Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/979dWkZzdc2_IhWBUXIu1KuaA6Y.cer
File: 979dWkZzdc2_IhWBUXIu1KuaA6Y.cer (raw, json)
Hash identifier: 5XS+YtkTg9AoTQJ+Gf7hF7+OuNbAYxBNmUN98AaVNoI=
Subject key identifier: F7:BF:5D:5A:46:73:75:CD:BF:22:15:81:51:72:2E:D4:AB:9A:03:A6
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 337D
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F193D/17AB84B269BB11EE81EE854C4AD9E6FC/979dWkZzdc2_IhWBUXIu1KuaA6Y.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F193D/17AB84B269BB11EE81EE854C4AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 06:09:04 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329070
IP: 102.215.208.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13181 (0x337d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 06:09:04 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36F193DAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2d:2d:cf:1c:2a:5d:26:52:73:4f:d5:72:49:
b4:58:d6:cd:56:58:98:61:5d:87:94:ab:6c:4a:ee:
a1:2e:27:12:98:e6:ad:ab:b0:e6:86:0d:95:2d:a6:
cd:69:1d:01:44:d2:e3:a4:ad:b0:63:df:58:68:f1:
59:3c:59:b9:0e:a0:4a:d2:40:4d:fc:26:36:f5:8e:
60:5f:cc:a8:30:91:38:63:19:e7:7f:0d:0e:07:1a:
f0:31:d1:1b:64:c6:96:5d:62:c1:07:b5:42:70:1d:
77:aa:48:5d:7e:c9:0a:89:3d:78:b2:a8:00:22:ec:
4b:03:b3:f8:06:10:60:57:46:8d:42:8b:dd:2d:10:
51:65:11:33:a5:65:2e:dd:9b:20:f2:a7:6d:24:dc:
f1:4c:f1:e9:08:f6:a9:c4:36:75:3b:34:24:5f:12:
81:53:d0:d4:34:d2:43:ce:f8:a0:4e:d8:27:bb:db:
ed:18:c7:3d:8b:75:10:25:30:db:82:4a:ae:73:6d:
86:1a:da:a3:c5:71:00:bf:17:30:0f:a1:54:f0:8b:
45:f8:15:ea:a3:6d:05:97:03:5f:1c:c7:b6:3e:e4:
57:ca:6a:9f:17:b8:1b:0f:74:51:59:af:20:5b:66:
01:5e:ac:06:8b:c1:0f:b1:f6:46:c6:8e:cb:7e:83:
e9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BF:5D:5A:46:73:75:CD:BF:22:15:81:51:72:2E:D4:AB:9A:03:A6
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F193D/17AB84B269BB11EE81EE854C4AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F193D/17AB84B269BB11EE81EE854C4AD9E6FC/979dWkZzdc2_IhWBUXIu1KuaA6Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329070
sbgp-ipAddrBlock: critical
IPv4:
102.215.208.0/22
Signature Algorithm: sha256WithRSAEncryption
33:f3:d7:0c:07:12:65:b7:23:f6:52:08:df:28:a1:8e:07:60:
44:4c:19:82:d7:05:9e:0e:b3:11:d1:8d:7c:6d:3a:49:29:8a:
cc:97:4e:3f:39:3f:64:e9:c7:ee:3b:36:4a:7f:e8:f3:89:86:
49:be:44:23:7a:8c:43:9a:50:18:6f:3a:6a:60:0c:00:94:d3:
d7:50:15:3f:81:8e:f4:31:bc:0c:ac:aa:02:72:7c:c8:12:7e:
17:d5:54:74:1e:a1:7f:4f:44:b2:c2:4c:c4:f0:cb:f2:65:1e:
4f:d9:f5:3b:eb:1e:09:78:73:d0:67:2c:59:57:d5:8c:bf:dd:
fb:0b:1a:f4:02:d1:5c:8f:bc:b3:06:3e:cb:72:93:88:a0:ad:
ce:7d:04:09:38:86:46:96:ee:4f:b5:b8:d0:8d:4f:4d:b8:30:
52:22:b4:fe:01:22:ee:6c:16:0c:b0:bc:25:e7:4a:1c:5d:1b:
1e:fc:f3:67:f7:a9:da:f4:1f:d6:32:ff:d8:68:5e:a7:90:44:
82:6d:96:18:19:41:68:c3:28:e9:a3:b0:d7:88:6d:59:8e:6d:
1e:50:a9:fa:e7:93:73:d9:ac:b2:52:86:90:29:fa:09:ac:f6:
02:db:4d:0c:76:13:61:4c:cc:39:70:f8:d3:b8:df:50:aa:d2:
33:10:5f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:56:25 2025 by rpki-client