Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/h8-Zp1BB2KogpZoYRQXHgDDo2E4.cer
File: h8-Zp1BB2KogpZoYRQXHgDDo2E4.cer (raw, json)
Hash identifier: 9QKo7e7eVEixALXvHM9kRWPgJFGyR/3ubmBEjRdVFXo=
Subject key identifier: 87:CF:99:A7:50:41:D8:AA:20:A5:9A:18:45:05:C7:80:30:E8:D8:4E
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 1895
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 13 Aug 2025 11:12:54 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 165.90.0.0/19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6293 (0x1895)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Validity
Not Before: Aug 13 11:12:54 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3658AF9AR, serialNumber=87CF99A75041D8AA20A59A184505C78030E8D84E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:f7:ce:d2:86:e7:0e:d6:10:71:cc:da:4f:
60:3f:b6:83:93:77:26:60:ae:4a:9c:db:0b:ef:34:
04:a5:b1:27:b0:c6:00:e4:ab:2d:d6:29:ae:23:ad:
c4:fa:d8:b5:02:22:48:52:33:f7:8e:02:89:3b:91:
aa:ed:e3:ba:39:19:1d:f0:fa:13:7d:90:19:3b:34:
3c:b3:40:bb:58:2c:04:11:9d:31:48:09:eb:49:18:
db:d2:4e:7d:ed:1c:3e:6c:86:ca:15:d0:95:b5:3c:
61:30:d6:54:f6:4f:77:8a:05:16:04:e2:9c:24:f0:
fa:71:19:24:f7:22:59:ba:e5:28:22:98:7e:42:7d:
b2:e2:89:a8:65:ff:4e:ae:30:47:35:3c:49:bb:e4:
8c:66:19:77:f6:75:3c:d2:9b:c1:68:fa:d0:ab:36:
c6:2b:99:bd:28:d1:75:4c:69:c8:54:00:14:c1:62:
fc:46:73:aa:4d:02:8b:f9:29:b5:64:4a:2c:10:06:
f4:89:08:f6:28:67:42:0a:0e:65:6f:19:88:23:db:
58:96:9e:b8:30:c1:43:49:36:37:68:1a:79:78:2f:
c8:54:be:17:df:2e:5c:20:4f:d1:27:80:ad:d9:1b:
cf:f3:1b:9d:c0:94:46:cb:8c:2c:eb:7c:7a:d0:83:
71:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CF:99:A7:50:41:D8:AA:20:A5:9A:18:45:05:C7:80:30:E8:D8:4E
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/708FB50E783611F0AA85DCE3DAE4EC9C/h8-Zp1BB2KogpZoYRQXHgDDo2E4.mft
sbgp-ipAddrBlock: critical
IPv4:
165.90.0.0/19
Signature Algorithm: sha256WithRSAEncryption
63:7d:4f:8c:b5:a3:16:86:08:0a:ca:7e:ed:49:51:7b:af:cd:
62:15:af:48:1d:30:9a:7c:77:02:c6:05:d7:26:1d:b5:0a:ea:
76:f5:f6:3e:79:30:7b:67:d5:a1:1e:06:8d:86:0e:91:1b:56:
67:b8:b5:43:98:dc:b5:e5:fe:0b:5b:a5:fe:74:a9:ab:c0:28:
04:e4:40:6d:02:8d:3d:a1:9d:fc:e3:9f:04:71:31:2d:27:62:
d2:8a:07:59:09:67:82:89:60:5b:8b:fa:fc:a8:f3:da:5f:4e:
17:bf:61:cf:3a:23:02:64:0b:02:d8:e7:27:ad:91:d1:5a:f7:
13:17:ff:c5:bc:f9:ce:95:80:2e:ce:7e:78:cd:52:0c:e0:61:
6f:fb:c2:99:ad:c3:24:a9:b4:f4:3c:c6:a4:e2:be:8b:2d:22:
53:f6:64:64:64:cd:d1:d0:30:d1:bd:ef:b9:dd:17:9d:c7:58:
c6:d3:c7:a5:e3:4e:cd:69:14:c3:0f:1d:fe:ee:dc:4e:10:16:
6d:9c:fc:c0:82:14:31:df:2b:44:69:fb:79:ed:bf:65:66:97:
06:c7:78:3f:2c:1a:b2:97:25:e2:a9:2f:6f:81:1e:31:0b:ee:
3f:95:cf:46:f9:da:83:45:38:8c:06:bb:d7:05:81:39:c1:73:
85:41:23:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:29:14 2025 by rpki-client