Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/B7h9lPBEiTVmQTOd5pFkR32P-kM.cer
File: B7h9lPBEiTVmQTOd5pFkR32P-kM.cer (raw, json)
Hash identifier: 5eIOegLslN3yLHg32xoGzsTNmai3/yubKoufz4eOjEU=
Subject key identifier: 07:B8:7D:94:F0:44:89:35:66:41:33:9D:E6:91:64:47:7D:8F:FA:43
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 33D0
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 06:29:17 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328427
IP: 102.68.136.0/22
IP: 2c0f:16c0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13264 (0x33d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 06:29:17 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36FE1EAAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:aa:4c:20:5b:a2:7e:d8:5d:87:5a:c7:16:20:
39:75:e2:4f:ce:4a:be:24:2f:88:c6:52:28:eb:ef:
11:99:1b:6b:ba:ec:79:6b:62:47:bd:5c:ba:ea:b8:
9e:8d:c3:6c:53:69:f9:f8:b5:2d:53:f6:00:d8:5d:
36:9f:1c:35:e4:cd:41:04:91:32:f6:9c:aa:c6:6b:
eb:28:04:00:d2:86:4b:74:e9:f5:04:2a:75:ac:14:
b5:ee:bf:f7:6a:96:87:f5:e2:12:5d:d6:22:0e:2b:
1c:61:51:8e:b8:76:3b:5c:6f:35:c9:93:6a:18:e6:
f8:0d:ef:cb:32:12:47:bf:85:2c:85:5b:a4:fa:89:
30:6e:60:db:7e:3b:18:b6:1e:65:9e:67:97:7b:b7:
f3:c8:ac:4c:e3:6c:de:44:14:d4:fc:9b:fa:a1:e3:
f7:68:12:02:2d:17:e1:de:af:fc:95:f6:0b:e7:bc:
b2:00:ca:3d:83:29:fd:68:26:44:8b:cb:f7:92:27:
86:f1:26:e5:8e:14:a4:b1:0d:e0:b3:22:d0:15:fd:
f9:2e:8a:7b:0f:66:75:f6:98:6c:23:5f:90:76:15:
79:36:2d:0b:5d:7d:1c:a5:cb:1c:0e:db:7d:8b:f8:
1c:19:9e:ef:b5:5b:1e:cf:25:02:26:cf:23:51:49:
81:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B8:7D:94:F0:44:89:35:66:41:33:9D:E6:91:64:47:7D:8F:FA:43
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/B7h9lPBEiTVmQTOd5pFkR32P-kM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328427
sbgp-ipAddrBlock: critical
IPv4:
102.68.136.0/22
IPv6:
2c0f:16c0::/32
Signature Algorithm: sha256WithRSAEncryption
5d:f6:f7:3d:06:1c:51:c5:a6:9b:12:98:04:e5:53:db:4d:02:
c7:43:56:1b:f0:8a:a4:02:9f:c0:c5:a8:f3:aa:70:ce:3b:5b:
3f:4e:60:40:ac:15:c8:1d:e6:0d:72:42:29:66:b4:2c:0a:2b:
0a:b2:02:74:ce:3c:a0:de:b2:c8:fd:fb:6f:96:0e:ec:6f:ef:
64:67:e6:7b:01:95:af:21:c6:73:de:a7:72:de:11:9f:b6:d6:
a7:d6:99:f1:a8:94:7e:83:4f:36:12:18:b9:78:e8:5b:af:9c:
c5:df:54:4f:2d:21:58:d1:15:e8:da:eb:66:1a:01:3b:39:3f:
95:2c:2a:a5:b3:42:0f:02:33:8a:4e:fd:6a:91:4e:dd:ff:4c:
f2:b8:db:d0:13:a4:58:8a:85:75:d5:72:40:2e:bd:98:40:41:
3e:ff:96:57:23:cd:ab:aa:68:09:63:47:19:bf:0d:b4:e7:dc:
9b:27:d3:3d:2f:7c:cd:4a:1b:ac:7e:54:1a:54:69:d7:8e:61:
fc:08:30:48:54:8a:dc:7a:9b:51:dd:71:2c:0c:f5:64:05:81:
9d:7e:a7:5f:42:6d:39:28:99:17:74:a1:fb:2a:cf:93:3b:65:
ab:84:79:40:8d:2a:d5:50:05:f9:46:dc:86:f1:e7:03:8c:0a:
84:d5:13:52
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICM9AwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwNjI5MTdaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkZFMUVBQUYxMTAvBgNVBAUTKDA3Qjg3RDk0RjA0NDg5MzU2NjQxMzM5
REU2OTE2NDQ3N0Q4RkZBNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDWqkwgW6J+2F2HWscWIDl14k/OSr4kL4jGUijr7xGZG2u67HlrYke9XLrquJ6N
w2xTafn4tS1T9gDYXTafHDXkzUEEkTL2nKrGa+soBADShkt06fUEKnWsFLXuv/dq
lof14hJd1iIOKxxhUY64djtcbzXJk2oY5vgN78syEke/hSyFW6T6iTBuYNt+Oxi2
HmWeZ5d7t/PIrEzjbN5EFNT8m/qh4/doEgItF+Her/yV9gvnvLIAyj2DKf1oJkSL
y/eSJ4bxJuWOFKSxDeCzItAV/fkuinsPZnX2mGwjX5B2FXk2LQtdfRylyxwO232L
+BwZnu+1Wx7PJQImzyNRSYG7AgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUB7h9lPBE
iTVmQTOd5pFkR32P+kMwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGRTFFQS8wNzgxQzc3MDgwNkYx
MUVFQURDOUVENTg0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RkUxRUEvMDc4MUM3NzA4MDZGMTFFRUFEQzlFRDU4NEFEOUU2RkMvQjdoOWxQ
QkVpVFZtUVRPZDVwRmtSMzJQLWtNLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAuswLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmRIgwDQQCAAIwBwMF
ACwPFsAwDQYJKoZIhvcNAQELBQADggEBAF329z0GHFHFppsSmATlU9tNAsdDVhvw
iqQCn8DFqPOqcM47Wz9OYECsFcgd5g1yQilmtCwKKwqyAnTOPKDessj9+2+WDuxv
72Rn5nsBla8hxnPep3LeEZ+21qfWmfGolH6DTzYSGLl46FuvnMXfVE8tIVjRFeja
62YaATs5P5UsKqWzQg8CM4pO/WqRTt3/TPK429ATpFiKhXXVckAuvZhAQT7/llcj
zauqaAljRxm/DbTn3Jsn0z0vfM1KG6x+VBpUadeOYfwIMEhUitx6m1HdcSwM9WQF
gZ1+p19CbTkomRd0ofsqz5M7ZauEeUCNKtVQBflG3Ibx5wOMCoTVE1I=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:54:20 2025 by rpki-client