Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
File: 4QUiVzRX-tnLWm9cGdaMzm1unCM.cer (raw, json)
Hash identifier: ixA8nlB2EuuD6oCho5y2XB/qjtdkqfViRhi9s3dYtpo=
Subject key identifier: E1:05:22:57:34:57:FA:D9:CB:5A:6F:5C:19:D6:8C:CE:6D:6E:9C:23
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3196
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:21:35 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 102.209.176.0/22
IP: 102.212.200.0/22
IP: 102.215.24.0/22
IP: 102.222.132.0/22
IP: 2c0f:e908::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12694 (0x3196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:21:35 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36A0CB0AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:cc:61:79:06:2f:fd:4e:19:39:f8:dd:b7:
97:14:ea:80:04:92:e2:3a:07:36:5b:d8:1d:0d:5a:
fd:88:9c:90:b3:3d:87:d5:48:b8:aa:b8:fd:c6:95:
da:07:6c:23:16:fb:3e:47:7e:9f:55:5b:d7:a4:32:
7a:a7:7a:3a:68:56:cd:ac:57:1c:02:3b:7f:b5:79:
d7:bb:18:77:4c:1e:6a:f0:3b:0e:e6:29:fb:e6:bd:
ba:f0:d6:27:cf:78:66:6d:50:1b:8c:83:b1:b6:da:
4b:c3:5b:6c:38:56:85:55:59:eb:a3:0b:7e:5f:a4:
fb:59:ed:69:3a:13:b2:e8:03:ff:53:ee:bc:47:07:
16:b5:2e:8d:85:66:7b:a5:e8:f7:71:fb:55:4d:d8:
53:9f:a0:9e:43:87:5f:0c:49:f2:b5:90:c2:08:08:
27:eb:70:32:8b:26:cd:18:42:48:a7:08:94:7e:a5:
c0:61:eb:79:96:32:95:bd:b0:e4:44:17:64:53:83:
84:10:a1:8e:98:df:b9:c2:e4:a3:7f:1b:64:9c:b9:
69:cb:77:a4:b6:6c:86:ea:54:d0:cb:ee:1f:d9:e5:
97:18:8a:65:95:e9:6d:ba:4c:50:e0:07:7a:aa:ca:
bb:1c:3d:03:6c:b5:83:ff:be:e1:8d:ac:6c:f0:c7:
a4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:05:22:57:34:57:FA:D9:CB:5A:6F:5C:19:D6:8C:CE:6D:6E:9C:23
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.mft
sbgp-ipAddrBlock: critical
IPv4:
102.209.176.0/22
102.212.200.0/22
102.215.24.0/22
102.222.132.0/22
IPv6:
2c0f:e908::/32
Signature Algorithm: sha256WithRSAEncryption
8b:05:76:b2:40:c7:06:53:f2:ce:a9:5a:bd:37:63:61:c2:01:
83:a9:9b:32:66:e9:02:ad:d5:e0:0f:ff:d8:9b:ac:d6:93:e1:
b4:76:3d:86:ea:ce:f5:40:c1:f3:74:47:92:ed:52:20:59:75:
b8:8b:a6:7a:da:9a:37:db:ff:cf:9f:e2:cf:91:ad:da:89:78:
0c:c4:a2:bb:d1:85:cc:f7:9e:a7:50:37:45:39:be:00:25:19:
9c:24:ea:10:26:dc:cb:dd:ee:01:bb:7c:7f:74:c3:74:b7:ee:
d4:0c:66:df:72:c3:1a:1b:fb:cd:71:2d:31:b7:cc:b3:15:24:
73:d9:9a:03:42:8b:6d:3b:a3:93:22:6e:c3:21:ad:f9:ca:e1:
d7:65:89:53:c4:4d:ec:87:64:d6:0f:bf:ac:50:96:1a:4f:06:
36:ff:3a:f6:c9:29:1c:44:fa:94:29:94:32:65:04:cd:07:47:
a1:e8:d1:05:99:65:61:24:06:a3:29:4a:f2:96:96:4e:0e:07:
c0:00:19:98:5c:5e:0f:ba:fa:45:d3:2a:8b:17:9c:6c:21:b9:
f7:44:4b:92:82:c2:8d:4d:c5:10:78:cd:6a:b8:ff:51:48:2d:
d8:5a:1d:79:3e:cd:3f:4e:ec:bc:30:a7:b5:24:be:1f:eb:43:
34:92:c0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:41:45 2025 by rpki-client