Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/FD2ld3zbtJOIpS_1g9tDLLx-V3Q.cer
File: FD2ld3zbtJOIpS_1g9tDLLx-V3Q.cer (raw, json)
Hash identifier: QS4gkfhIHlCNvf5PQI/oj/dUFEy7Ot1KB9n5trbS/h4=
Subject key identifier: 14:3D:A5:77:7C:DB:B4:93:88:A5:2F:F5:83:DB:43:2C:BC:7E:57:74
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2DD1
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F363520F/0C22B38E848811EA853C8C80F8AEA228/FD2ld3zbtJOIpS_1g9tDLLx-V3Q.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F363520F/0C22B38E848811EA853C8C80F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:03:48 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37611
AS: 328871
IP: 41.76.208.0/21
IP: 102.182.0.0/16
IP: 102.222.124.0/22
IP: 154.0.160.0/20
IP: 197.242.144.0/20
IP: 2c0e:7f00::/28
IP: 2c0f:f4c0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11729 (0x2dd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:03:48 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F363520FAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bb:a2:9e:4e:ea:6f:74:f8:e5:bc:1b:54:23:
74:d7:80:a8:46:cb:19:68:f9:27:94:fd:c4:2a:cd:
c5:a3:32:62:c0:bc:dc:8d:47:65:15:1f:d5:59:54:
65:62:ee:5b:5c:3b:81:c6:d1:04:7f:e8:69:df:83:
72:33:be:f3:45:5e:99:c3:d7:ff:7d:75:18:34:b3:
fa:1d:91:94:7b:c4:c4:da:01:b0:80:62:af:ea:05:
8c:1d:a4:a0:b9:2e:2a:f2:55:30:18:12:7b:cf:e4:
96:e5:d1:bd:92:86:89:dc:b8:c3:a3:94:d1:f6:fd:
6c:b5:4a:74:09:98:db:e9:56:07:e9:d5:f3:8b:52:
84:a8:b4:6c:00:0e:a2:47:22:fb:12:40:c4:2a:58:
fc:87:59:ec:d4:f0:49:b0:88:c4:9d:f8:03:6b:d3:
c9:c9:9e:61:81:6a:86:8f:7a:c4:f5:3b:cd:64:fe:
25:70:5e:cb:01:1b:b1:c7:b8:27:b5:cd:1d:84:bd:
14:eb:8b:5e:df:98:e8:9c:35:4c:7c:be:00:cf:07:
7e:f9:fc:3f:b2:c6:78:fb:44:86:41:0b:3c:d2:44:
d4:08:84:26:87:3c:6a:72:9f:55:40:06:cc:59:c8:
b4:b2:27:93:b8:1a:10:71:5a:e2:f5:c9:90:a9:a0:
7e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3D:A5:77:7C:DB:B4:93:88:A5:2F:F5:83:DB:43:2C:BC:7E:57:74
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363520F/0C22B38E848811EA853C8C80F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363520F/0C22B38E848811EA853C8C80F8AEA228/FD2ld3zbtJOIpS_1g9tDLLx-V3Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37611
328871
sbgp-ipAddrBlock: critical
IPv4:
41.76.208.0/21
102.182.0.0/16
102.222.124.0/22
154.0.160.0/20
197.242.144.0/20
IPv6:
2c0e:7f00::/28
2c0f:f4c0::/32
Signature Algorithm: sha256WithRSAEncryption
91:b2:0d:86:77:40:f0:82:1d:79:c2:bc:10:df:7c:43:a9:e9:
de:85:17:77:04:78:c3:69:36:30:f8:ec:f1:80:a8:e3:0b:63:
b4:d8:a4:ba:df:da:0f:9c:d3:0c:ec:1a:09:d9:d3:c9:dd:ed:
cd:41:8d:06:27:51:35:a7:32:3e:f9:27:6b:a5:12:c0:a0:aa:
b6:5a:d6:95:53:05:08:59:2b:b2:70:91:be:46:4c:1a:70:9d:
44:6d:c0:f1:02:e2:78:d0:8d:56:65:be:d7:79:54:5d:87:cf:
27:f5:ab:27:fa:9e:48:ed:64:85:6e:bc:f6:32:f9:8a:a5:83:
18:d7:fe:98:81:33:b7:05:97:a0:f9:fb:e3:df:87:57:b9:87:
d7:e2:79:a2:00:12:3a:50:89:a8:fd:d5:b5:8e:34:43:2b:c0:
ef:34:a4:ef:d7:81:0e:da:fc:ac:1b:42:c6:b2:2a:ec:39:84:
c8:f4:28:7f:85:d0:96:78:13:cd:75:17:07:c8:ea:60:04:f5:
f3:b2:c6:35:89:77:bb:19:39:49:27:92:67:5c:80:68:4b:75:
05:a9:8c:82:f4:9e:64:86:57:33:8f:96:2a:6b:06:16:6c:9e:
0a:cf:ff:40:40:84:63:b4:86:ef:ca:c0:e4:c7:ea:85:9f:48:
c3:17:e3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:37:36 2025 by rpki-client