Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer
File: 4-0KKxQeZZxFITmco8yPgYx19x0.cer (raw, json)
Hash identifier: TUaosTO4eYPquSWTfXrfO3vy7D95HpsQRGuStHUFbJs=
Subject key identifier: E3:ED:0A:2B:14:1E:65:9C:45:21:39:9C:A3:CC:8F:81:8C:75:F7:1D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3575
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 02 Jul 2025 13:18:45 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329533
IP: 102.205.224.0/22
IP: 2c0f:5dc0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 01 Aug 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13685 (0x3575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jul 2 13:18:45 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F363A48BAF, serialNumber=E3ED0A2B141E659C4521399CA3CC8F818C75F71D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:74:be:15:85:e7:92:ec:9d:ff:c0:bf:d7:dd:
83:43:24:20:38:0c:de:2d:28:97:81:60:b7:5f:86:
43:10:eb:0a:86:a8:43:30:cb:65:ec:04:a8:f1:bc:
75:74:da:65:33:40:5d:44:31:ab:bf:40:71:48:79:
fe:ed:91:12:2f:5f:ab:f8:af:43:9f:b1:90:4d:62:
db:c4:3c:82:7f:44:46:6f:f9:72:37:36:08:74:5a:
82:9c:f1:dc:6a:ee:78:a5:8b:e6:4a:96:e1:73:24:
bf:cc:5b:10:4d:17:05:ce:d1:f6:39:c0:2b:5e:a8:
8b:e2:99:b3:03:5c:02:2e:86:e1:4c:f3:29:54:3d:
6e:9d:3f:96:2d:a4:51:4c:51:07:64:c7:0b:73:d0:
a7:35:c0:92:b8:c5:3c:62:a1:2d:1b:35:c8:01:f3:
6f:46:da:17:69:b5:44:aa:d0:2b:a5:f2:34:32:e2:
2b:b4:d5:35:29:44:78:6e:0c:44:06:70:34:d1:2e:
8b:1c:fb:f6:a2:2a:85:5b:20:ba:51:eb:52:45:58:
24:1c:2d:f8:0d:d2:11:3d:32:2e:86:bf:93:6f:f1:
26:fa:7e:b7:22:66:58:e9:c6:46:87:7c:1e:ed:c4:
d8:d3:fa:2d:fa:e0:c5:d3:0f:46:f9:d0:bb:e7:38:
a5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:ED:0A:2B:14:1E:65:9C:45:21:39:9C:A3:CC:8F:81:8C:75:F7:1D
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329533
sbgp-ipAddrBlock: critical
IPv4:
102.205.224.0/22
IPv6:
2c0f:5dc0::/32
Signature Algorithm: sha256WithRSAEncryption
35:1b:06:15:92:53:ad:3f:2d:87:df:b1:bb:37:61:e1:71:b0:
d2:ab:70:e8:24:1c:dc:7e:3a:04:d4:e7:07:dd:39:4d:fa:84:
19:cd:dc:a5:0a:9e:a7:bf:1c:7f:46:f5:89:65:4e:00:a7:c7:
52:53:3e:9b:88:de:28:78:ae:e2:9f:30:37:bc:69:a4:39:f7:
2e:75:1c:88:ee:06:3e:9a:ca:9e:0a:24:c1:55:26:46:bc:2a:
04:4a:6c:cb:4b:4e:b6:91:a2:b6:c5:9b:a9:40:57:89:c4:ea:
e1:e9:51:cc:37:a3:d5:44:96:69:f3:07:a9:6d:d4:02:f3:c4:
8e:51:2c:f7:e5:84:4b:4a:86:b0:bc:0b:fb:49:87:ff:9d:e9:
64:8a:ab:d9:0b:5e:a4:f6:b7:8c:8c:a1:9c:89:43:d6:0b:13:
d1:04:fe:49:95:eb:68:44:f5:13:bb:67:4a:4b:55:08:ce:58:
40:a9:3a:3b:34:fa:de:19:f3:87:12:5d:55:fe:fd:cf:95:b2:
81:61:d8:e8:e3:c6:1a:a2:e1:07:96:fe:44:ff:a3:06:e8:61:
55:b8:23:cc:6d:35:57:8e:4f:00:39:b1:6c:2b:cc:2b:f1:8a:
a6:a3:e0:a8:7a:98:83:e3:2d:c1:f7:79:1e:cd:7f:d9:aa:30:
97:e4:ed:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 15:37:10 2025 by rpki-client