Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/CFZSep0iAmz-gRG6M4cl_B6GyqA.cer
File: CFZSep0iAmz-gRG6M4cl_B6GyqA.cer (raw, json)
Hash identifier: yrZIgNIM91mevpyzzTqhQDi9iq8EJyqFwOtOOZpVMs4=
Subject key identifier: 08:56:52:7A:9D:22:02:6C:FE:81:11:BA:33:87:25:FC:1E:86:CA:A0
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 34F9
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 13 May 2025 07:24:35 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328482
IP: 102.67.152.0/22
IP: 2c0f:ed90::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Jun 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13561 (0x34f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: May 13 07:24:35 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36993D4AF, serialNumber=0856527A9D22026CFE8111BA338725FC1E86CAA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:a8:39:82:55:4f:3f:be:0f:93:df:4b:8f:
9a:6a:a6:9c:b6:51:f1:ac:04:05:06:23:46:60:7b:
51:c6:b2:4c:78:5b:fb:68:28:b8:02:79:20:43:19:
bb:93:63:90:54:ee:46:f7:f4:ee:74:11:31:58:e9:
fc:36:12:48:3a:38:76:13:5d:6e:f0:bb:29:1d:e1:
e0:3a:5a:73:f1:72:c1:a2:78:a3:5e:61:ff:59:6f:
2d:ce:ce:dd:22:57:c4:b8:1d:72:64:7a:b9:10:0e:
20:ca:71:94:0b:fa:d0:b2:94:b2:af:b7:12:fa:78:
c8:09:a7:52:8f:0f:73:5b:86:14:b5:fb:0d:16:1e:
b8:13:da:22:c6:7f:f3:68:48:06:6f:d8:50:24:7e:
da:57:c7:7c:f1:83:e4:55:1f:be:12:d4:fd:e7:44:
4e:c9:29:82:3d:d0:d5:7e:74:51:83:72:be:19:0d:
f7:ea:03:46:ad:f4:b5:f6:e4:ad:83:d9:c2:47:dc:
ca:88:f3:18:3d:46:fb:83:6a:cf:0d:74:86:2d:43:
c5:dc:69:0e:b9:b1:f6:b5:4f:a0:cc:b4:43:89:e7:
c6:5d:6b:4f:61:ca:03:2b:4f:80:8b:d9:61:9e:27:
aa:1f:38:3e:82:16:81:ef:31:05:8e:23:0d:22:b8:
9d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:56:52:7A:9D:22:02:6C:FE:81:11:BA:33:87:25:FC:1E:86:CA:A0
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328482
sbgp-ipAddrBlock: critical
IPv4:
102.67.152.0/22
IPv6:
2c0f:ed90::/32
Signature Algorithm: sha256WithRSAEncryption
57:e5:4c:8c:b5:4e:b0:60:34:9a:e7:c1:0e:cd:eb:a4:b5:90:
5a:12:7d:91:9b:45:82:d8:f4:49:de:2d:10:ba:49:e3:60:7e:
6e:78:47:5f:c7:0e:6c:ce:d7:23:a5:ee:38:7a:ee:d2:a1:7e:
5e:0c:47:dd:a6:bc:82:49:8c:a4:da:60:6f:41:c1:8d:ac:21:
bc:a1:34:2a:dd:86:bf:b4:81:eb:d4:5a:88:2e:6c:75:54:a0:
84:5a:ed:8a:17:21:e9:ac:eb:4e:79:f8:80:a2:44:61:c7:65:
85:fc:09:c4:ce:39:f4:15:48:4d:88:bd:d8:e6:8b:95:0e:f4:
51:51:2b:fe:16:ea:4f:e8:8b:21:1f:6d:0b:42:96:74:fb:9d:
99:c0:9d:34:12:d9:05:9d:d8:38:22:c5:dd:bb:e3:85:1a:87:
85:40:48:77:4f:70:25:e1:03:9b:2a:6a:aa:23:1d:8f:83:40:
d6:46:78:cc:66:69:d2:d9:12:bb:6c:2f:a5:36:0f:4f:da:a6:
b6:39:b7:cc:dc:dd:47:e8:45:f2:d3:84:70:30:5a:5a:f7:c8:
b9:4a:95:51:c1:43:3a:41:35:54:f7:2d:03:6b:21:08:be:71:
be:31:8b:47:f9:aa:e0:96:70:5e:92:6b:a6:12:13:5d:11:99:
43:b3:f0:6c
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICNPkwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTA1MTMwNzI0MzVaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjk5M0Q0QUYxMTAvBgNVBAUTKDA4NTY1MjdBOUQyMjAyNkNGRTgxMTFC
QTMzODcyNUZDMUU4NkNBQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJ/qg5glVPP74Pk99Lj5pqppy2UfGsBAUGI0Zge1HGskx4W/toKLgCeSBDGbuT
Y5BU7kb39O50ETFY6fw2Ekg6OHYTXW7wuykd4eA6WnPxcsGieKNeYf9Zby3Ozt0i
V8S4HXJkerkQDiDKcZQL+tCylLKvtxL6eMgJp1KPD3NbhhS1+w0WHrgT2iLGf/No
SAZv2FAkftpXx3zxg+RVH74S1P3nRE7JKYI90NV+dFGDcr4ZDffqA0at9LX25K2D
2cJH3MqI8xg9RvuDas8NdIYtQ8XcaQ65sfa1T6DMtEOJ58Zda09hygMrT4CL2WGe
J6ofOD6CFoHvMQWOIw0iuJ3NAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUCFZSep0i
Amz+gRG6M4cl/B6GyqAwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5OTNENC80QTczNEI4MjJGQ0Ix
MUYwOUM5QjBEQkNEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTkzRDQvNEE3MzRCODIyRkNCMTFGMDlDOUIwREJDREFFNEVDOUMvQ0ZaU2Vw
MGlBbXotZ1JHNk00Y2xfQjZHeXFBLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAyIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmQ5gwDQQCAAIwBwMF
ACwP7ZAwDQYJKoZIhvcNAQELBQADggEBAFflTIy1TrBgNJrnwQ7N66S1kFoSfZGb
RYLY9EneLRC6SeNgfm54R1/HDmzO1yOl7jh67tKhfl4MR92mvIJJjKTaYG9BwY2s
IbyhNCrdhr+0gevUWogubHVUoIRa7YoXIems6055+ICiRGHHZYX8CcTOOfQVSE2I
vdjmi5UO9FFRK/4W6k/oiyEfbQtClnT7nZnAnTQS2QWd2Dgixd2744Uah4VASHdP
cCXhA5sqaqojHY+DQNZGeMxmadLZErtsL6U2D0/aprY5t8zc3UfoRfLThHAwWlr3
yLlKlVHBQzpBNVT3LQNrIQi+cb4xi0f5quCWcF6Sa6YSE10RmUOz8Gw=
-----END CERTIFICATE-----
Generated at Mon Jun 2 16:47:37 2025 by rpki-client