Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/BMcND-EMj2sq-Ce3xmYXrcLvIeU.cer
File: BMcND-EMj2sq-Ce3xmYXrcLvIeU.cer (raw, json)
Hash identifier: l1FgCjxQ3wiqRlEdnxLEFbsS6TuN2mjDcMecz7ZjC2A=
Subject key identifier: 04:C7:0D:0F:E1:0C:8F:6B:2A:F8:27:B7:C6:66:17:AD:C2:EF:21:E5
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3516
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 28 May 2025 07:02:39 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328976
IP: 102.217.236.0/22
IP: 2c0f:2300::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Jun 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13590 (0x3516)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: May 28 07:02:39 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F362B2F5AF, serialNumber=04C70D0FE10C8F6B2AF827B7C66617ADC2EF21E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:29:da:60:84:e6:00:33:cf:4c:97:c1:3b:
a3:dc:d1:5d:2b:e8:96:71:69:62:3e:72:7d:db:54:
3d:8f:f2:f1:10:7d:c6:d8:21:4d:ff:ab:5e:57:51:
27:cb:ee:e1:9f:70:99:52:dc:e2:06:7e:ba:39:d5:
f1:ed:ea:95:16:40:c9:6f:83:3d:15:4c:c5:77:3c:
ec:d1:51:c5:b8:63:01:19:d9:ba:63:6e:1a:5e:cb:
94:fa:8e:9b:96:55:4d:8f:6c:41:73:b1:74:ec:cd:
d3:97:8f:2c:4d:a2:18:bb:b7:c9:37:05:3f:06:7f:
50:e8:d0:d4:3c:86:ae:dc:ed:b7:78:5c:61:11:be:
f9:48:1a:52:75:ba:cf:f5:90:7a:23:f4:1b:fd:59:
05:ee:b2:bf:0e:12:23:6c:d4:62:44:ae:6f:ff:88:
db:44:39:af:e1:ca:69:31:23:a5:54:6d:cb:5f:94:
7c:fb:3d:d5:60:5f:51:4c:12:f6:f4:8f:cb:b3:99:
0e:95:31:16:0b:0c:72:5c:80:45:1f:d4:4d:88:4b:
7e:23:4e:24:83:38:6f:f9:22:ad:c1:73:6e:76:21:
2e:a3:1a:87:71:5f:d4:2c:82:75:a1:9f:f5:f5:41:
ac:5a:34:ce:05:62:ef:73:85:ae:a0:77:23:02:48:
92:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C7:0D:0F:E1:0C:8F:6B:2A:F8:27:B7:C6:66:17:AD:C2:EF:21:E5
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328976
sbgp-ipAddrBlock: critical
IPv4:
102.217.236.0/22
IPv6:
2c0f:2300::/32
Signature Algorithm: sha256WithRSAEncryption
3e:5d:d4:36:6f:4a:d4:36:e0:dd:b1:1e:93:df:30:91:42:3e:
fb:fc:67:3c:02:2d:01:f3:77:ef:43:96:61:f0:0e:15:44:32:
12:19:73:c6:fb:3f:22:72:19:f6:bc:bd:9c:33:02:4f:99:1c:
3c:02:2c:9f:27:e4:58:dc:5f:5f:13:76:55:62:f7:fc:1a:3b:
42:67:14:83:af:83:57:c5:2b:fb:0b:60:97:9d:53:1f:73:30:
04:00:93:97:7e:ed:b6:7d:88:69:e5:ae:e9:0c:97:36:d3:98:
df:c2:1c:6c:1f:24:e3:a2:3f:5f:eb:9d:c9:fb:7c:53:82:3d:
1c:f4:0a:53:54:6b:0b:93:50:5d:eb:38:f1:53:aa:34:6f:70:
9e:22:f9:41:6d:30:49:05:ba:a4:a9:72:2c:fa:7f:08:e9:69:
87:44:db:b0:92:18:1e:a4:2f:fb:b5:b3:05:4c:72:e4:da:d4:
d4:36:6c:ad:53:9c:21:e8:eb:05:b6:4b:ae:cb:e2:20:8f:87:
7c:14:92:c3:56:30:f4:5e:66:9c:71:90:c3:a3:95:9e:98:83:
ba:49:f8:be:32:d5:80:e9:bd:fb:ec:bf:72:6a:41:15:b5:38:
d7:c1:e8:30:fa:93:8d:8b:61:44:c4:9e:67:20:5c:8f:dd:cf:
fb:5f:98:c2
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICNRYwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTA1MjgwNzAyMzlaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjJCMkY1QUYxMTAvBgNVBAUTKDA0QzcwRDBGRTEwQzhGNkIyQUY4MjdC
N0M2NjYxN0FEQzJFRjIxRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCnTinaYITmADPPTJfBO6Pc0V0r6JZxaWI+cn3bVD2P8vEQfcbYIU3/q15XUSfL
7uGfcJlS3OIGfro51fHt6pUWQMlvgz0VTMV3POzRUcW4YwEZ2bpjbhpey5T6jpuW
VU2PbEFzsXTszdOXjyxNohi7t8k3BT8Gf1Do0NQ8hq7c7bd4XGERvvlIGlJ1us/1
kHoj9Bv9WQXusr8OEiNs1GJErm//iNtEOa/hymkxI6VUbctflHz7PdVgX1FMEvb0
j8uzmQ6VMRYLDHJcgEUf1E2IS34jTiSDOG/5Iq3Bc252IS6jGodxX9QsgnWhn/X1
QaxaNM4FYu9zha6gdyMCSJIVAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUBMcND+EM
j2sq+Ce3xmYXrcLvIeUwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyQjJGNS9CNUM3ODZBNjNCOTEx
MUYwQTBGRTFBQjJEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MkIyRjUvQjVDNzg2QTYzQjkxMTFGMEEwRkUxQUIyREFFNEVDOUMvQk1jTkQt
RU1qMnNxLUNlM3htWVhyY0x2SWVVLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBRAwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm2ewwDQQCAAIwBwMF
ACwPIwAwDQYJKoZIhvcNAQELBQADggEBAD5d1DZvStQ24N2xHpPfMJFCPvv8ZzwC
LQHzd+9DlmHwDhVEMhIZc8b7PyJyGfa8vZwzAk+ZHDwCLJ8n5FjcX18TdlVi9/wa
O0JnFIOvg1fFK/sLYJedUx9zMAQAk5d+7bZ9iGnlrukMlzbTmN/CHGwfJOOiP1/r
ncn7fFOCPRz0ClNUawuTUF3rOPFTqjRvcJ4i+UFtMEkFuqSpciz6fwjpaYdE27CS
GB6kL/u1swVMcuTa1NQ2bK1TnCHo6wW2S67L4iCPh3wUksNWMPReZpxxkMOjlZ6Y
g7pJ+L4y1YDpvfvsv3JqQRW1ONfB6DD6k42LYUTEnmcgXI/dz/tfmMI=
-----END CERTIFICATE-----
Generated at Mon Jun 2 17:07:18 2025 by rpki-client