Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/7cVihK_vMTf8afnaeD_pzHg6baw.cer
File: 7cVihK_vMTf8afnaeD_pzHg6baw.cer (raw, json)
Hash identifier: rkGzqPIknshVXljNERSHPCz9YWzPrFYtkpA08zdMb/U=
Subject key identifier: ED:C5:62:84:AF:EF:31:37:FC:69:F9:DA:78:3F:E9:CC:78:3A:6D:AC
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3273
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:09:11 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328522
IP: 102.64.6.0/24
IP: 2001:43f8:13c0::/48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12915 (0x3273)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 05:09:11 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36C1D14AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:56:f4:35:89:d7:2e:5e:82:66:9d:a9:97:17:
c9:8c:4a:aa:38:a5:fa:c2:e2:f0:bd:51:4a:40:cf:
81:f4:fd:0e:40:44:e4:3a:57:db:07:d3:9d:9d:74:
36:4d:2b:e5:b0:3e:97:b8:a4:a0:60:23:93:7b:75:
d9:37:0d:22:25:37:4c:a3:bd:fa:54:3f:38:f0:67:
59:fe:86:de:03:8c:29:24:6c:a8:d2:80:20:35:74:
86:57:1d:c9:94:92:dd:df:6e:7d:7e:af:c3:ff:a5:
fe:1d:3c:35:eb:6b:f4:f3:ae:84:e1:a6:5d:6b:20:
7d:47:e8:0c:a1:d9:e6:89:16:5a:28:98:0f:9c:53:
7b:ae:cc:f4:a3:e2:45:90:d8:1d:eb:90:dd:73:4b:
75:e5:f0:c0:4c:5a:16:7e:24:2b:8e:c4:fb:f6:89:
c4:43:69:29:e7:fa:24:6f:77:83:17:6c:86:d8:2e:
fb:86:06:fe:df:75:0d:ce:66:6a:b9:f0:0c:01:5f:
df:12:16:c4:72:7e:e3:5c:4f:1b:e9:5f:59:95:3e:
02:8b:32:c8:19:09:9a:a6:22:18:13:c6:a0:8b:63:
cb:a4:b6:ed:45:32:63:33:ed:9c:e4:ca:da:5f:b8:
b9:10:57:d5:db:53:5d:d9:b2:2e:88:03:95:e4:15:
86:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C5:62:84:AF:EF:31:37:FC:69:F9:DA:78:3F:E9:CC:78:3A:6D:AC
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328522
sbgp-ipAddrBlock: critical
IPv4:
102.64.6.0/24
IPv6:
2001:43f8:13c0::/48
Signature Algorithm: sha256WithRSAEncryption
7a:27:df:ec:73:5c:42:b7:5f:45:58:6b:67:23:54:d5:33:49:
a6:cf:28:4a:29:2e:99:c7:b6:ef:69:2f:71:b0:41:83:d1:46:
53:ce:87:39:f0:5c:3b:59:8c:44:ed:24:ce:f1:21:4b:6a:e0:
7c:37:50:1f:e2:97:b8:2c:1f:38:f5:47:da:3b:7f:c1:25:d7:
84:89:54:ed:b7:a8:7b:e0:94:10:67:87:30:4b:b5:d7:9d:f8:
ef:4b:a2:e9:ed:52:4f:06:f8:f5:20:58:e5:14:b6:00:bc:52:
0f:4b:0d:53:9b:e3:c0:d2:67:cf:e0:c2:f8:52:b4:6e:8d:cc:
6b:29:26:dd:b2:8b:c4:3b:1f:7c:62:72:a7:14:90:8e:3d:3e:
60:e4:66:2f:d7:a4:95:6a:65:c7:68:3d:34:55:2c:12:74:89:
9e:92:cb:cc:af:9a:aa:99:e9:9c:a7:47:5d:de:15:aa:a0:e4:
fc:32:68:56:b8:b7:e8:0f:9f:38:6d:a7:0f:ef:56:0f:69:8a:
90:47:1f:0a:6a:9c:fc:e9:a1:d8:4f:91:a4:a9:09:3d:86:67:
45:7e:02:d9:fc:b5:84:94:7d:34:0c:34:6b:6e:52:a1:a7:18:
da:ad:e7:b1:17:69:4b:38:6a:ed:29:d5:e3:81:d5:b8:66:49:
61:65:24:8f
-----BEGIN CERTIFICATE-----
MIIGJzCCBQ+gAwIBAgICMnMwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwNTA5MTFaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkMxRDE0QUYxMTAvBgNVBAUTKEVEQzU2Mjg0QUZFRjMxMzdGQzY5RjlE
QTc4M0ZFOUNDNzgzQTZEQUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCVvQ1idcuXoJmnamXF8mMSqo4pfrC4vC9UUpAz4H0/Q5AROQ6V9sH052ddDZN
K+WwPpe4pKBgI5N7ddk3DSIlN0yjvfpUPzjwZ1n+ht4DjCkkbKjSgCA1dIZXHcmU
kt3fbn1+r8P/pf4dPDXra/TzroThpl1rIH1H6Ayh2eaJFloomA+cU3uuzPSj4kWQ
2B3rkN1zS3Xl8MBMWhZ+JCuOxPv2icRDaSnn+iRvd4MXbIbYLvuGBv7fdQ3OZmq5
8AwBX98SFsRyfuNcTxvpX1mVPgKLMsgZCZqmIhgTxqCLY8uktu1FMmMz7Zzkytpf
uLkQV9XbU13Zsi6IA5XkFYZPAgMBAAGjggMcMIIDGDAdBgNVHQ4EFgQU7cVihK/v
MTf8afnaeD/pzHg6bawwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZDMUQxNC9GOEVGNEU0NDcwMEYx
MUVBOEFCRDFCMzNGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzFEMTQvRjhFRjRFNDQ3MDBGMTFFQThBQkQxQjMzRjhBRUEyMjgvN2NWaWhL
X3ZNVGY4YWZuYWVEX3B6SGc2YmF3Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFA0owMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBABmQAYwDwQCAAIwCQMH
ACABQ/gTwDANBgkqhkiG9w0BAQsFAAOCAQEAeiff7HNcQrdfRVhrZyNU1TNJps8o
Sikumce272kvcbBBg9FGU86HOfBcO1mMRO0kzvEhS2rgfDdQH+KXuCwfOPVH2jt/
wSXXhIlU7beoe+CUEGeHMEu1153470ui6e1STwb49SBY5RS2ALxSD0sNU5vjwNJn
z+DC+FK0bo3Maykm3bKLxDsffGJypxSQjj0+YORmL9eklWplx2g9NFUsEnSJnpLL
zK+aqpnpnKdHXd4VqqDk/DJoVri36A+fOG2nD+9WD2mKkEcfCmqc/Omh2E+RpKkJ
PYZnRX4C2fy1hJR9NAw0a25SoacY2q3nsRdpSzhq7SnV44HVuGZJYWUkjw==
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:41:43 2025 by rpki-client