Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/9cC2O6peevekOGtjf9EgajaC0MM.cer
File: 9cC2O6peevekOGtjf9EgajaC0MM.cer (raw, json)
Hash identifier: C1DdczI+fSOTT872iXc0qcsUFo4B/9QOtpfaIQcf/DM=
Subject key identifier: F5:C0:B6:3B:AA:5E:7A:F7:A4:38:6B:63:7F:D1:20:6A:36:82:D0:C3
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3451
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 20 Feb 2025 00:07:37 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 29571
AS: 327710
AS: 329372
IP: 41.66.0.0/18
IP: 41.189.32.0/19
IP: 41.202.64.0/19
IP: 41.207.0.0/19
IP: 41.207.192.0/19
IP: 102.207.8.0/21
IP: 102.208.172.0/22
IP: 102.209.216.0/21
IP: 102.210.16.0/22
IP: 102.210.80.0/22
IP: 102.213.112.0/22
IP: 102.213.172.0/22
IP: 154.68.0.0/18
IP: 196.201.64.0/19
IP: 2001:42d8::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13393 (0x3451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Feb 20 00:07:37 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36F731FAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a8:cc:20:cc:6d:51:1d:af:66:f1:86:5b:28:
9e:80:04:2d:0a:ba:85:b8:3d:0b:b2:4d:eb:b9:e2:
19:61:fc:89:df:ab:54:d6:31:5c:b3:8b:f7:85:b8:
66:bb:89:ea:d0:83:63:30:56:39:02:99:c6:12:b0:
28:81:13:40:16:0d:90:37:bb:84:34:7e:98:a6:ec:
90:5c:b0:a7:8b:54:06:87:9f:ca:86:bb:aa:70:79:
be:26:14:b0:ed:88:f8:5f:4a:c4:fa:24:22:98:62:
f3:33:cc:f9:ea:b7:bb:00:96:a5:d2:8b:e0:e8:ed:
bf:c7:c1:24:24:1c:37:30:e5:c6:ea:98:97:fa:9c:
a7:26:97:71:e8:bd:e1:b9:ae:7e:50:8a:56:23:ed:
c5:b6:05:6c:31:5f:8c:dc:c4:48:72:52:67:08:56:
eb:49:fe:d7:06:66:94:19:bb:d1:6d:c3:e6:ec:2c:
38:d1:70:75:05:0f:f9:db:5c:ec:74:46:37:66:b9:
c8:ab:24:40:bc:52:3b:f9:2c:f0:4d:84:25:1a:da:
95:ae:28:cf:77:54:25:33:27:be:09:8f:59:ed:66:
c5:39:d0:cf:d2:ed:f2:78:b9:a2:59:be:73:83:fb:
9e:bf:1a:14:e8:8a:d2:90:d7:06:df:3e:64:1c:85:
b1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C0:B6:3B:AA:5E:7A:F7:A4:38:6B:63:7F:D1:20:6A:36:82:D0:C3
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29571
327710
329372
sbgp-ipAddrBlock: critical
IPv4:
41.66.0.0/18
41.189.32.0/19
41.202.64.0/19
41.207.0.0/19
41.207.192.0/19
102.207.8.0/21
102.208.172.0/22
102.209.216.0/21
102.210.16.0/22
102.210.80.0/22
102.213.112.0/22
102.213.172.0/22
154.68.0.0/18
196.201.64.0/19
IPv6:
2001:42d8::/32
Signature Algorithm: sha256WithRSAEncryption
45:da:bc:3a:2a:6c:f6:2b:89:e9:52:2a:1c:02:bf:79:a5:4f:
17:58:89:26:b4:dc:24:cd:57:58:af:09:e8:ff:f3:5b:5d:2b:
75:7b:6f:66:e3:b9:ae:f7:f4:76:2d:9f:78:f9:a8:cf:36:80:
7d:46:24:e2:46:90:a6:9f:7b:ec:e7:b5:c3:bd:88:e0:79:bd:
89:92:36:b6:49:98:81:29:e6:7e:0c:83:60:6d:a0:85:e0:05:
3e:ec:0d:1b:3d:0b:fa:4a:b3:41:aa:80:a0:25:20:2d:e3:14:
ad:07:de:b5:3d:fe:5d:99:65:5c:2a:e4:50:06:aa:51:eb:18:
50:85:a7:3a:ff:fe:14:3d:76:42:18:ce:69:50:20:14:71:d1:
bc:57:11:6e:ac:37:2d:e2:c4:1d:c2:e0:a1:14:a4:29:93:a6:
12:ab:9f:77:7b:d2:d9:e0:50:2c:02:b9:10:4d:6e:26:aa:70:
6e:93:b0:b1:6e:ee:0e:35:7d:ac:26:aa:b1:95:32:1b:27:f7:
57:3e:bc:e5:74:c3:ac:ce:94:5f:01:d8:f2:c9:4d:50:1a:a0:
c1:df:59:9a:b7:b3:a2:6f:2c:24:3e:9f:c2:85:f1:b8:4b:d3:
93:07:5d:48:fc:be:08:35:63:45:ba:ce:da:aa:8a:6f:a4:8f:
0b:ef:88:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:42:56 2025 by rpki-client