Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer
File: B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer (raw, json)
Hash identifier: DVgSw36xOoOh8jhejI6clcmrOelFAXscxqi3QjV+YJk=
Subject key identifier: 07:61:25:7D:C9:89:C6:7C:BF:E1:63:74:83:4C:E8:59:21:68:C9:64
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3488
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 27 Mar 2025 19:27:37 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329310
IP: 102.211.108.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13448 (0x3488)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Mar 27 19:27:37 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3659389AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:0d:ef:97:44:30:8b:1b:88:a4:fc:ce:63:
bc:41:8d:13:a2:ac:a2:b8:95:da:5c:80:4a:18:66:
8b:6a:a1:3c:fd:f9:31:52:03:a3:9b:be:63:3f:85:
cb:1e:52:59:dd:1f:1c:f4:3f:c4:0b:b4:a5:fa:86:
7d:b6:cd:8a:ff:f0:6f:2e:ae:ca:b2:12:3e:e6:30:
e2:89:1b:2e:83:ed:21:bd:c3:ad:3b:38:55:a3:44:
1c:9d:dc:9c:e8:32:c1:59:d5:99:83:eb:48:76:10:
0f:b2:fc:80:19:21:5e:d0:92:07:38:23:14:1a:e1:
65:3f:68:70:a7:35:7d:dc:2f:13:2d:ad:f6:9a:0a:
17:5e:23:c4:48:31:22:16:17:cd:9c:9d:fe:f2:46:
3f:97:40:eb:e5:de:54:ae:44:f3:b5:c4:4a:fd:1f:
34:90:48:7d:65:ec:4d:fe:50:24:3f:61:1d:ba:0c:
49:91:3d:a6:b9:b2:29:a0:0d:63:61:58:e0:03:13:
6b:9f:01:5c:21:ab:20:e9:f9:8b:c5:e8:5f:83:9a:
a0:62:19:23:72:d6:cb:2b:ac:85:cd:8e:94:78:e8:
81:7d:6c:89:db:a9:9f:b0:8a:01:1a:ad:4d:61:eb:
9c:03:05:0c:ea:eb:99:c1:5a:e1:53:9c:f1:80:64:
ef:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:61:25:7D:C9:89:C6:7C:BF:E1:63:74:83:4C:E8:59:21:68:C9:64
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329310
sbgp-ipAddrBlock: critical
IPv4:
102.211.108.0/22
Signature Algorithm: sha256WithRSAEncryption
10:bf:e2:9c:6f:ee:7b:9c:e9:6d:b5:e3:2b:ad:db:aa:08:8c:
ea:ff:c6:77:36:5c:cb:c3:94:63:21:b1:33:ad:f4:0b:bb:06:
a7:25:d5:ca:3c:bd:c1:22:b6:45:72:b6:9a:49:e3:fc:ea:96:
98:ac:ce:ab:1b:22:2a:b4:e2:58:36:98:a0:42:1e:e8:e4:4d:
da:62:6a:d8:a6:64:41:10:d9:4f:e1:76:6a:85:22:4c:de:e9:
3b:c3:25:4c:0c:4f:b6:0b:49:a8:de:a7:1a:b5:c5:4f:44:f0:
70:ac:55:80:bd:93:2e:26:1d:82:d5:5e:34:b9:ca:df:8b:e9:
9d:25:1d:ce:27:4a:b2:c6:47:01:f6:91:a9:2c:f7:3a:b9:20:
7b:24:81:8b:61:af:54:e9:9c:49:f9:f2:53:b4:7e:c4:1a:aa:
75:9d:e7:28:0e:b3:3d:ef:1a:dc:21:af:3f:9e:af:e8:a3:2f:
b6:62:ec:63:62:cb:c6:79:d7:7a:f6:42:9f:0e:bf:65:4d:17:
5f:30:26:9e:55:85:2d:66:41:f1:95:b2:fc:34:df:a1:0e:b0:
68:96:53:c5:e5:21:83:f8:18:d1:c5:a6:44:d5:ce:aa:df:46:
2f:6c:a2:07:9e:90:2a:81:f4:e5:a1:05:1a:7b:cb:98:89:94:
f7:d2:5e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:31:11 2025 by rpki-client