Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.cer
File: CZ27mSilwp-lkiz9uV8ZDsD7Ssg.cer (raw, json)
Hash identifier: +wStU0eP31TTn7aoCphHR369xgr1p7JvMSt1ZulOmtk=
Subject key identifier: 09:9D:BB:99:28:A5:C2:9F:A5:92:2C:FD:B9:5F:19:0E:C0:FB:4A:C8
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2DE0
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:06:42 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328535
IP: 102.36.212.0/22
IP: 2c0f:d80::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11744 (0x2de0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:06:42 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F363763AAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:85:a9:aa:8d:44:f7:df:42:8a:88:23:a0:81:
2b:10:01:b0:89:fa:b6:b6:1d:d0:5b:88:68:00:a6:
2d:34:99:92:ea:c1:17:95:08:65:1e:a4:4b:98:f8:
30:04:52:1c:04:24:0c:88:3a:41:8b:2a:d6:bf:14:
8f:59:ac:af:2f:46:be:84:88:82:e2:e6:98:65:93:
63:dd:d3:f3:f5:52:10:56:14:cc:7c:e8:cd:da:c8:
15:32:19:38:1b:e3:8b:4b:26:40:fc:bd:12:8b:23:
35:0a:c2:4a:04:c7:b4:a0:6a:58:f0:db:59:18:4a:
d6:3f:cc:95:70:84:69:f0:da:ea:8d:46:f1:78:42:
52:d8:ff:ce:75:39:5f:f5:fa:83:28:7d:c5:f6:68:
1e:10:15:0a:1f:2b:15:e0:e2:07:a7:e0:2b:77:74:
5c:e7:d6:a2:57:c4:ce:b0:3a:45:b3:49:0f:da:e5:
d7:31:e9:bc:1c:06:60:c2:fc:1d:b0:06:4e:de:2d:
8b:2c:c3:e4:8b:ed:8b:fa:b7:28:88:29:e7:78:7a:
44:83:bf:5d:73:e4:1e:96:7b:51:95:d7:98:2a:cd:
95:88:11:1a:8b:5a:04:56:01:7c:7d:c3:85:b8:c9:
ed:f7:6e:f9:3f:4d:68:39:6d:2f:45:e4:6f:93:bc:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9D:BB:99:28:A5:C2:9F:A5:92:2C:FD:B9:5F:19:0E:C0:FB:4A:C8
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328535
sbgp-ipAddrBlock: critical
IPv4:
102.36.212.0/22
IPv6:
2c0f:d80::/32
Signature Algorithm: sha256WithRSAEncryption
46:58:80:c2:ae:1b:c7:67:76:d4:c3:78:fb:70:86:9a:ab:dc:
4a:6b:d4:17:b9:a1:f8:9b:70:7f:ce:80:81:61:9f:37:bc:51:
f5:69:5f:2e:bf:54:21:2e:ae:94:aa:d7:d3:b1:70:86:7c:4c:
1f:04:90:4b:a5:9c:ad:f8:d1:a8:1a:31:e8:fc:67:bf:c9:b0:
eb:34:2a:11:25:ef:88:a2:63:85:cb:cf:2d:6f:04:56:bc:34:
46:36:0a:83:c3:d8:85:94:f2:da:74:01:89:14:71:01:dd:68:
32:be:d4:8f:7e:09:b9:47:a2:45:ca:3b:ef:6e:fa:7c:96:7d:
16:43:17:7b:54:5d:8f:68:f2:e8:59:0e:46:76:3d:ea:c0:f9:
96:6e:15:0d:fa:db:7a:fb:62:c7:2c:ac:84:27:66:82:97:52:
a9:e1:1d:22:79:45:08:bd:12:cb:23:70:ba:ca:a4:83:f4:80:
f1:cc:b1:9a:46:1f:67:c5:20:de:04:20:a9:20:57:c6:d3:92:
46:01:4e:e0:60:86:5f:2c:29:00:24:db:bc:ac:51:f8:10:7d:
aa:8e:a9:3e:ae:6d:ce:24:89:15:b2:51:7c:10:61:39:63:4e:
99:50:15:7e:23:61:8f:aa:25:39:8a:48:28:79:c9:66:9d:b5:
6d:b0:6d:59
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICLeAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMTA2NDJaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjM3NjNBQUYxMTAvBgNVBAUTKDA5OURCQjk5MjhBNUMyOUZBNTkyMkNG
REI5NUYxOTBFQzBGQjRBQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDOhamqjUT330KKiCOggSsQAbCJ+ra2HdBbiGgApi00mZLqwReVCGUepEuY+DAE
UhwEJAyIOkGLKta/FI9ZrK8vRr6EiILi5phlk2Pd0/P1UhBWFMx86M3ayBUyGTgb
44tLJkD8vRKLIzUKwkoEx7Sgaljw21kYStY/zJVwhGnw2uqNRvF4QlLY/851OV/1
+oMofcX2aB4QFQofKxXg4gen4Ct3dFzn1qJXxM6wOkWzSQ/a5dcx6bwcBmDC/B2w
Bk7eLYssw+SL7Yv6tyiIKed4ekSDv11z5B6We1GV15gqzZWIERqLWgRWAXx9w4W4
ye33bvk/TWg5bS9F5G+TvHazAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUCZ27mSil
wp+lkiz9uV8ZDsD7SsgwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYzNzYzQS9CNjBBQkQ3MDUzNkYx
MUVEODU1RDdBQTJGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Mzc2M0EvQjYwQUJENzA1MzZGMTFFRDg1NUQ3QUEyRjEyMjI0NjgvQ1oyN21T
aWx3cC1sa2l6OXVWOFpEc0Q3U3NnLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFA1cwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmJNQwDQQCAAIwBwMF
ACwPDYAwDQYJKoZIhvcNAQELBQADggEBAEZYgMKuG8dndtTDePtwhpqr3Epr1Be5
ofibcH/OgIFhnze8UfVpXy6/VCEurpSq19OxcIZ8TB8EkEulnK340agaMej8Z7/J
sOs0KhEl74iiY4XLzy1vBFa8NEY2CoPD2IWU8tp0AYkUcQHdaDK+1I9+CblHokXK
O+9u+nyWfRZDF3tUXY9o8uhZDkZ2PerA+ZZuFQ3623r7YscsrIQnZoKXUqnhHSJ5
RQi9EssjcLrKpIP0gPHMsZpGH2fFIN4EIKkgV8bTkkYBTuBghl8sKQAk27ysUfgQ
faqOqT6ubc4kiRWyUXwQYTljTplQFX4jYY+qJTmKSCh5yWadtW2wbVk=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:41:44 2025 by rpki-client