Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/9s_tdm0YWlpEFVDpcITTe-KcA-s.cer
File: 9s_tdm0YWlpEFVDpcITTe-KcA-s.cer (raw, json)
Hash identifier: DZQD16YsxRZhWc+WKEW019Ai7copj5Tt8ivFqNiRDMY=
Subject key identifier: F6:CF:ED:76:6D:18:5A:5A:44:15:50:E9:70:84:D3:7B:E2:9C:03:EB
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2E15
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:17:42 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 36891
IP: 196.41.224.0/19
IP: 197.140.0.0/14
IP: 2c0f:f000::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11797 (0x2e15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:17:42 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F363DDF3AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:eb:70:3e:80:fb:39:ee:21:56:83:23:25:
94:aa:52:29:08:cd:48:18:78:b8:a8:8b:c3:d8:b6:
2b:59:c3:e9:d8:c1:59:e0:f6:de:c9:85:36:e8:36:
ee:98:6e:11:e4:25:f8:3a:bb:47:0a:4d:10:aa:a5:
bb:7e:67:fe:0a:df:06:45:0a:40:6f:db:ac:1c:85:
33:5b:5b:f0:1d:ab:8d:ad:87:b3:6b:9d:78:53:94:
96:8f:67:33:e6:61:e5:dd:a2:8f:97:b4:e7:f2:5c:
3f:c0:c7:04:f3:4e:65:87:91:47:f8:29:04:90:e9:
06:b8:6a:3f:fa:6b:98:9f:59:e2:5f:e8:f2:52:ac:
7c:1b:2b:41:fa:24:35:fc:e6:4c:f1:50:95:0d:f8:
49:09:6f:3d:a5:96:51:d7:ed:44:19:e0:9c:87:b2:
b5:11:03:ea:60:76:02:39:3c:1b:93:05:7e:09:58:
d8:c2:f4:ce:3a:87:4d:fa:79:fc:06:d4:f3:26:e7:
f4:12:05:90:61:12:12:83:af:c9:00:f6:b4:e1:73:
89:cb:0c:09:8a:40:09:97:87:5f:59:a1:db:b7:a9:
10:30:d0:49:fd:23:84:06:62:8c:81:81:7e:9f:35:
79:b5:f9:12:12:b5:4b:ac:ed:f6:ad:67:a6:a9:c8:
d4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CF:ED:76:6D:18:5A:5A:44:15:50:E9:70:84:D3:7B:E2:9C:03:EB
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36891
sbgp-ipAddrBlock: critical
IPv4:
196.41.224.0/19
197.140.0.0/14
IPv6:
2c0f:f000::/32
Signature Algorithm: sha256WithRSAEncryption
6b:de:cd:92:52:81:99:85:e6:ca:94:1e:a5:76:8e:a4:1d:68:
d1:d6:c4:9d:db:7e:cd:bb:79:a1:e4:72:02:7a:3d:5f:23:60:
8e:e1:24:51:24:f5:18:f4:ad:2d:33:03:0f:96:ab:43:b5:3a:
a6:b1:71:dd:cd:82:a3:1f:cb:d9:e6:94:63:1d:06:2e:56:62:
08:4a:80:9d:7d:ae:47:42:ed:87:67:e4:d3:1c:9e:e1:62:e8:
2e:21:4c:4f:7d:5d:49:69:e9:54:6b:6c:ea:14:aa:79:75:0e:
c5:70:77:98:f6:bd:0f:f1:27:46:a0:89:6a:21:ff:20:b4:21:
e5:30:59:fc:d8:13:5e:57:92:8b:db:37:69:4a:ed:c6:1d:47:
9f:ad:2a:d6:ca:10:d8:c2:61:08:77:64:16:70:eb:de:1f:e2:
84:c1:c3:29:b6:1a:ca:5a:30:6f:ee:30:25:21:c3:de:30:3f:
5d:be:8c:c3:6c:3e:6d:79:e5:e7:ba:fb:40:4a:d2:79:37:95:
36:f5:ce:54:6a:a3:12:f3:37:b3:39:ac:61:cd:ce:ed:52:9d:
54:75:3f:c4:cd:3b:b1:0c:e2:93:a7:f9:ee:bf:7a:f3:1c:26:
1c:3e:5c:12:d8:f0:93:9a:50:f0:16:67:32:9f:c9:03:87:77:
e0:15:d0:f8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:40:35 2025 by rpki-client