Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
File: 2qhy_5oERGtxio2fR1VL-lgbOg4.cer (raw, json)
Hash identifier: ZX/nP04xpCAEb5MhKuFzD42MnPanmPYyPGE02mGEqLk=
Subject key identifier: DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2D61
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:39:44 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328467
IP: 102.67.128.0/21
IP: 2c0f:ed48::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11617 (0x2d61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:39:44 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F362793FAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:92:71:62:6d:96:39:69:68:93:d5:83:61:
f3:0e:85:de:3e:0b:ab:5a:9d:71:fb:eb:75:51:02:
0d:3b:c4:14:61:09:1d:e0:a8:fc:2f:bc:38:0e:d2:
7e:f3:c3:6a:9f:05:de:90:37:c2:5c:ab:84:26:61:
b2:ef:bb:0e:3d:92:f0:7b:23:98:9e:61:90:e2:37:
f0:45:3b:e9:ce:54:e5:ac:b4:46:a9:42:08:4e:08:
ef:69:f4:4d:e5:00:90:5a:3d:cf:c7:81:15:8c:e9:
c9:eb:37:fe:b6:c1:de:a4:0b:4b:bc:db:aa:ec:19:
15:b4:ce:56:dd:dd:39:83:94:6c:1a:01:5a:73:85:
07:60:6a:7f:03:dc:61:62:4f:12:36:11:73:11:1a:
37:03:7a:fe:e9:fe:30:ee:8e:42:be:33:36:5c:42:
5d:ef:ce:58:e6:6c:e8:99:e7:99:7e:6d:60:72:08:
8a:3c:cf:41:46:e4:4b:b4:de:a4:04:b4:5f:d9:de:
69:0a:f6:39:43:f7:54:32:d4:d9:1e:4b:39:9c:c2:
ef:2b:96:0f:2f:57:d9:9b:fc:ea:6f:a2:fe:3f:68:
3b:26:86:93:bd:ea:89:5c:a8:c9:ce:60:2b:9a:4e:
20:96:00:68:be:93:89:bd:24:ce:1a:23:c1:48:04:
92:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328467
sbgp-ipAddrBlock: critical
IPv4:
102.67.128.0/21
IPv6:
2c0f:ed48::/32
Signature Algorithm: sha256WithRSAEncryption
65:31:01:09:b2:1b:a0:8a:06:c8:44:99:64:f7:82:87:1e:b0:
e9:f3:31:74:e7:87:ab:82:1c:91:58:69:25:ce:df:20:50:22:
92:89:38:97:c8:db:a9:70:b8:e4:ba:1a:d0:50:9a:47:ea:b2:
66:89:c5:39:d2:36:a4:14:e2:a1:38:ca:c7:2c:5d:44:3f:bb:
26:98:d9:12:73:51:48:71:71:e6:08:66:75:3c:ab:8a:77:64:
f6:32:1b:ce:5c:ce:1f:72:9a:14:2b:55:0e:11:b1:a9:f6:29:
a6:1b:35:f2:0c:e9:04:ec:68:f7:0a:ee:1f:ec:ef:c7:d4:64:
4f:c2:bd:0c:be:74:74:20:b4:61:00:89:a2:74:a8:38:93:56:
c8:fe:a4:a3:12:cc:6b:3a:41:c7:fd:06:20:fa:bb:9c:87:7b:
21:47:e0:bb:93:e8:2b:a1:1d:f5:db:74:96:16:2f:2a:f3:6c:
fe:70:5d:83:85:c7:7e:8a:9e:ae:4e:02:85:df:e8:f7:6f:9d:
0e:d9:bd:23:24:85:8c:2c:46:f0:fa:74:16:9b:fa:4e:cd:59:
10:89:f3:99:f6:ff:19:c2:13:aa:2b:bd:e5:4b:1f:ee:66:7c:
d3:21:ef:e5:76:27:f4:a0:3f:ad:0f:e8:9c:79:da:d7:07:8b:
dc:e6:4a:54
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICLWEwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMDM5NDRaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjI3OTNGQUYxMTAvBgNVBAUTKERBQTg3MkZGOUEwNDQ0NkI3MThBOEQ5
RjQ3NTU0QkZBNTgxQjNBMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGv5JxYm2WOWlok9WDYfMOhd4+C6tanXH763VRAg07xBRhCR3gqPwvvDgO0n7z
w2qfBd6QN8Jcq4QmYbLvuw49kvB7I5ieYZDiN/BFO+nOVOWstEapQghOCO9p9E3l
AJBaPc/HgRWM6cnrN/62wd6kC0u826rsGRW0zlbd3TmDlGwaAVpzhQdgan8D3GFi
TxI2EXMRGjcDev7p/jDujkK+MzZcQl3vzljmbOiZ55l+bWByCIo8z0FG5Eu03qQE
tF/Z3mkK9jlD91Qy1NkeSzmcwu8rlg8vV9mb/Opvov4/aDsmhpO96olcqMnOYCua
TiCWAGi+k4m9JM4aI8FIBJKnAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQU2qhy/5oE
RGtxio2fR1VL+lgbOg4wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyNzkzRi8wNjVENERCQUE2NDMx
MUVGOEI0RDNFOEI3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Mjc5M0YvMDY1RDREQkFBNjQzMTFFRjhCNEQzRThCNzYyRTk1MUEvMnFoeV81
b0VSR3R4aW8yZlIxVkwtbGdiT2c0Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAxMwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBANmQ4AwDQQCAAIwBwMF
ACwP7UgwDQYJKoZIhvcNAQELBQADggEBAGUxAQmyG6CKBshEmWT3gocesOnzMXTn
h6uCHJFYaSXO3yBQIpKJOJfI26lwuOS6GtBQmkfqsmaJxTnSNqQU4qE4yscsXUQ/
uyaY2RJzUUhxceYIZnU8q4p3ZPYyG85czh9ymhQrVQ4Rsan2KaYbNfIM6QTsaPcK
7h/s78fUZE/CvQy+dHQgtGEAiaJ0qDiTVsj+pKMSzGs6Qcf9BiD6u5yHeyFH4LuT
6CuhHfXbdJYWLyrzbP5wXYOFx36Knq5OAoXf6PdvnQ7ZvSMkhYwsRvD6dBab+k7N
WRCJ85n2/xnCE6orveVLH+5mfNMh7+V2J/SgP60P6Jx52tcHi9zmSlQ=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:32:43 2025 by rpki-client