Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/3EJIwHspjM1rOedr4TDL0ntsigU.cer
File: 3EJIwHspjM1rOedr4TDL0ntsigU.cer (raw, json)
Hash identifier: Vg4AkPlKTmyFnZT9wuMyx7s6O9RVWQ83xg7o477Ugoc=
Subject key identifier: DC:42:48:C0:7B:29:8C:CD:6B:39:E7:6B:E1:30:CB:D2:7B:6C:8A:05
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2D75
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:44:26 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329144
IP: 102.214.204.0/22
IP: 2c0f:7e80::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11637 (0x2d75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:44:26 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3629595AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:75:85:42:f4:e1:5b:f9:11:ce:0a:c8:ca:
0f:00:32:7c:f6:62:1e:a3:d7:5d:f3:ec:d3:d3:5d:
bb:d6:34:e7:13:1d:a0:56:c2:15:de:cb:b1:1f:fe:
82:f4:fe:25:6d:b5:36:af:9c:40:62:15:2b:8b:f7:
41:09:0b:98:8c:93:7f:52:45:f0:91:09:5a:80:66:
b0:6b:2e:9c:ca:34:04:50:24:b3:31:91:de:8c:d0:
59:08:66:f5:40:ab:34:4c:4d:d1:95:9d:f6:bb:41:
3f:04:03:9e:d2:b4:a5:3e:9f:8d:be:79:38:76:8e:
2e:20:a4:44:7e:b0:b7:07:ef:dc:56:36:1c:83:ad:
33:08:5f:b1:8f:df:6c:2f:d1:34:8c:85:ed:f6:61:
43:65:20:10:5b:fd:43:f3:63:a5:19:ba:85:67:8b:
ad:85:b3:da:a4:03:aa:c7:72:ad:50:f6:66:a9:53:
cd:44:bb:47:eb:31:90:ea:b5:d8:fd:d9:cc:e8:f0:
e5:40:06:44:b2:df:13:ae:75:8d:8c:8a:5f:c4:41:
81:5e:ac:b0:a9:7e:93:7e:21:c2:67:29:74:91:8e:
92:a3:1a:af:e0:62:f9:72:f5:8f:a7:e4:b7:fd:5c:
2a:03:f4:4a:7b:58:82:3e:59:bf:0e:ed:9a:ca:22:
30:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:42:48:C0:7B:29:8C:CD:6B:39:E7:6B:E1:30:CB:D2:7B:6C:8A:05
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329144
sbgp-ipAddrBlock: critical
IPv4:
102.214.204.0/22
IPv6:
2c0f:7e80::/32
Signature Algorithm: sha256WithRSAEncryption
b3:dc:95:80:56:64:f0:ea:94:3b:98:29:e3:48:ef:94:3e:17:
62:b4:67:ff:9b:45:d3:b9:80:29:64:68:77:d2:b8:a6:7f:cc:
0a:9d:f3:ff:2c:ee:3f:d2:22:22:18:9a:5e:8f:6f:78:06:2e:
19:ad:e6:3e:29:4b:90:e8:57:f0:a0:dc:cd:5a:ed:94:fe:67:
f6:ae:60:51:d2:96:de:2e:e8:70:c0:4d:4c:4e:ce:aa:d2:b0:
b8:f8:7f:97:f9:c6:2d:92:86:b2:d3:46:0e:96:f7:87:72:7f:
9b:d6:0d:ff:2f:1b:54:42:c4:ed:05:95:14:47:89:90:2f:18:
e1:e4:ae:db:e8:b9:3d:64:1f:59:fe:fa:7c:2f:bd:4e:ae:e5:
48:43:51:f6:ef:1d:29:9c:40:41:65:16:b3:64:17:dc:00:47:
05:2c:f9:9c:97:59:14:05:fe:b3:ea:c7:aa:0f:43:64:3c:d9:
6d:64:fd:06:b5:aa:c2:26:ba:f3:7b:86:73:90:22:71:97:83:
39:21:8f:b2:ad:d3:f6:71:1a:7e:75:45:c1:98:9c:2b:3a:82:
cb:f7:3c:9d:6f:31:88:2e:08:b9:fc:c5:f4:51:e6:e0:06:b1:
87:36:1b:4f:1b:2c:f8:45:61:e3:8a:41:37:da:e1:bc:a9:8e:
af:91:12:08
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICLXUwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMDQ0MjZaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjI5NTk1QUYxMTAvBgNVBAUTKERDNDI0OEMwN0IyOThDQ0Q2QjM5RTc2
QkUxMzBDQkQyN0I2QzhBMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9nnWFQvThW/kRzgrIyg8AMnz2Yh6j113z7NPTXbvWNOcTHaBWwhXey7Ef/oL0
/iVttTavnEBiFSuL90EJC5iMk39SRfCRCVqAZrBrLpzKNARQJLMxkd6M0FkIZvVA
qzRMTdGVnfa7QT8EA57StKU+n42+eTh2ji4gpER+sLcH79xWNhyDrTMIX7GP32wv
0TSMhe32YUNlIBBb/UPzY6UZuoVni62Fs9qkA6rHcq1Q9mapU81Eu0frMZDqtdj9
2czo8OVABkSy3xOudY2Mil/EQYFerLCpfpN+IcJnKXSRjpKjGq/gYvly9Y+n5Lf9
XCoD9Ep7WII+Wb8O7ZrKIjDNAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQU3EJIwHsp
jM1rOedr4TDL0ntsigUwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyOTU5NS82MTJDNjk4NDNEMEMx
MUVFOTY1NTlENzc0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Mjk1OTUvNjEyQzY5ODQzRDBDMTFFRTk2NTU5RDc3NEFEOUU2RkMvM0VKSXdI
c3BqTTFyT2VkcjRUREwwbnRzaWdVLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBbgwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm1swwDQQCAAIwBwMF
ACwPfoAwDQYJKoZIhvcNAQELBQADggEBALPclYBWZPDqlDuYKeNI75Q+F2K0Z/+b
RdO5gClkaHfSuKZ/zAqd8/8s7j/SIiIYml6Pb3gGLhmt5j4pS5DoV/Cg3M1a7ZT+
Z/auYFHSlt4u6HDATUxOzqrSsLj4f5f5xi2ShrLTRg6W94dyf5vWDf8vG1RCxO0F
lRRHiZAvGOHkrtvouT1kH1n++nwvvU6u5UhDUfbvHSmcQEFlFrNkF9wARwUs+ZyX
WRQF/rPqx6oPQ2Q82W1k/Qa1qsImuvN7hnOQInGXgzkhj7Kt0/ZxGn51RcGYnCs6
gsv3PJ1vMYguCLn8xfRR5uAGsYc2G08bLPhFYeOKQTfa4bypjq+REgg=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:38:29 2025 by rpki-client