
Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/DrLmbWwSK_P-qDtsu3uMrq4Rww4.cer
File: DrLmbWwSK_P-qDtsu3uMrq4Rww4.cer (raw, json)
Hash identifier: WIaiwSoq7Pqtps3hDebO0BD3cICOPxPBXYK5SdxE16I=
Subject key identifier: 0E:B2:E6:6D:6C:12:2B:F3:FE:A8:3B:6C:BB:7B:8C:AE:AE:11:C3:0E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2DE2
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36382ED/61760B4E051B11EE8D1A0E1E4AD9E6FC/DrLmbWwSK_P-qDtsu3uMrq4Rww4.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36382ED/61760B4E051B11EE8D1A0E1E4AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:07:10 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328030
IP: 196.41.81.0/24
IP: 2001:43f8:c70::/48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11746 (0x2de2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:07:10 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36382EDAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:fd:d4:ce:5a:81:9e:9c:4e:2f:1b:dc:39:
97:77:79:74:8e:22:b5:20:99:52:12:fb:84:1b:4f:
48:4c:d2:db:e4:d0:18:ce:de:d6:59:ba:b4:e4:0c:
25:2a:d1:4f:0f:7a:25:4f:ce:97:18:13:aa:9a:de:
d3:8b:16:de:6a:52:15:50:58:2a:06:eb:01:c4:56:
7e:7e:4d:58:18:7c:ed:9f:1d:7c:08:e4:ae:dc:b3:
10:87:57:9b:c2:36:0b:b7:28:ce:25:95:8c:74:c1:
9a:8d:c0:f3:ce:16:c1:5a:15:00:27:ce:aa:4f:7d:
65:19:11:45:96:db:9c:bd:de:57:f8:7e:9f:68:27:
c5:f0:dd:ff:18:55:e6:b4:55:4e:cc:cc:5c:23:2e:
3c:1c:f6:3d:ac:c8:0d:72:97:0b:aa:76:43:88:f4:
85:31:59:29:eb:4f:64:eb:40:51:ae:ad:a3:f0:91:
36:76:96:aa:cb:86:31:35:20:23:b1:83:98:a1:8b:
ee:27:d1:cc:1a:ae:f2:4d:cc:24:53:d5:fc:80:8b:
c1:ea:a6:0d:bb:aa:c3:c0:95:f3:ab:a4:66:72:36:
0c:16:06:30:1c:61:e7:57:1f:f9:b7:8c:a9:8f:84:
9a:8a:c9:c3:c9:d3:de:8c:f0:6f:32:6d:67:7a:59:
5d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B2:E6:6D:6C:12:2B:F3:FE:A8:3B:6C:BB:7B:8C:AE:AE:11:C3:0E
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36382ED/61760B4E051B11EE8D1A0E1E4AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36382ED/61760B4E051B11EE8D1A0E1E4AD9E6FC/DrLmbWwSK_P-qDtsu3uMrq4Rww4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328030
sbgp-ipAddrBlock: critical
IPv4:
196.41.81.0/24
IPv6:
2001:43f8:c70::/48
Signature Algorithm: sha256WithRSAEncryption
2a:e6:fb:02:82:a3:e4:f3:9d:1a:c8:63:e9:88:26:47:b6:33:
76:59:bb:11:bb:66:81:43:07:3c:99:9a:4c:07:65:0d:2f:a4:
6e:f6:47:cc:80:68:e3:5b:8f:ca:b1:a0:7d:fa:52:6c:34:f1:
19:c9:c1:36:93:9c:cc:09:c9:d9:fd:28:36:3f:74:29:6a:7b:
50:b7:f6:89:4a:51:a8:82:f4:ec:43:c1:3d:4e:4c:ff:f6:a7:
f6:a6:3e:78:70:65:c6:d3:72:8c:c2:7c:36:7a:de:42:0c:3b:
c7:06:74:7a:aa:f4:f0:65:da:c0:8f:c9:24:46:76:9c:1c:af:
82:2e:aa:e6:b7:fd:53:7c:8c:eb:8f:53:71:38:8f:92:60:bc:
39:a4:16:85:11:5b:ec:70:f1:df:92:de:57:37:17:9e:85:0b:
d5:b8:12:d1:e5:31:cf:0e:de:44:e9:fe:a9:7d:dd:fd:e9:05:
9e:d7:17:d6:2c:e5:e4:d5:40:ef:34:be:9c:22:a7:54:9f:9b:
c3:cd:38:45:4e:ca:e1:fc:b7:27:52:48:68:3c:8b:b9:1e:b1:
67:b9:d3:8e:83:1c:69:be:6a:e0:97:73:e6:a6:97:ae:7b:21:
cf:4b:2e:7c:0a:cd:8d:7d:2f:04:23:6e:29:92:ff:f5:80:48:
50:bb:54:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:44:57 2025 by rpki-client