Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/F43e-Ls8_k--ATuSO8iuItZFswI.cer
File: F43e-Ls8_k--ATuSO8iuItZFswI.cer (raw, json)
Hash identifier: X/tGd1zvsyIBzCqJDwJCKijlaxQ8l929HwFjqOp3CLk=
Subject key identifier: 17:8D:DE:F8:BB:3C:FE:4F:BE:01:3B:92:3B:C8:AE:22:D6:45:B3:02
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3447
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/F43e-Ls8_k--ATuSO8iuItZFswI.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 19 Feb 2025 22:12:41 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329090
IP: 102.209.32.0/22
IP: 102.221.8.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13383 (0x3447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Feb 19 22:12:41 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F365958DAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b0:09:75:3d:20:a4:08:9f:76:88:0d:50:dc:
35:92:72:a5:59:8c:a2:d4:d8:d8:b4:a9:cd:51:a3:
db:5b:63:16:db:b4:6c:b6:15:33:99:bf:be:14:be:
43:ba:5a:aa:50:1f:04:95:1b:a2:81:43:91:f0:47:
27:2e:80:d7:97:e3:43:0c:3a:8e:71:e3:c2:1b:5d:
a4:ec:f7:22:87:1c:09:8d:e0:a4:ad:27:95:4b:69:
82:b8:2c:24:3a:40:54:70:dd:34:52:a3:53:9b:c7:
4b:5c:65:06:47:35:1b:b7:23:b6:79:5f:b4:96:85:
ea:2c:00:1c:fe:60:05:fc:b4:36:7f:7b:ad:f5:ae:
ed:3c:0b:bd:49:3b:b1:02:39:14:fb:83:25:b4:78:
cd:bb:d0:9e:1f:2e:07:d2:2f:ff:8d:cc:2a:9c:6e:
4c:92:a0:ad:7f:2c:65:c6:b9:4c:76:72:4e:e4:67:
70:a8:4b:4e:57:84:91:64:57:1c:66:d1:35:d0:fc:
42:10:c4:4b:d4:a8:d0:49:18:16:db:7d:48:d6:0d:
f5:77:a9:1a:bd:87:b8:72:f1:0c:33:ac:db:e2:1d:
53:db:cb:36:0a:8a:f4:8a:15:cf:78:77:c1:f4:71:
fa:de:19:c7:58:2f:93:e7:5c:24:28:52:12:7e:5d:
5a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8D:DE:F8:BB:3C:FE:4F:BE:01:3B:92:3B:C8:AE:22:D6:45:B3:02
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365958D/9CFE89C8EF0E11EFB212E46B762E951A/F43e-Ls8_k--ATuSO8iuItZFswI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329090
sbgp-ipAddrBlock: critical
IPv4:
102.209.32.0/22
102.221.8.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:10:a5:31:08:2d:e1:d0:5a:b4:c1:cb:4a:74:76:95:44:94:
e2:ad:4a:ce:5f:f3:57:35:46:c6:84:87:3d:b8:4b:99:2e:3b:
c7:06:50:f9:10:16:02:8d:60:ec:79:0c:14:7a:4f:e3:3b:98:
e7:29:97:a0:b6:48:7e:88:c5:8d:9e:dc:1e:5d:c9:46:31:06:
0e:55:ab:b1:9c:36:e0:73:f7:37:22:80:f3:11:66:7f:f9:5b:
83:22:a4:c5:e6:ae:99:c7:eb:33:fa:ef:de:83:ca:85:b0:b6:
95:46:d2:69:e8:b8:01:7e:82:a1:68:7b:0b:b9:fe:43:23:07:
ab:29:f1:e1:16:d9:9c:ed:01:0a:4e:0e:1e:32:9f:64:19:af:
d7:2f:fa:29:a3:e4:3c:65:a3:1d:5d:20:43:d7:f0:46:72:40:
ea:d3:87:71:ce:16:33:d1:4f:06:7e:30:60:7e:e8:60:ea:bc:
e8:a0:d8:4a:15:a0:01:58:7f:82:3d:ff:d2:e2:1e:18:4f:fd:
18:bb:09:2d:ee:1b:40:31:00:ec:bf:6c:dd:f1:9b:2b:e6:5e:
0b:29:43:94:b0:ed:ab:3d:f4:52:ff:47:ea:83:c4:0c:52:3b:
9f:56:04:d7:0d:60:5b:53:34:e1:d0:d7:9a:d9:4c:b8:a6:7f:
4b:d7:66:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:35:28 2025 by rpki-client