Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/EHQgJlqGxb5IELWX5NT_zS4PF5A.cer
File: EHQgJlqGxb5IELWX5NT_zS4PF5A.cer (raw, json)
Hash identifier: kgUh0cOETAkXXcA5eHbcgXkL7LiTaDqVH0OPsKrxhEA=
Subject key identifier: 10:74:20:26:5A:86:C5:BE:48:10:B5:97:E4:D4:FF:CD:2E:0F:17:90
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 347A
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/EHQgJlqGxb5IELWX5NT_zS4PF5A.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 17 Mar 2025 14:22:12 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37522
IP: 196.43.251.0/24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13434 (0x347a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Mar 17 14:22:12 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36FDD86AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:99:a9:be:78:2f:25:f0:1c:8f:f3:a5:b3:
7c:31:d1:90:3a:95:3b:54:63:69:66:f0:70:84:90:
7b:1e:6a:18:a6:ae:95:84:ef:f9:4c:e6:94:78:f0:
b6:1b:c1:96:ed:7a:19:dc:31:01:f7:fb:8d:13:5c:
25:78:32:63:b8:e8:89:e8:11:3b:32:a7:f2:f8:6d:
cd:08:07:4f:7d:de:34:10:d0:ec:84:80:9d:43:f9:
63:45:55:d9:a0:70:02:ca:fa:1f:a0:60:f1:51:77:
9a:b9:67:72:25:b6:20:f9:80:f2:29:4e:de:50:f8:
6b:71:cb:ca:e1:12:c8:c3:55:c2:14:98:22:dd:39:
eb:6f:e7:b6:e4:60:33:bf:8a:81:c4:7b:da:3b:d3:
6c:a1:e4:18:e3:76:5e:81:c9:e2:b2:31:13:c9:6d:
88:44:15:e7:14:cc:18:16:9e:e9:b1:44:0c:03:b9:
f0:12:4e:62:fe:9e:68:80:b3:12:02:27:67:de:e9:
b5:5c:15:59:e3:d3:05:14:dc:92:9e:a4:bf:09:1d:
d5:26:10:aa:6f:02:61:39:57:37:3e:b0:ae:1e:72:
00:e6:09:e6:d2:fc:a2:73:96:6e:65:bc:b6:7f:cc:
0f:0b:f1:29:8d:48:9c:f6:0d:1b:59:39:c4:fd:b6:
c1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:74:20:26:5A:86:C5:BE:48:10:B5:97:E4:D4:FF:CD:2E:0F:17:90
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/EHQgJlqGxb5IELWX5NT_zS4PF5A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37522
sbgp-ipAddrBlock: critical
IPv4:
196.43.251.0/24
Signature Algorithm: sha256WithRSAEncryption
47:1d:27:2b:05:f9:8e:8b:57:e1:4a:6d:5b:d1:df:b9:8e:a3:
77:76:0f:7f:0b:da:66:01:0b:bb:dc:b9:b3:5f:06:ea:17:37:
93:77:be:0b:72:7e:72:3b:43:e4:56:31:79:55:c3:0b:37:dd:
d0:0f:89:0d:c7:2e:ad:69:51:46:72:b8:4b:11:2a:02:4e:98:
a4:c1:c0:0b:4f:30:15:af:d0:af:d9:75:33:3a:f7:69:1b:e1:
fd:73:ea:90:e8:b9:6d:0a:29:73:10:9f:68:ff:43:ee:8c:07:
be:81:ab:94:4f:9a:12:aa:9a:ab:dd:a6:e0:0a:62:4c:41:2c:
13:d2:ca:0b:89:d2:6e:9b:1f:f3:11:62:22:1f:21:ca:3f:ae:
af:94:29:6d:2a:d8:1d:db:86:55:22:fe:94:d5:78:2e:18:42:
91:2a:94:35:74:66:1b:7b:4f:28:0d:e6:77:a8:ca:b4:53:d6:
d0:0a:e4:4b:90:77:a6:f9:b3:a3:b5:f8:62:4e:b1:0d:d2:70:
ac:57:20:20:ab:64:a6:6e:0f:e8:6c:5f:e1:bd:04:5a:a0:ba:
02:40:0f:64:ce:b1:7d:aa:f9:ef:04:43:2d:37:96:6a:9f:01:
ac:85:8a:aa:a2:31:ef:96:1b:71:09:79:82:5c:67:ce:f3:67:
ed:a8:c7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:57:26 2025 by rpki-client