Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/arin/AgpK8ND-EbcD0R85elNjzQ-6E6Q.cer
File:                     AgpK8ND-EbcD0R85elNjzQ-6E6Q.cer (raw, json)
Hash identifier:          RSYUN/i+g9gqfpvAUCt3kUdRC+olPuLycuPakI7nS4U=
Subject key identifier:   02:0A:4A:F0:D0:FE:11:B7:03:D1:1F:39:7A:53:63:CD:0F:BA:13:A4
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer:       /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial:       1777
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/AgpK8ND-EbcD0R85elNjzQ-6E6Q.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:33:50 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    IP: 156.38.8.0/21

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6007 (0x1777)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ARINTOAFRINIC, serialNumber=B87C5A75F3D957413AB998646946D4541D511455
        Validity
            Not Before: Jan  1 01:33:50 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F36F5D39AR, serialNumber=020A4AF0D0FE11B703D11F397A5363CD0FBA13A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:b5:75:8e:42:16:70:88:20:df:5c:26:d0:
                    e5:83:b6:6b:21:7e:93:35:22:b5:5d:ca:6b:52:f7:
                    89:81:e8:c0:7b:ae:8d:f5:23:18:9b:a3:73:1e:3d:
                    e4:96:0d:6a:97:02:f9:8a:5a:a4:48:af:8c:d3:a7:
                    8d:e8:a2:ed:da:c4:94:0d:ff:14:ef:d7:af:b8:95:
                    bc:f3:fe:f8:7e:f7:1e:1e:65:dc:86:3e:56:5c:29:
                    b7:23:63:c4:e3:a3:74:5d:4a:d2:35:f6:c0:2f:f7:
                    d7:6c:50:a7:19:63:81:d9:4f:58:2a:11:c6:3a:a3:
                    70:9b:3b:c0:8a:39:08:ad:c3:2f:ad:b6:42:93:c7:
                    77:59:6d:09:5f:2d:08:ce:39:14:4c:11:c8:87:f1:
                    04:87:60:bc:45:59:ed:fb:b1:67:52:85:ab:5d:04:
                    37:b7:bf:93:1b:d7:7e:db:cc:a2:2d:72:b2:a7:2c:
                    fb:d9:c0:ca:c8:ce:50:21:07:0a:06:29:fa:71:81:
                    b5:e7:8b:71:e4:b2:19:ec:5a:e2:7f:fe:79:ee:54:
                    e0:21:f6:e0:df:ea:ac:df:fb:6b:dd:ce:c8:cf:f1:
                    fc:03:8e:95:80:f8:91:01:dd:fc:6b:70:2d:24:52:
                    d2:9e:08:f4:fa:6b:cb:fa:10:75:c8:b7:14:6f:4b:
                    aa:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0A:4A:F0:D0:FE:11:B7:03:D1:1F:39:7A:53:63:CD:0F:BA:13:A4
            X509v3 Authority Key Identifier:
                keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/AgpK8ND-EbcD0R85elNjzQ-6E6Q.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.38.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         13:5a:15:be:d2:ec:da:53:84:0c:d8:79:03:f4:d1:da:7a:04:
         57:19:0e:66:2b:bf:f0:f2:86:48:b1:5a:eb:4f:99:62:49:62:
         88:93:ff:78:eb:b4:c1:5c:e7:6d:ca:9e:44:45:1a:b6:3f:f6:
         1b:79:6e:cd:ba:46:54:fd:03:4c:15:8c:74:55:8f:c5:9f:01:
         6c:a5:fa:00:20:f2:5e:b9:ce:ad:85:e0:4b:01:30:01:84:d7:
         99:56:7f:4d:8e:ac:ec:1a:36:81:18:3c:44:26:6e:97:9e:46:
         98:8c:e7:06:7e:54:03:b9:ab:44:5c:2b:f2:99:bf:e7:a0:ae:
         00:1c:ef:48:d3:06:f0:d5:36:9f:ef:a5:76:2e:31:7f:d6:89:
         a8:2f:db:ee:5e:d0:ca:9d:de:be:e3:56:26:b9:51:25:37:c6:
         fe:92:23:d3:89:c3:dd:55:76:79:be:71:ac:dc:51:43:31:44:
         1f:14:73:44:38:78:d0:ec:dc:6c:9a:b5:c5:d9:97:15:2a:e8:
         ad:d8:9f:75:95:52:88:aa:e6:81:70:80:70:d2:2d:d1:be:a0:
         3e:53:92:eb:b8:a0:61:dc:e2:d9:ff:ba:a3:00:8d:97:d8:54:
         81:e4:f3:60:90:21:23:91:3f:e5:c4:3d:9e:1d:b3:53:7b:61:
         29:a2:b4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:38 2025 by rpki-client on console.sobornost.net