Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer
File: BzRbRCXqohbQO3DogD88w6vhdRw.cer (raw, json)
Hash identifier: htCoGgIx7eTiNtUgsfrJ4RfJwDvve58YOQzOLtgYCQ4=
Subject key identifier: 07:34:5B:44:25:EA:A2:16:D0:3B:70:E8:80:3F:3C:C3:AB:E1:75:1C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2CD3
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:05:54 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 327906
IP: 102.217.144.0/22
IP: 2c0f:f008::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11475 (0x2cd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:05:54 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36145DBAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:50:18:9a:33:1a:5c:de:3c:73:a8:6a:88:3a:
cc:42:65:39:a5:5c:e9:43:6b:92:3b:70:7c:07:8f:
c7:2d:69:38:16:84:18:60:fe:07:91:36:f7:74:5e:
1b:05:eb:e7:8f:5a:ea:04:3a:c5:41:5d:2d:e2:f7:
55:bb:4e:be:39:1c:97:55:34:ea:08:d0:e4:7e:94:
08:e7:5e:36:18:89:84:fc:20:53:26:2d:6e:b3:43:
11:c8:c8:53:19:66:44:82:29:49:77:60:ca:40:96:
e6:e8:1c:56:5c:d7:bf:a5:f4:74:8f:07:83:48:ee:
72:ad:82:93:98:b2:94:4d:ba:ea:aa:3b:72:7c:37:
26:98:de:92:7b:74:8c:89:85:47:64:9a:cd:e8:6c:
c0:62:f8:66:00:4d:e6:4f:27:c2:62:b8:30:67:bc:
f0:a1:e2:31:fd:b4:fa:51:84:e4:22:a8:2c:c1:e4:
29:81:d1:70:cd:12:b5:81:49:da:4b:9a:f8:0d:f1:
93:81:05:f3:9a:2f:ff:22:d3:30:83:91:a6:9d:4e:
ab:05:29:49:2f:46:c3:5f:c2:72:ef:53:5d:7e:01:
58:73:f4:79:94:4f:f5:56:fb:72:09:98:53:01:5c:
ef:42:f1:1d:f3:cd:a6:7f:5c:f3:46:81:3b:65:ca:
8c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:34:5B:44:25:EA:A2:16:D0:3B:70:E8:80:3F:3C:C3:AB:E1:75:1C
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327906
sbgp-ipAddrBlock: critical
IPv4:
102.217.144.0/22
IPv6:
2c0f:f008::/32
Signature Algorithm: sha256WithRSAEncryption
3f:1b:93:34:70:10:10:81:58:77:6c:d0:d0:82:94:50:4c:11:
b7:49:ec:fa:44:b6:00:d1:99:7d:52:fe:70:eb:68:75:23:a1:
7b:d8:c9:a0:09:6f:da:26:6a:06:91:e2:2d:c8:ae:34:16:c0:
60:7b:1b:c0:ec:59:1b:77:36:40:27:ce:80:41:86:b4:02:78:
e9:8c:47:9a:e7:e0:a8:42:e5:01:8b:3d:e4:a5:43:1a:62:d6:
2f:89:6c:5f:51:d4:ff:9e:f7:11:ed:60:d9:2b:95:0b:2b:a4:
7d:d1:d0:0a:2d:fc:8c:38:e0:1d:e4:cb:5b:51:da:9e:bf:94:
cd:cb:9b:f9:08:75:3f:0e:e9:af:f2:6b:f9:fc:19:f8:44:14:
47:5e:7f:ac:41:6c:73:9c:ab:45:8b:2a:05:7d:96:21:4d:cf:
d2:27:41:0d:6a:d0:a8:85:62:6f:7c:9b:bf:17:ac:db:e8:03:
92:c9:da:de:6f:4d:63:33:6a:99:98:86:00:8b:36:de:2e:f7:
5b:7b:76:cf:94:10:8e:bc:d5:93:6d:23:80:e2:92:a9:d4:cf:
95:79:b4:73:c7:5d:14:3c:14:30:68:2a:bf:0c:44:8c:23:27:
ee:85:99:5a:e3:1d:0c:e4:59:3d:7b:92:9a:84:e5:50:de:18:
af:52:5c:ea
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICLNMwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMDA1NTRaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjE0NURCQUYxMTAvBgNVBAUTKDA3MzQ1QjQ0MjVFQUEyMTZEMDNCNzBF
ODgwM0YzQ0MzQUJFMTc1MUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQChUBiaMxpc3jxzqGqIOsxCZTmlXOlDa5I7cHwHj8ctaTgWhBhg/geRNvd0XhsF
6+ePWuoEOsVBXS3i91W7Tr45HJdVNOoI0OR+lAjnXjYYiYT8IFMmLW6zQxHIyFMZ
ZkSCKUl3YMpAluboHFZc17+l9HSPB4NI7nKtgpOYspRNuuqqO3J8NyaY3pJ7dIyJ
hUdkms3obMBi+GYATeZPJ8JiuDBnvPCh4jH9tPpRhOQiqCzB5CmB0XDNErWBSdpL
mvgN8ZOBBfOaL/8i0zCDkaadTqsFKUkvRsNfwnLvU11+AVhz9HmUT/VW+3IJmFMB
XO9C8R3zzaZ/XPNGgTtlyoyNAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUBzRbRCXq
ohbQO3DogD88w6vhdRwwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxNDVEQi81NTMwRjZEOENBMjgx
MUVEOTQ1NTY2OTVGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTQ1REIvNTUzMEY2RDhDQTI4MTFFRDk0NTU2Njk1RjEyMjI0NjgvQnpSYlJD
WHFvaGJRTzNEb2dEODh3NnZoZFJ3Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAOIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm2ZAwDQQCAAIwBwMF
ACwP8AgwDQYJKoZIhvcNAQELBQADggEBAD8bkzRwEBCBWHds0NCClFBMEbdJ7PpE
tgDRmX1S/nDraHUjoXvYyaAJb9omagaR4i3IrjQWwGB7G8DsWRt3NkAnzoBBhrQC
eOmMR5rn4KhC5QGLPeSlQxpi1i+JbF9R1P+e9xHtYNkrlQsrpH3R0Aot/Iw44B3k
y1tR2p6/lM3Lm/kIdT8O6a/ya/n8GfhEFEdef6xBbHOcq0WLKgV9liFNz9InQQ1q
0KiFYm98m78XrNvoA5LJ2t5vTWMzapmYhgCLNt4u91t7ds+UEI681ZNtI4DikqnU
z5V5tHPHXRQ8FDBoKr8MRIwjJ+6FmVrjHQzkWT17kpqE5VDeGK9SXOo=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:37:35 2025 by rpki-client