Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/9BcdTqJJyhR6uN7CBdy1H0mYi1A.cer
File: 9BcdTqJJyhR6uN7CBdy1H0mYi1A.cer (raw, json)
Hash identifier: qH1tRJdBVHXgKg4+fvIPGa4Lx4464AKLmZxoeswqBPg=
Subject key identifier: F4:17:1D:4E:A2:49:CA:14:7A:B8:DE:C2:05:DC:B5:1F:49:98:8B:50
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 303F
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/9BcdTqJJyhR6uN7CBdy1H0mYi1A.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:10:24 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328964
IP: 102.208.204.0/23
IP: 102.217.253.0/24
IP: 2c0f:4880::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12351 (0x303f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 03:10:24 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36797C7AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:f2:37:17:2d:50:a4:10:17:54:9b:bf:e6:
89:e7:2d:52:09:5f:b7:f2:d1:dd:f0:a2:00:7f:4e:
fa:44:98:36:be:a4:ab:2e:ac:4f:85:54:ce:31:23:
8d:b0:f5:64:c5:70:fc:12:92:10:3c:77:59:9e:bc:
86:68:2b:12:6f:15:8e:75:5e:00:ed:09:8d:92:2c:
12:b1:e3:0a:b3:29:24:10:5b:86:0c:0d:3a:1f:45:
29:9d:3c:4e:6e:0e:21:ec:fa:df:33:bd:dc:dc:01:
d1:03:a3:3e:03:27:26:e8:81:f2:21:f9:ba:72:93:
9f:3d:c9:05:4a:58:b4:4c:b9:25:fe:09:02:b3:7e:
5e:ad:38:d1:10:22:15:eb:1d:e2:b3:6f:bd:cf:cb:
96:42:47:31:94:cb:c3:f6:c6:51:53:0b:39:46:7a:
23:c1:b2:8b:59:d4:f9:4e:25:73:2f:6a:06:08:aa:
a6:3b:44:6f:b4:21:04:c6:38:cc:7e:90:b0:4e:c2:
8d:48:18:11:84:b4:26:f6:fc:3e:19:ea:4f:1b:d2:
de:55:c3:ec:c5:bb:e6:42:34:63:7c:5b:3a:48:a7:
00:82:8c:6f:4f:16:7b:52:0f:cd:3f:4a:ba:43:0a:
67:1f:b5:22:ef:9c:7c:8d:28:8d:cf:48:2a:23:89:
7f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:17:1D:4E:A2:49:CA:14:7A:B8:DE:C2:05:DC:B5:1F:49:98:8B:50
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36797C7/DEACBA2E94E011ECBFBC4E955A40D577/9BcdTqJJyhR6uN7CBdy1H0mYi1A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328964
sbgp-ipAddrBlock: critical
IPv4:
102.208.204.0/23
102.217.253.0/24
IPv6:
2c0f:4880::/32
Signature Algorithm: sha256WithRSAEncryption
a6:11:fb:3b:0b:42:21:d5:47:43:5f:21:80:ef:fa:a6:8f:98:
72:b4:0b:5d:48:15:53:63:a9:fd:ae:12:87:43:3c:d1:78:36:
dd:82:f2:54:f2:bf:f2:e6:d8:a1:05:8e:d9:79:76:27:e2:64:
c0:22:59:a9:f7:28:2d:90:64:1a:2c:72:3c:14:4b:1b:79:a5:
15:f4:75:b8:d2:47:0f:fa:2b:0f:fe:c4:85:69:3d:78:a6:a3:
9b:54:aa:32:be:56:95:01:4c:f8:3f:9f:3c:82:39:ac:0d:71:
e9:9d:67:9b:c0:9c:9b:d0:fe:c6:82:d7:7d:7b:06:3a:72:8a:
71:6e:14:2f:d9:80:62:53:59:12:b7:a2:7e:b1:34:92:2a:2b:
2c:4c:92:a5:b5:42:d0:7d:8f:b3:ee:5f:59:b5:e5:65:8d:10:
80:9b:42:f6:d8:fe:a1:3a:09:0c:8a:93:64:0d:83:cc:04:bb:
63:6f:04:42:f5:ca:dd:58:0d:37:90:3a:f9:b9:54:b7:c8:35:
af:ed:7f:be:74:8c:1d:dc:e8:ba:7c:67:4e:fd:e8:04:06:91:
38:7f:0e:69:7a:58:76:20:81:a8:7c:75:ad:43:f1:66:4b:84:
ee:ab:f7:7c:91:69:2d:c6:24:2b:43:f1:28:26:82:85:fb:f8:
c4:bd:49:4d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:56:24 2025 by rpki-client