Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/16MZmo_eBF6cXxxjpPy-_kiNCgw.cer
File: 16MZmo_eBF6cXxxjpPy-_kiNCgw.cer (raw, json)
Hash identifier: klZLk2RTwgb3J4J3w2vA4ybcKHtiXNXrwe/eCoQU+ro=
Subject key identifier: D7:A3:19:9A:8F:DE:04:5E:9C:5F:1C:63:A4:FC:BE:FE:48:8D:0A:0C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 303E
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A53F0/951D16EC08B411EBB42C9282F8AEA228/16MZmo_eBF6cXxxjpPy-_kiNCgw.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A53F0/951D16EC08B411EBB42C9282F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:10:10 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 36944
IP: 196.32.208.0/21
IP: 2001:43f8:20::/48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12350 (0x303e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 03:10:10 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36A53F0AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:db:ab:64:f0:c9:29:5b:28:6d:2c:69:8c:
44:e0:92:d8:37:b6:19:54:77:0c:d2:ea:bd:c3:c5:
2a:8a:ba:87:3b:26:87:52:79:69:9c:07:87:cb:17:
22:58:fa:d3:ab:ee:56:9a:2b:0e:47:5a:92:a4:c7:
ef:ce:36:7b:fd:b0:12:ff:4b:62:3b:4f:9c:6e:f5:
a2:37:c1:af:a1:19:c9:ca:85:f7:ad:2b:1f:34:81:
5d:31:26:bd:5f:7a:35:85:91:34:a1:97:92:55:4e:
0e:ee:ea:9f:33:a4:8d:82:ad:d8:46:aa:ea:83:49:
15:38:3f:bc:65:34:7f:e2:53:fe:42:dd:95:80:5c:
64:ad:4b:96:b1:de:75:ca:02:1b:94:c3:05:9b:1d:
8c:d9:6a:23:3b:ad:0f:87:86:c6:56:9b:5f:d4:9f:
2f:39:8a:2e:5d:af:1a:3d:e5:cb:34:5a:5a:fd:44:
b6:d7:fb:6f:de:cc:41:8e:36:8e:79:85:b6:e8:31:
5f:8d:6c:71:ad:ec:27:68:a6:ce:e0:95:a2:24:86:
f5:0f:51:ac:99:5c:7e:1a:b2:1e:2c:4d:69:27:53:
68:60:f3:d0:31:73:71:6f:6b:cb:3e:4a:93:dd:cf:
dd:35:5f:3c:fd:d4:81:e4:e6:f2:bf:c4:18:42:a1:
9a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A3:19:9A:8F:DE:04:5E:9C:5F:1C:63:A4:FC:BE:FE:48:8D:0A:0C
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A53F0/951D16EC08B411EBB42C9282F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A53F0/951D16EC08B411EBB42C9282F8AEA228/16MZmo_eBF6cXxxjpPy-_kiNCgw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36944
sbgp-ipAddrBlock: critical
IPv4:
196.32.208.0/21
IPv6:
2001:43f8:20::/48
Signature Algorithm: sha256WithRSAEncryption
7c:92:54:3c:40:db:95:12:1f:01:20:2a:56:f1:f0:7b:ba:6d:
67:f4:67:fd:0e:46:45:df:4f:7f:9e:80:3d:06:43:57:65:81:
5c:8f:17:2c:02:da:ee:7a:91:85:82:ad:c9:3b:3e:94:46:f3:
ef:b2:54:01:92:ac:77:c2:5c:1b:45:46:8a:3e:71:bd:fe:92:
6b:09:93:1f:ca:15:5a:8c:7d:e1:0c:af:07:28:56:c2:11:41:
67:c2:35:65:8c:99:0e:90:45:bf:16:24:f2:b5:5a:86:4d:8d:
fb:fa:41:7b:86:9b:9f:9e:dc:fa:4d:5a:67:f3:e1:6c:f7:38:
20:24:6f:08:d4:4a:8d:22:13:04:c1:52:ee:f3:21:92:af:42:
54:4d:ed:10:ab:3f:9e:83:a0:1d:08:fa:a1:dd:3f:ba:78:64:
6d:37:a7:32:d4:29:45:f0:51:72:22:f9:72:42:35:2a:dc:27:
31:ac:09:f5:d5:00:c3:ba:35:15:46:0f:30:79:e9:76:e8:3b:
12:56:9e:43:f6:39:52:4b:1f:c7:7a:7f:9b:1c:57:7b:5b:f4:
60:3d:14:52:92:01:ec:23:55:a6:c3:56:7c:f0:2d:c1:e6:f7:
af:ad:a9:bb:00:4e:ce:20:ac:3d:9f:ba:ea:af:1a:79:70:c0:
0d:af:6a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:40:35 2025 by rpki-client