Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
File: 0YHpHtFz9k17-C2OC--ZTVmG31I.cer (raw, json)
Hash identifier: jUTfgfJ6X80Z5g5g7nltOrjmLLVAKOz+ihmFNScM5zk=
Subject key identifier: D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 310D
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:52:49 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 102.217.136.0/22
IP: 102.219.12.0/22
IP: 2c0f:1900::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12557 (0x310d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 03:52:49 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3693944AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:45:5d:f9:f5:d5:b6:bf:fb:a5:37:db:83:87:
fa:0a:c6:82:03:75:1c:0e:05:ae:a8:37:37:24:54:
73:cb:2e:5c:e0:50:f0:10:d9:40:cd:f0:67:6e:63:
05:ee:07:dd:65:bb:e8:b0:cf:12:bc:23:c7:f4:4b:
d6:4f:43:18:8d:1f:50:44:3a:d5:40:31:63:6c:a8:
bb:40:44:46:67:28:bd:ce:54:d0:ab:8c:39:52:2c:
bf:7a:3b:d0:99:b6:d7:67:dc:71:37:8c:d2:b5:cc:
02:e2:c8:a1:56:ee:d1:f2:f5:f3:17:48:6e:80:9d:
d0:8c:2f:10:a1:70:ac:cd:0e:37:43:ae:60:de:5b:
2d:c7:bb:e2:80:85:84:0a:dc:4d:28:2c:8b:cc:cd:
90:6f:33:79:20:c0:a5:6b:fe:2f:35:46:08:a5:72:
5f:af:9a:ff:bc:21:56:53:1a:44:b0:50:32:d8:0a:
4a:0e:9e:d8:1d:2c:b1:33:e2:52:07:47:fc:96:bf:
1e:e8:46:b2:70:ee:ad:e7:c1:95:d9:5f:cf:25:65:
83:dd:c4:16:ce:4e:5c:18:6c:6b:f5:c9:49:ea:a8:
45:4b:a8:7e:01:8d:ed:75:94:56:3d:09:db:d0:50:
12:68:33:45:5c:c3:77:70:ea:cd:e4:49:50:c9:12:
e0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
sbgp-ipAddrBlock: critical
IPv4:
102.217.136.0/22
102.219.12.0/22
IPv6:
2c0f:1900::/32
Signature Algorithm: sha256WithRSAEncryption
c3:b9:bc:b0:11:da:7d:43:31:a7:fc:fd:b6:b3:ab:36:2e:c8:
19:65:5f:f3:6d:9b:2f:1f:e5:90:73:7d:5a:05:99:ad:9b:d4:
dd:7e:48:bc:c8:2d:90:92:22:a6:ba:5e:17:d0:c9:31:d1:d5:
74:f4:8a:08:34:05:d7:d7:7f:09:26:98:aa:09:d3:86:db:73:
9a:63:36:44:90:e4:e2:14:c4:0d:97:73:a3:4d:3b:07:5f:42:
db:19:f2:99:60:1f:ba:77:88:78:bb:bf:8d:c5:f0:94:8b:af:
46:fa:f5:cf:e9:c2:67:5f:67:a5:51:12:53:a1:0f:90:ac:3e:
af:03:80:8d:de:05:3c:9b:e0:58:91:27:0c:40:6d:9e:7d:c1:
97:0f:bc:39:65:52:3c:68:1c:26:28:b7:6a:9f:aa:cb:8f:c0:
cd:cd:51:d5:c3:a7:bb:97:c3:50:b0:0a:29:d3:90:1a:12:8b:
16:5e:e4:99:62:1f:d6:8b:2d:d5:d0:2e:5a:08:dc:4b:0b:48:
91:e5:93:0b:0f:67:8f:17:80:12:19:ca:2b:66:cf:60:9c:06:
cc:00:d6:e3:14:4e:cb:92:32:ee:99:55:20:10:48:56:7d:50:
2d:75:70:02:07:c3:57:07:55:a0:cd:c8:7b:57:3b:24:16:f8:
5f:97:3b:13
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgICMQ0wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMzUyNDlaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjkzOTQ0QUYxMTAvBgNVBAUTKEQxODFFOTFFRDE3M0Y2NEQ3QkY4MkQ4
RTBCRUY5OTRENTk4NkRGNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDeRV359dW2v/ulN9uDh/oKxoIDdRwOBa6oNzckVHPLLlzgUPAQ2UDN8GduYwXu
B91lu+iwzxK8I8f0S9ZPQxiNH1BEOtVAMWNsqLtAREZnKL3OVNCrjDlSLL96O9CZ
ttdn3HE3jNK1zALiyKFW7tHy9fMXSG6AndCMLxChcKzNDjdDrmDeWy3Hu+KAhYQK
3E0oLIvMzZBvM3kgwKVr/i81Rgilcl+vmv+8IVZTGkSwUDLYCkoOntgdLLEz4lIH
R/yWvx7oRrJw7q3nwZXZX88lZYPdxBbOTlwYbGv1yUnqqEVLqH4Bje11lFY9CdvQ
UBJoM0Vcw3dw6s3kSVDJEuBvAgMBAAGjggMEMIIDADAdBgNVHQ4EFgQU0YHpHtFz
9k17+C2OC++ZTVmG31IwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5Mzk0NC8xNkFBOEE0NDIwNzYx
MUVDQjMwNjA5MjVEOEEwMTRDRS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTM5NDQvMTZBQThBNDQyMDc2MTFFQ0IzMDYwOTI1RDhBMDE0Q0UvMFlIcEh0
Rno5azE3LUMyT0MtLVpUVm1HMzFJLm1mdDA0BggrBgEFBQcBBwEB/wQlMCMwEgQC
AAEwDAMEAmbZiAMEAmbbDDANBAIAAjAHAwUALA8ZADANBgkqhkiG9w0BAQsFAAOC
AQEAw7m8sBHafUMxp/z9trOrNi7IGWVf822bLx/lkHN9WgWZrZvU3X5IvMgtkJIi
prpeF9DJMdHVdPSKCDQF19d/CSaYqgnThttzmmM2RJDk4hTEDZdzo007B19C2xny
mWAfuneIeLu/jcXwlIuvRvr1z+nCZ19npVESU6EPkKw+rwOAjd4FPJvgWJEnDEBt
nn3Blw+8OWVSPGgcJii3ap+qy4/Azc1R1cOnu5fDULAKKdOQGhKLFl7kmWIf1ost
1dAuWgjcSwtIkeWTCw9njxeAEhnKK2bPYJwGzADW4xROy5Iy7plVIBBIVn1QLXVw
AgfDVwdVoM3Ie1c7JBb4X5c7Ew==
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:51:18 2025 by rpki-client