Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/zcvJjpNlE8aE4shIajyiDedGU8o.cer
File:                     zcvJjpNlE8aE4shIajyiDedGU8o.cer (raw, json)
Hash identifier:          Fe1tmMKbJD30g46UFj3ri/dwxqcaiKWMYFYhbW1Ze20=
Subject key identifier:   CD:CB:C9:8E:93:65:13:C6:84:E2:C8:48:6A:3C:A2:0D:E7:46:53:CA
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1B2C
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F365B85A/064EA7CC2E7011F18AC3E3CFDAE4EC9C/zcvJjpNlE8aE4shIajyiDedGU8o.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F365B85A/064EA7CC2E7011F18AC3E3CFDAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 02 Apr 2026 08:43:38 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 169.239.24.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6956 (0x1b2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Apr  2 08:43:38 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F365B85AAR, serialNumber=CDCBC98E936513C684E2C8486A3CA20DE74653CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:35:fb:cb:41:5d:9c:16:09:99:70:84:2d:b3:
                    c7:f5:f8:4e:5f:30:91:56:ca:24:9e:bc:7f:a5:59:
                    35:f4:48:5a:74:e8:2a:d6:d6:8a:f0:eb:b9:24:52:
                    0e:e2:68:b8:e3:f5:38:75:b1:27:29:66:68:71:a9:
                    83:80:0c:ee:d2:0d:7a:bf:5b:48:18:82:a8:a4:a1:
                    11:ab:05:c5:22:c1:0d:eb:2e:3e:88:23:51:ad:5b:
                    47:67:d8:a0:c7:bb:2c:3a:e1:95:d9:ef:74:f7:65:
                    8e:a0:4a:65:18:bb:92:98:42:0b:27:18:7e:f1:f9:
                    97:63:9d:b2:b1:c3:6d:32:c9:f4:12:97:16:f3:c7:
                    d1:f0:ac:6a:38:41:61:60:09:0c:95:54:38:e0:04:
                    84:4b:db:32:6a:b4:0d:74:51:98:45:09:46:6a:ab:
                    9b:22:af:49:fc:88:c2:d2:19:7e:a3:5d:72:65:f1:
                    3f:76:90:17:c3:7d:0e:dd:93:a6:7e:ff:53:67:44:
                    5b:8a:9f:60:f5:65:17:42:a9:dc:03:4d:ff:a5:8c:
                    fb:d1:c0:f0:5f:0c:c6:67:a4:a0:af:05:d1:e9:47:
                    e5:75:71:c7:c5:6f:2d:84:1b:18:a7:0e:8d:aa:d6:
                    d4:22:d0:d2:ce:87:82:7f:b2:44:cd:78:26:84:26:
                    40:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CB:C9:8E:93:65:13:C6:84:E2:C8:48:6A:3C:A2:0D:E7:46:53:CA
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365B85A/064EA7CC2E7011F18AC3E3CFDAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365B85A/064EA7CC2E7011F18AC3E3CFDAE4EC9C/zcvJjpNlE8aE4shIajyiDedGU8o.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.239.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:59:ca:da:66:3e:b8:65:47:e3:9c:38:e3:77:a9:f5:cf:0f:
         bd:57:20:2f:fa:01:2e:9b:de:18:6c:dc:8e:d1:27:a5:eb:df:
         ab:ff:bd:39:6a:0f:6f:20:f4:8c:72:1b:d5:71:28:85:78:30:
         be:ae:0f:be:a4:63:d2:20:fd:6b:f6:60:f2:2c:70:7b:cb:e1:
         f7:92:5a:23:07:4d:18:e9:ca:d7:ed:c7:64:cf:56:99:4b:0c:
         dd:e4:d6:1f:c0:6a:0c:5d:2a:74:b0:16:47:19:a4:62:5f:16:
         83:85:cb:05:89:99:df:90:38:10:56:ab:d5:3a:84:07:f5:cc:
         9b:2d:8f:25:96:a4:0f:de:fd:d6:c9:bc:d5:33:a0:52:78:12:
         df:6f:a2:3d:27:14:da:18:8b:ee:f0:87:fb:dc:9c:37:8c:84:
         da:ba:f2:f2:5e:11:b8:d9:79:17:1e:84:d9:c8:32:d4:fa:b1:
         cf:ad:75:77:73:41:0f:fa:87:0f:ba:d0:cf:70:32:c8:b3:76:
         19:ac:9d:20:2b:18:d9:27:de:7d:a4:b3:e1:b2:34:46:d4:6f:
         68:5d:36:57:81:8a:2a:4c:1c:9b:9d:9f:11:99:c5:e5:6f:ba:
         d7:1b:c7:35:d2:95:10:62:13:7d:6b:ef:05:80:5f:57:99:2b:
         24:0e:d0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:10 2026 by rpki-client