Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
File: 3YPIwAXNcQS4JubaokvJUXkImqM.cer (raw, json)
Hash identifier: NX/VTJ42ATkj8eIgC6A1PZKmdp8xz0YZMBNcN8a6eKE=
Subject key identifier: DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2CF1
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:13:06 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328403
IP: 102.130.101.0/24
IP: 2001:43f8:13e0::/48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11505 (0x2cf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:13:06 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36162E8AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:db:c0:68:c8:7b:fe:08:7a:34:70:98:ad:d9:
2a:56:ac:51:08:6e:9e:36:73:f1:e1:20:ce:cc:09:
26:ce:5f:03:1e:02:ce:f7:27:cc:9b:45:76:c9:5b:
93:27:86:ba:12:6a:44:21:5c:b6:22:c1:19:5d:4b:
29:21:27:39:9b:84:9a:2e:96:71:67:59:e0:48:2a:
12:ee:85:23:70:73:81:4e:2f:d8:83:bf:2a:62:d4:
61:20:49:40:76:49:0a:c2:45:6e:17:0c:af:c1:0d:
66:6a:a4:49:37:a5:bc:2d:45:68:18:34:a0:8d:b6:
f5:85:97:38:d5:5e:a4:59:8c:28:3a:e9:1d:1e:54:
51:de:fc:9b:44:50:df:c7:64:c9:84:aa:e9:4c:30:
d6:a9:87:a4:df:3c:1d:1c:75:6e:33:46:5b:03:b3:
f5:bc:ab:04:01:e3:b7:48:30:6a:a7:85:7b:7b:c0:
47:64:5b:7c:bc:03:ea:ed:e2:89:c8:4c:47:2a:5f:
c5:96:a8:58:c5:6a:c1:cc:14:78:1e:06:2a:7c:ef:
d6:3a:a6:87:43:ce:04:41:48:02:88:4c:04:2b:68:
6a:e3:3b:4b:be:1e:95:dc:61:58:43:8d:19:09:35:
77:6a:b6:ca:e1:5c:ed:69:13:b8:ec:17:20:d8:75:
b1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328403
sbgp-ipAddrBlock: critical
IPv4:
102.130.101.0/24
IPv6:
2001:43f8:13e0::/48
Signature Algorithm: sha256WithRSAEncryption
5b:0a:a1:b7:5b:8e:3e:73:92:b4:75:3e:c3:bf:1a:78:80:6d:
1e:37:8c:8b:8a:ca:73:9e:15:0b:67:3a:75:ea:0c:b9:5d:03:
41:99:17:c3:66:39:bd:d7:8d:bd:f0:7e:7b:df:12:ae:10:87:
b8:a8:bc:20:95:73:a0:87:93:5e:9e:8b:1c:b2:25:d6:07:2b:
4c:a8:e3:1c:8a:09:71:89:95:84:b4:15:27:d0:25:0d:f6:ee:
30:92:82:f8:f1:39:89:1e:0f:ee:62:87:85:1c:cc:e0:01:7a:
f6:eb:91:36:4e:d0:24:20:17:2d:ae:e6:aa:62:07:91:dd:b1:
6f:28:d8:09:1e:2e:41:5c:9d:a2:25:40:0f:d3:9f:18:77:60:
0c:9b:f3:5c:26:a3:11:e0:43:ee:82:fa:7e:53:5c:53:62:9f:
e7:d6:90:aa:d9:18:5f:09:9a:be:f5:82:6f:26:be:f0:37:55:
e9:35:5a:fc:66:19:3d:f1:b1:3b:c0:f9:2d:38:0c:ec:14:03:
f8:1d:6f:6c:7b:9d:09:e5:ed:7f:9b:71:4f:76:60:32:db:d1:
a3:f9:9d:bd:20:82:fc:5b:cc:b3:46:bd:e3:00:0f:4d:88:9d:
a7:d6:b6:bd:3c:2d:b4:81:de:fc:2e:42:3a:70:35:fb:c2:c8:
67:75:d1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:51:19 2025 by rpki-client