Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
File: 9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer (raw, json)
Hash identifier: x4X1lDdjC71DjM+gswmx79Q/mm4b7WhQ/GncCBPGLSM=
Subject key identifier: F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2EF6
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:04:08 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 102.210.190.0/23
IP: 2001:43ff:d000::/48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12022 (0x2ef6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:04:08 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3656BB8AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:03:a0:a0:16:20:60:b1:06:f2:7b:a4:0e:6a:
b9:79:23:e4:d7:a6:5f:94:78:9e:09:63:72:8c:4d:
69:82:16:b0:2e:90:22:c6:4b:74:91:8a:c1:c2:96:
08:9e:eb:ba:a4:47:9f:97:06:89:8e:5f:79:07:f7:
e8:df:fe:3f:1e:3e:2f:b2:88:7a:5d:ff:c1:cf:a4:
92:a4:cf:cf:92:1e:e7:87:e0:97:0e:5a:9f:68:94:
70:4d:91:36:1f:0f:31:ec:ab:e5:53:df:45:0f:c2:
e9:e8:be:f0:c8:d2:65:f2:d7:09:7c:7a:12:44:90:
db:1b:72:71:37:b4:4d:f5:b1:04:1d:33:f9:5b:ea:
6d:d6:8b:b5:9c:b2:cd:52:d7:e9:30:93:b5:fc:d0:
51:6e:55:3e:be:ff:56:d2:99:04:c6:58:1d:ed:6a:
cf:46:33:af:cf:ac:c7:8a:f5:be:5a:8b:34:07:47:
ac:a7:90:58:9f:8a:fb:00:b7:a7:4d:d7:66:56:11:
10:8a:9b:5b:e2:85:2b:c8:8c:3b:94:ee:19:72:1c:
71:c4:f1:51:33:fa:25:dc:96:7b:ac:a8:f4:86:02:
0a:b2:d7:9a:8b:0c:8a:40:07:23:41:1f:be:bb:83:
06:d5:04:89:a5:75:23:5e:50:9d:a4:22:19:c6:8e:
b8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
sbgp-ipAddrBlock: critical
IPv4:
102.210.190.0/23
IPv6:
2001:43ff:d000::/48
Signature Algorithm: sha256WithRSAEncryption
5f:c4:5f:df:a7:fa:28:45:fd:eb:09:ef:9d:fc:c6:da:fb:d7:
b2:30:e8:53:b9:eb:f0:20:bb:cc:f3:40:e0:64:3c:a4:c2:1d:
f8:3f:1e:6a:25:ff:85:be:bc:da:e1:c7:08:b7:89:5a:f7:42:
d8:74:3d:46:4d:e3:42:99:83:68:80:75:8c:76:f5:ce:b6:96:
0e:72:d1:3d:6a:42:5e:6b:25:df:44:ba:bf:f5:34:4b:df:cb:
b5:fa:28:71:b6:d2:eb:30:48:4e:09:9b:c5:d6:ea:bd:7f:96:
a0:7f:23:0a:26:d3:2f:6d:39:e9:3d:db:27:6a:c9:0d:b9:7f:
ad:d2:c5:59:a1:cf:cd:57:29:61:d2:bb:d4:66:b5:d4:98:09:
fb:fb:52:0c:95:7e:d5:04:ef:92:5d:57:a6:b2:75:fe:4c:a6:
4c:09:bc:e0:a2:25:b8:9a:87:0c:88:d7:3b:c9:0b:a8:d8:29:
2e:60:d1:7e:51:9b:e9:03:9c:8b:bf:27:16:ea:8a:60:c9:f9:
fe:00:f8:d6:78:a7:36:65:10:cc:c1:12:d1:b2:df:f5:69:8d:
40:2b:d2:de:36:1c:a3:b3:04:92:a1:9c:9a:04:7f:02:d8:cc:
d9:e2:37:fa:d8:96:87:70:c6:75:b6:13:09:cf:05:f8:e8:85:
b8:09:30:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:37:35 2025 by rpki-client