Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/2WACNlD1TrS44dw0q9RZ9QJw140.cer
File: 2WACNlD1TrS44dw0q9RZ9QJw140.cer (raw, json)
Hash identifier: UI8fFyXzS0SrZho9CbL8AgHZQIhpJ3sh89z4217Wc+Q=
Subject key identifier: D9:60:02:36:50:F5:4E:B4:B8:E1:DC:34:AB:D4:59:F5:02:70:D7:8D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3233
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:55:34 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37489
IP: 105.235.216.0/21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12851 (0x3233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:55:34 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36B9A81AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0c:53:68:00:a2:6a:e2:04:dd:7a:b6:9a:9f:
63:8a:94:c4:9b:2b:ab:72:25:c3:74:ad:56:96:f0:
45:e3:13:1c:c2:b5:c4:f1:71:5b:9e:e3:18:5f:f1:
dc:43:4b:69:24:f8:4f:32:50:ad:38:a5:19:6d:d8:
ac:10:5a:89:c0:fd:5e:7f:bb:db:82:16:c3:12:d6:
f1:b7:aa:78:ef:b8:2d:91:2b:a0:0a:98:b3:b1:9f:
3b:8d:26:52:05:52:1e:c0:63:a7:59:dd:24:63:b1:
53:d3:12:51:e1:96:08:b9:40:2f:c8:5d:53:7d:83:
74:29:43:75:eb:d6:02:4f:7a:67:0d:cd:7d:f6:96:
26:db:2b:a8:83:e6:cd:f4:b8:6b:8a:48:57:1a:9a:
3c:57:9b:63:5e:71:35:16:ca:40:bf:6d:e2:5d:bf:
a6:c6:ac:30:33:b0:d0:30:49:ac:f2:14:2a:f3:d6:
04:b5:b7:be:00:71:fd:93:53:b4:dc:b1:39:ae:48:
90:08:3b:eb:de:33:b1:6a:99:ca:80:09:7f:55:7e:
a0:5b:88:b9:b5:d2:a7:cc:10:0f:50:c5:8e:40:86:
cf:8b:0a:7b:f6:0c:31:91:b5:ce:bc:f5:e9:43:ba:
8f:fe:77:b8:86:a7:33:4e:87:57:08:6d:25:ce:62:
d6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:60:02:36:50:F5:4E:B4:B8:E1:DC:34:AB:D4:59:F5:02:70:D7:8D
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37489
sbgp-ipAddrBlock: critical
IPv4:
105.235.216.0/21
Signature Algorithm: sha256WithRSAEncryption
b7:ee:ad:f9:b9:4c:25:fd:9a:71:e3:68:01:5b:2d:2c:5a:b4:
ba:e9:66:58:74:db:fc:37:f8:c0:72:81:6a:03:ae:09:0a:c4:
31:04:1b:88:f1:10:00:a8:10:50:13:7e:98:26:d4:f8:45:4f:
1b:b7:4c:44:9a:2d:40:99:a0:18:b5:54:80:15:c0:3c:99:2c:
01:64:62:66:26:fe:c9:f7:38:62:0b:a3:6d:a3:84:81:b9:86:
08:c9:1b:74:6a:18:e8:3f:72:47:a1:d5:f9:25:56:f3:e1:94:
b4:b3:07:bc:dd:a4:13:ed:e3:fc:36:e0:a4:4d:8f:41:98:48:
aa:a4:d9:e4:3c:44:01:3c:b8:0b:e0:ad:2d:47:64:60:eb:55:
5f:ce:27:45:93:fa:5f:98:6f:b5:de:74:c9:c5:44:e1:57:9d:
76:88:c0:ee:2d:8f:34:9f:c1:51:0f:ab:07:1a:e0:90:d3:71:
6d:51:bf:3f:b7:37:29:c8:05:20:9b:45:51:56:62:06:1f:9f:
7a:09:8a:b3:f0:67:6c:f8:0d:26:f0:8e:23:a2:77:2e:26:59:
b8:fc:70:67:16:74:84:4f:df:30:8d:d3:3c:9f:14:5d:09:ae:
03:44:81:32:5a:89:f1:9c:38:17:0c:fc:2c:cd:d9:76:5d:75:
3d:bd:b0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:44:58 2025 by rpki-client