Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/iNIzyaKwFij9KfyxIJhpkPWebZs.cer
File:                     iNIzyaKwFij9KfyxIJhpkPWebZs.cer (raw, json)
Hash identifier:          2uB25rd4+tqDHwvPCsI0oBx1NF7NtgfIaTGstLN49zY=
Subject key identifier:   88:D2:33:C9:A2:B0:16:28:FD:29:FC:B1:20:98:69:90:F5:9E:6D:9B
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1B36
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 09 Apr 2026 11:20:39 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 160.119.248.0/21
                          IP: 169.239.180.0/22
                          IP: 169.255.56.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6966 (0x1b36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Apr  9 11:20:39 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3636791AR, serialNumber=88D233C9A2B01628FD29FCB120986990F59E6D9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:45:c8:21:4f:14:14:e0:59:7e:9b:d4:df:72:
                    f8:14:8a:74:36:20:30:a5:4e:d2:5b:0e:54:2b:bb:
                    e8:c3:65:10:36:8d:7a:52:87:2b:7c:77:90:70:95:
                    72:79:b4:46:d1:c6:27:2d:e8:42:82:49:cf:f4:47:
                    23:23:bd:bd:4e:f4:e8:94:bc:94:25:6e:8c:26:5b:
                    76:8e:1d:4b:75:8a:f1:e2:b7:dd:af:06:e1:a0:c9:
                    4e:fb:8f:54:b9:2c:e6:26:2b:1c:67:78:d9:67:42:
                    8e:1f:99:f8:bc:7e:c8:22:bf:7c:7b:c6:b0:70:92:
                    e9:70:89:df:65:a4:82:09:d3:fc:7b:33:04:ba:d6:
                    5c:9d:fd:69:f0:8b:bc:17:a2:18:2e:cf:1a:43:82:
                    68:78:62:3b:dd:0d:3e:dc:d8:3a:dd:2e:91:16:d5:
                    2c:bb:e5:25:30:3c:1a:7e:f0:c7:0e:c0:50:c5:62:
                    df:35:63:41:b3:5b:8f:9a:0d:42:00:ff:b6:34:82:
                    5b:19:0b:20:fe:b3:56:62:1d:9b:5e:c2:56:ba:99:
                    61:be:1f:1c:0a:37:88:ad:9b:1b:c9:23:5d:fe:c3:
                    73:4b:ea:2d:bc:5d:ab:c5:60:18:7e:dd:dd:4b:dd:
                    46:de:94:26:cc:0e:5d:32:ee:4b:49:be:e4:2a:c4:
                    d5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D2:33:C9:A2:B0:16:28:FD:29:FC:B1:20:98:69:90:F5:9E:6D:9B
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/1EB3CAE0340611F1AB5944C9CE1D38B0/iNIzyaKwFij9KfyxIJhpkPWebZs.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.119.248.0/21
                  169.239.180.0/22
                  169.255.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:1c:5b:13:db:61:0f:2f:ed:01:88:56:d0:6c:1b:8d:9a:1e:
         ee:49:52:e2:5d:30:84:da:c5:0e:1c:8b:78:01:97:58:aa:03:
         a4:a5:7a:ed:78:04:bb:db:fe:c7:53:73:d1:fd:06:1f:74:4d:
         3c:46:3b:ef:0f:ce:93:f6:35:94:ad:1f:d7:f7:0f:80:03:af:
         22:06:af:9b:e7:e8:f0:e7:b1:97:69:e0:40:60:e8:1d:fa:1b:
         d9:07:27:a2:09:35:6c:e7:19:04:78:30:c4:54:1a:4c:d7:b9:
         ab:81:b4:02:fa:c5:23:51:e2:f3:23:52:b2:0b:0f:f8:45:f4:
         97:0d:e7:52:37:8d:74:d1:cd:2d:08:75:20:b4:4a:17:91:06:
         ca:17:79:ec:29:50:12:15:66:dc:1d:da:67:64:0b:b3:af:cd:
         30:0e:e2:27:40:3e:94:4d:e2:a1:8d:b9:3b:22:ff:98:91:7d:
         94:cd:c8:4d:25:bc:f9:95:c1:e7:ef:d1:c8:88:ec:ec:36:49:
         bc:13:db:53:ca:f4:e9:41:19:44:80:1c:91:f5:26:14:e7:be:
         67:33:69:32:15:a8:49:79:81:f5:dd:16:40:30:6b:50:aa:67:
         90:06:80:3c:68:86:c9:6a:82:b4:8a:35:fa:e4:04:e7:de:5e:
         df:93:1a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:09 2026 by rpki-client