Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
File: DgQKv0-UXzDXfaKLvwKLasSdBCw.cer (raw, json)
Hash identifier: ojMNVCu7mWe2lsg3Ptx9uKU4ddLH2iQFC5VWj7IAx8w=
Subject key identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3364
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 06:03:09 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 327795
IP: 102.223.8.0/22
IP: 154.118.224.0/21
IP: 196.192.72.0/21
IP: 197.149.176.0/22
IP: 2c0f:efe8::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13156 (0x3364)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 06:03:09 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36EC7CEAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:18:f9:46:40:32:f2:6d:ce:c2:f4:76:08:
00:74:65:94:2e:9f:08:e8:57:5b:f2:fd:22:bc:4b:
4c:28:98:39:a1:5a:13:d8:72:7c:8b:4b:82:12:e1:
3d:56:b1:ba:72:b4:17:42:1f:45:28:83:14:91:a4:
e9:94:df:d9:95:3c:50:83:4f:79:d9:16:a4:fc:8e:
d2:ee:d2:ee:cd:1d:b6:5d:43:61:e9:0e:d5:b9:78:
78:af:b0:7d:a6:b2:4e:ae:fe:71:55:98:91:58:06:
b4:f6:df:19:30:94:14:5a:f1:80:07:bf:b3:37:a3:
1d:01:f0:30:10:41:55:78:7a:ee:d8:cb:ba:d0:67:
e9:b0:c0:c2:96:e0:f6:fc:6e:4e:cd:0d:8e:0c:ea:
62:97:f1:ba:19:69:2f:64:7f:bb:c9:62:88:55:1e:
bd:26:0e:80:96:25:36:21:16:3b:7d:d9:71:04:b3:
b6:b2:b8:fc:36:94:e0:9a:bf:f9:07:1f:df:a3:65:
50:2b:0e:e2:e6:a0:e8:cd:be:35:19:37:0e:65:22:
e1:12:94:43:65:32:21:a5:23:ba:c1:bb:1e:a9:79:
bd:d8:66:a7:03:87:3b:98:e9:ac:cd:70:a3:2b:aa:
c2:f2:a5:54:5f:c3:b2:63:5a:d5:20:f7:67:ee:04:
f3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327795
sbgp-ipAddrBlock: critical
IPv4:
102.223.8.0/22
154.118.224.0/21
196.192.72.0/21
197.149.176.0/22
IPv6:
2c0f:efe8::/32
Signature Algorithm: sha256WithRSAEncryption
86:3a:db:c6:9b:9d:5e:5b:12:b9:7c:a6:40:40:35:56:90:1d:
c4:e8:6a:4d:9b:fa:3d:41:47:e6:26:04:4e:75:fd:cf:93:a1:
2c:1d:11:79:0b:5a:f1:c1:f0:a3:65:a8:0d:2b:84:b6:e6:91:
e2:fc:d4:35:59:52:13:e4:3e:11:1b:0f:51:04:b5:0a:c7:7c:
a7:66:d6:4c:a8:28:c2:b8:ff:ed:b8:15:ff:a9:37:d2:9c:f3:
4c:69:59:2f:2e:6d:91:bd:5d:1f:07:37:9c:ea:39:b4:b5:a9:
11:d1:d4:2e:22:3d:b6:87:85:c1:b8:7b:0d:a5:52:8e:0f:1a:
0e:62:77:b7:86:f5:04:cf:9a:9b:4f:3b:42:1e:1e:af:9f:fa:
ae:18:90:68:ff:ed:6c:a7:4b:10:af:f4:98:52:d3:15:09:70:
3f:7c:f6:d7:41:55:5b:bd:94:a3:e1:b7:4f:20:0a:69:a2:88:
8e:ad:42:d7:f4:c6:4c:46:d5:6f:03:fc:c9:a7:85:bc:18:b6:
fe:21:ef:09:b2:72:9b:4a:e5:01:49:41:09:3a:bc:85:2f:d7:
4b:aa:62:a3:2f:d3:43:63:a3:90:27:74:c3:3c:25:40:ac:3d:
1d:08:56:cb:23:f1:04:44:17:9f:ff:e6:91:2c:f8:c3:60:68:
c9:0e:5b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:31:13 2025 by rpki-client