Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/AIjURX5EJgLXZtupDh_CJL1-i7Y.cer
File: AIjURX5EJgLXZtupDh_CJL1-i7Y.cer (raw, json)
Hash identifier: 9eWqzELG/enLdHFHr9JkDP+ge0Ald78XtMXmQ494A9k=
Subject key identifier: 00:88:D4:45:7E:44:26:02:D7:66:DB:A9:0E:1F:C2:24:BD:7E:8B:B6
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 35B0
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 22 Jul 2025 00:28:59 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329583
IP: 102.205.80.0/22
IP: 2c0f:2ac0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13744 (0x35b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jul 22 00:28:59 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3640D65AF, serialNumber=0088D4457E442602D766DBA90E1FC224BD7E8BB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:db:23:78:60:97:b8:a4:e4:cb:25:37:03:98:
ab:1e:f2:a9:8d:d9:a5:d0:ea:d8:cb:3f:4f:a9:c1:
41:0b:94:ee:ee:b6:c4:fb:f7:7f:e9:ce:c4:37:ea:
e1:54:fe:96:19:c3:a7:14:f9:03:f4:98:f1:76:46:
74:d6:25:29:1d:af:7a:37:35:c0:5d:d1:f5:4d:c3:
c4:51:5c:8b:97:fd:72:f9:80:bd:a2:f3:8b:93:19:
31:70:40:19:99:0c:d2:18:cf:16:8c:32:78:9c:9a:
36:60:7e:86:2b:cb:27:4b:04:3b:9b:fb:1b:13:af:
ef:28:28:70:f5:06:b7:63:d5:9a:77:fe:fb:4b:2b:
da:aa:2c:8b:ab:53:94:89:76:02:6e:29:2d:e1:18:
5a:25:fe:d4:47:b0:07:2e:66:5d:01:59:b2:94:52:
cd:0f:87:f2:9c:52:93:83:a8:0c:ad:7e:90:1a:27:
3e:66:33:a0:5c:0f:2b:41:85:e3:79:2b:7c:8d:36:
2d:49:99:35:f0:a3:80:ac:6a:72:21:b8:4e:e3:d6:
d2:1f:2b:48:48:9b:f4:89:7e:82:0b:48:24:14:06:
94:3f:f5:f3:0c:92:71:d2:cb:8f:51:f4:29:07:10:
81:07:9a:b0:a0:a9:73:80:87:7b:7b:62:f1:bd:47:
9b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:88:D4:45:7E:44:26:02:D7:66:DB:A9:0E:1F:C2:24:BD:7E:8B:B6
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640D65/D6E7DE72669211F0B236DBEBDAE4EC9C/AIjURX5EJgLXZtupDh_CJL1-i7Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329583
sbgp-ipAddrBlock: critical
IPv4:
102.205.80.0/22
IPv6:
2c0f:2ac0::/32
Signature Algorithm: sha256WithRSAEncryption
a2:51:d2:c1:70:35:73:d2:52:f8:90:a0:cf:cf:f4:bb:22:af:
1e:c6:c4:a2:01:1c:95:a9:50:79:ac:eb:74:40:0e:1e:dc:a2:
cc:4b:99:66:bb:3a:79:56:31:9a:90:04:52:76:6a:85:54:b6:
af:cf:89:c3:12:10:55:b5:a6:87:24:5e:f7:96:f8:e9:a7:ee:
f9:2c:b2:7e:ee:98:78:84:51:aa:d1:c6:d7:be:71:bc:47:9c:
00:86:95:90:df:57:13:4f:85:05:d4:c5:b3:4c:43:8f:58:ed:
45:9c:e6:ea:0e:10:3c:8c:a2:58:c9:4d:b1:c2:64:ee:46:c7:
0b:42:a6:3d:c5:7b:6e:eb:ef:26:6b:67:e7:dc:dc:8a:a7:4a:
27:6e:f6:9f:f4:8f:1a:cd:f8:d1:d4:e2:0c:65:ba:cb:01:9d:
a5:57:96:a0:bd:09:4c:c8:4b:e5:ec:46:91:0d:2b:09:a6:92:
bd:1c:d2:c0:1a:3b:55:e1:86:99:72:0f:39:56:d1:ba:ea:70:
1c:ec:94:79:79:58:bd:2f:20:69:d9:1d:f2:69:11:8d:d0:ce:
d7:05:79:cc:ba:fa:8b:d7:42:be:ee:22:2e:97:22:f0:d8:24:
0c:e3:c4:6f:a3:e6:a6:5a:91:89:2f:3b:ae:45:aa:04:a9:4e:
1e:73:d6:ce
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICNbAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTA3MjIwMDI4NTlaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjQwRDY1QUYxMTAvBgNVBAUTKDAwODhENDQ1N0U0NDI2MDJENzY2REJB
OTBFMUZDMjI0QkQ3RThCQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDq2yN4YJe4pOTLJTcDmKse8qmN2aXQ6tjLP0+pwUELlO7utsT793/pzsQ36uFU
/pYZw6cU+QP0mPF2RnTWJSkdr3o3NcBd0fVNw8RRXIuX/XL5gL2i84uTGTFwQBmZ
DNIYzxaMMnicmjZgfoYryydLBDub+xsTr+8oKHD1Brdj1Zp3/vtLK9qqLIurU5SJ
dgJuKS3hGFol/tRHsAcuZl0BWbKUUs0Ph/KcUpODqAytfpAaJz5mM6BcDytBheN5
K3yNNi1JmTXwo4CsanIhuE7j1tIfK0hIm/SJfoILSCQUBpQ/9fMMknHSy49R9CkH
EIEHmrCgqXOAh3t7YvG9R5uXAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUAIjURX5E
JgLXZtupDh/CJL1+i7YwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0MEQ2NS9ENkU3REU3MjY2OTIx
MUYwQjIzNkRCRUJEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDBENjUvRDZFN0RFNzI2NjkyMTFGMEIyMzZEQkVCREFFNEVDOUMvQUlqVVJY
NUVKZ0xYWnR1cERoX0NKTDEtaTdZLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFB28wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmzVAwDQQCAAIwBwMF
ACwPKsAwDQYJKoZIhvcNAQELBQADggEBAKJR0sFwNXPSUviQoM/P9Lsirx7GxKIB
HJWpUHms63RADh7cosxLmWa7OnlWMZqQBFJ2aoVUtq/PicMSEFW1pockXveW+Omn
7vkssn7umHiEUarRxte+cbxHnACGlZDfVxNPhQXUxbNMQ49Y7UWc5uoOEDyMoljJ
TbHCZO5GxwtCpj3Fe27r7yZrZ+fc3IqnSidu9p/0jxrN+NHU4gxlussBnaVXlqC9
CUzIS+XsRpENKwmmkr0c0sAaO1XhhplyDzlW0brqcBzslHl5WL0vIGnZHfJpEY3Q
ztcFecy6+ovXQr7uIi6XIvDYJAzjxG+j5qZakYkvO65FqgSpTh5z1s4=
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:34:41 2025 by rpki-client