Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
File: 3eQFo7njLL0ZkIdZfW8pC2w0G80.cer (raw, json)
Hash identifier: RB0R0Zwo3O868VesABJaXKzM4GY/zxBOkAkHgo5wW88=
Subject key identifier: DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2F82
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:32:13 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37266
IP: 196.32.232.0/21
IP: 196.45.16.0/20
IP: 2c0f:fdd8::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12162 (0x2f82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:32:13 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3663954AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:79:d5:cb:69:ac:2e:e2:10:7d:62:2b:32:b6:
54:10:e7:fc:d9:bd:d8:27:fa:a3:fa:f6:e0:c5:16:
a9:06:cd:a9:ed:22:b5:a3:ff:ad:3d:8d:4e:cb:c5:
aa:b0:ef:2d:63:e3:10:b9:bd:3b:b4:55:28:3b:31:
68:fc:ed:6d:00:d4:82:a0:78:6d:20:b1:e1:f0:78:
28:60:70:0a:ce:9a:c1:90:a7:62:bb:82:56:42:17:
c3:35:74:87:f0:21:c6:36:a1:46:03:7d:45:6d:82:
e2:d1:bf:a4:37:66:94:b7:c1:14:7f:44:1b:8e:43:
92:0d:75:81:02:a3:cd:dd:00:c8:bc:45:3f:33:fb:
7d:49:19:68:7b:ea:c2:97:7a:20:26:94:c4:7b:92:
54:24:c8:9a:0b:37:71:73:b3:a9:c2:8c:9c:43:40:
89:0e:a3:70:1d:3f:3c:1b:5b:32:99:9a:e0:05:1e:
fe:97:d2:86:de:7c:99:19:45:ac:86:af:bb:22:89:
79:48:d6:47:be:9e:57:49:40:ec:ec:6a:98:44:a0:
fe:9a:3b:8d:0c:19:cd:82:61:3f:0f:dd:6e:a0:6c:
08:a4:45:c9:6c:f0:f0:4c:fc:e7:b3:df:b5:32:51:
6a:b1:56:56:31:27:0c:2c:cd:53:8a:2c:57:96:8e:
46:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37266
sbgp-ipAddrBlock: critical
IPv4:
196.32.232.0/21
196.45.16.0/20
IPv6:
2c0f:fdd8::/32
Signature Algorithm: sha256WithRSAEncryption
a2:81:d5:4e:6e:57:2e:48:69:20:1d:c5:a1:bd:cb:02:79:02:
0b:a7:cf:dc:fd:4b:58:ca:19:68:08:98:ec:33:61:c6:28:8c:
24:5c:b4:a5:b5:15:e7:57:69:91:26:d8:a1:7c:f3:8c:a3:bc:
cf:b1:a0:a9:9a:1f:e6:d6:8a:bb:b4:8e:46:ac:50:ad:67:4b:
e7:86:1e:98:bd:42:4c:25:79:1e:cc:ac:11:e7:e6:44:ed:85:
86:3d:4c:b6:37:38:b3:e0:41:2e:6e:69:90:fc:72:53:ff:fa:
37:b2:aa:24:e0:9e:51:ac:61:f2:a4:bf:e6:b9:c6:5d:45:56:
1c:79:43:c9:91:01:36:06:0a:0a:01:c8:01:cb:c3:2d:e1:4e:
1d:bc:c0:ae:82:09:39:e6:b9:4c:47:7b:b8:d5:65:50:51:a4:
0e:95:02:b5:b1:a2:69:bd:09:3c:3f:92:5a:21:ad:e9:b3:4c:
01:4a:0a:3e:a0:e4:34:c4:fe:e1:d1:23:b2:81:64:c7:40:66:
2d:f2:60:c9:58:76:5f:b9:b7:d2:ae:fb:6b:56:f5:12:79:83:
e7:48:4e:2d:a5:39:af:b6:54:06:26:c8:5d:62:92:c2:ba:5b:
c8:af:6b:8b:95:0b:4d:2f:9e:c0:09:77:f5:0d:ca:d6:cb:d5:
d2:78:86:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:44:57 2025 by rpki-client