Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/1ijkyWq6nPsSRHeGe73xpENfD1s.cer
File: 1ijkyWq6nPsSRHeGe73xpENfD1s.cer (raw, json)
Hash identifier: 9ajAfVDxNIYkrIGQ8kK+966GTV8dPobDHMiSlrO5uaM=
Subject key identifier: D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2D49
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:34:00 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 36962
IP: 41.216.64.0/19
IP: 41.223.116.0/22
IP: 102.210.160.0/22
IP: 102.212.180.0/22
IP: 2c0f:fd98::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11593 (0x2d49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:34:00 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F362412EAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:91:13:54:dd:14:6d:a8:f3:09:05:75:e4:f1:
c5:bb:4c:3a:53:4e:27:c3:e0:fb:0a:8a:68:78:fc:
e0:4c:64:56:bb:21:d3:69:ed:11:b8:4f:b4:2f:f6:
62:03:8b:48:c1:b8:69:93:c5:09:38:9c:d1:8b:a4:
f5:1d:b0:0f:0d:ce:4c:57:25:f9:56:03:2a:6f:7d:
4d:cd:fc:fb:20:2f:6a:64:2f:10:0d:6e:96:d4:46:
f7:d4:d0:8d:b5:d7:6b:8e:90:9f:c6:c1:61:36:e5:
a4:b4:cd:39:3e:80:12:8c:06:67:8d:4c:ac:fb:e4:
da:fd:e6:c3:33:22:33:97:90:ad:44:e4:c4:07:eb:
d5:ed:71:a2:36:ba:ef:af:a3:9d:98:83:b2:e6:dd:
54:be:d8:a0:a5:7c:70:e1:9c:34:4f:b2:c5:a6:41:
e4:f6:3a:8b:15:c7:d9:69:0c:9b:29:c4:78:7b:9c:
39:bc:0c:7f:95:2f:a3:8d:ac:ee:28:88:76:2a:b7:
35:24:b2:9f:88:1a:34:5a:97:5b:e6:a0:e2:a2:10:
d5:dd:09:f1:cd:ec:be:7e:4e:05:cb:16:42:f4:28:
82:32:6e:66:af:55:40:39:eb:99:5c:33:99:c0:69:
dc:c5:fb:4a:bd:da:c6:72:5e:d9:3f:76:2e:f0:76:
36:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:28:E4:C9:6A:BA:9C:FB:12:44:77:86:7B:BD:F1:A4:43:5F:0F:5B
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/3A239A207E3811EE854EE4394AD9E6FC/1ijkyWq6nPsSRHeGe73xpENfD1s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36962
sbgp-ipAddrBlock: critical
IPv4:
41.216.64.0/19
41.223.116.0/22
102.210.160.0/22
102.212.180.0/22
IPv6:
2c0f:fd98::/32
Signature Algorithm: sha256WithRSAEncryption
83:43:a3:0e:25:8e:07:a0:75:d7:57:4c:c9:95:e0:34:8f:bd:
6b:3e:f7:e3:dd:46:89:ff:f0:88:ec:e7:90:e3:ad:2c:08:5b:
d5:37:f5:01:77:ab:42:44:4b:0b:1a:be:78:5d:19:66:3f:29:
fc:b9:ed:52:6e:df:47:27:3b:39:72:fe:76:7a:8e:cb:1a:ee:
cf:ad:27:23:57:72:0e:c3:e3:09:cc:63:fe:a5:c0:a0:2c:d6:
e7:0f:33:fc:ce:19:05:95:7b:a8:41:1f:e8:9e:01:c5:cd:78:
8d:2f:60:c5:0c:98:f0:e4:4f:bd:87:02:60:3b:d6:c2:b6:f5:
b7:2a:ae:3c:77:87:53:bd:60:a0:ef:bd:91:3c:d4:a2:8c:c6:
91:47:3f:b5:2f:ac:90:58:fd:65:a6:e3:b4:a6:60:f0:44:54:
bf:d4:b4:70:5c:02:c1:82:a1:f9:ec:91:c0:ac:41:1d:84:af:
3f:88:bf:01:fb:a5:b8:c1:9f:fe:0d:a9:7e:e8:fe:e8:42:81:
f3:b5:69:68:b6:34:e9:8a:4b:4a:60:ff:b7:e0:9f:49:6c:fe:
ef:07:b6:d3:1d:11:b2:5f:cb:e1:8e:cc:db:aa:32:39:39:e1:
4d:57:eb:5d:71:2e:ca:75:41:fd:6b:04:44:97:b7:14:fd:43:
33:09:7d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 07:49:14 2025 by rpki-client