bd:e7:a9:62:23:d5:e6:80:
                    14:31:a4:23:99:57:84:fc:16:1d:8a:d0:57:98:11:
                    35:89:ad:e3:e7:d7:db:f1:44:c6:97:a0:90:e0:86:
                    26:28:12:60:93:7d:e5:2a:52:08:30:3f:a7:f4:50:
                    ee:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6B:99:B1:25:9B:FD:66:83:4E:E2:66:56:4E:0A:AD:E6:30:5C:7D
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/14D57352739911F199FE7914CF1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/14D57352739911F199FE7914CF1D38B0/VmuZsSWb_WaDTuJmVk4KreYwXH0.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.239.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:ae:86:3c:db:f7:3e:4f:41:ff:e1:be:f4:64:db:f0:72:03:
         e5:0c:cd:e2:96:ee:83:f7:f6:7b:d8:79:67:3a:6e:52:de:80:
         9b:62:91:91:75:4a:53:99:3f:e3:a5:b6:a5:3f:4f:cf:8d:c9:
         45:ca:5d:50:b0:9a:b2:d3:7d:9b:c9:15:b4:c5:84:87:2a:65:
         73:b0:6d:69:b0:13:7b:c2:9a:87:b1:45:16:55:4a:c9:8f:00:
         f8:7f:ae:6c:c2:dd:a1:a2:57:eb:a4:2b:b1:59:7f:47:34:21:
         cf:93:4d:34:91:a1:f8:90:e7:c0:e3:b8:a8:ec:4e:31:c8:de:
         c1:19:00:06:2d:3b:aa:9e:1a:7b:b7:46:34:df:0b:68:2b:82:
         4f:54:6b:1e:64:1b:e8:c4:2f:d7:cb:7e:27:6e:1c:57:4e:e0:
         c7:53:f6:89:46:df:12:95:fe:56:03:9c:d9:16:2e:a6:d5:17:
         cc:58:68:9c:21:4d:38:0b:8a:17:9a:d1:7e:08:d1:f8:6d:5e:
         e7:94:13:54:45:fe:b4:c8:96:aa:65:fd:35:42:93:15:95:56:
         c8:93:24:c1:31:62:ea:05:90:e3:d7:52:3e:c1:1b:67:ef:60:
         71:aa:b2:3a:fb:c3:ae:96:a0:73:3d:35:fe:da:16:bb:8b:e6:
         5e:e0:fa:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:14 2026 by rpki-client