Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer
File: GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer (raw, json)
Hash identifier: bb5Vx22p1hO5u9EFbsGzl5IidBWMY75c1S7/8V/S/0w=
Subject key identifier: 18:DA:68:2C:1E:3E:C3:46:4D:39:1D:9B:71:A5:B8:52:A6:C9:B6:E3
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2D29
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:26:23 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 22386
IP: 196.29.240.0/20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11561 (0x2d29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:26:23 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F361E99DAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:55:ba:3f:cf:da:c6:9a:b8:2a:52:03:a6:
5d:a2:a8:ac:73:bb:94:80:ab:36:f5:99:9b:db:dd:
68:23:d2:79:d0:71:da:5a:2b:52:d0:d4:02:e8:27:
a5:6c:5f:42:7d:a8:f7:31:ce:c3:50:05:2f:d0:18:
88:c1:d0:b0:20:fa:0d:de:ee:6a:64:0c:8a:2f:fa:
bf:26:a9:ca:35:70:40:92:2c:43:61:2e:1e:ce:56:
3f:d2:cc:f6:10:5a:84:d2:70:1d:ee:b9:c4:58:22:
7f:4b:fe:56:f9:ab:97:a6:40:21:1e:30:e2:86:e1:
e4:13:e3:76:68:54:ba:6e:03:a5:2d:32:7c:be:dd:
6b:0c:dd:3d:f6:69:e3:84:07:3d:57:42:38:52:cf:
9f:0b:2a:aa:38:30:4b:5d:93:48:9a:44:e4:56:25:
3c:da:c4:0a:6d:67:40:77:b3:29:9e:24:e0:0e:9c:
7c:a4:fc:01:a1:64:8b:a1:e8:14:9c:f2:3b:44:de:
72:dc:85:67:27:8c:50:b2:98:e7:c9:11:08:df:81:
4a:70:66:4c:0d:11:19:5d:20:78:4a:df:a1:86:ed:
f5:95:6f:9f:b9:cb:79:fe:ed:4f:5d:4f:14:30:b4:
9e:2f:5d:df:70:95:8f:29:88:c4:0e:03:52:65:d7:
c1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DA:68:2C:1E:3E:C3:46:4D:39:1D:9B:71:A5:B8:52:A6:C9:B6:E3
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
22386
sbgp-ipAddrBlock: critical
IPv4:
196.29.240.0/20
Signature Algorithm: sha256WithRSAEncryption
76:96:4c:fb:f9:5b:98:a1:5d:82:4c:4c:09:e8:26:ce:9b:10:
68:26:be:7b:dc:87:70:80:5b:85:87:bc:73:18:a9:ab:0b:22:
14:8f:45:df:62:a4:aa:73:52:6c:02:00:1a:bb:47:4c:61:78:
bd:2c:f4:60:f3:e9:92:b4:bc:14:54:eb:cb:10:4b:7f:3e:db:
37:3f:e3:af:e3:bd:18:fa:9e:f7:50:82:9e:81:54:28:91:f2:
cd:c1:09:b6:d1:88:f2:82:8b:83:04:cb:8e:80:9f:36:26:4a:
5e:b9:3b:b5:25:50:47:b7:4c:48:0e:3c:8e:cf:42:c6:a0:18:
32:25:7a:d0:0c:07:6a:23:3a:94:92:ae:38:bb:65:2d:4a:7f:
49:26:cd:0f:4e:4f:81:77:3b:d0:47:12:42:79:40:fc:fe:f2:
12:e9:1b:61:c9:68:24:42:84:bb:1e:6d:bc:4c:0e:75:5d:72:
88:e7:ab:74:7c:68:8b:4f:c6:11:5d:fd:0d:1d:2b:5e:19:99:
69:69:0f:b8:25:85:2a:51:b0:51:65:43:7a:f6:28:b5:bf:47:
f0:73:53:54:89:aa:08:32:49:70:ff:31:fb:0e:56:f0:43:58:
5c:d2:c2:fd:fb:fa:0d:75:40:52:a8:a4:88:a9:4a:b8:8a:96:
e4:65:f5:9e
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgICLSkwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMDI2MjNaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjFFOTlEQUYxMTAvBgNVBAUTKDE4REE2ODJDMUUzRUMzNDY0RDM5MUQ5
QjcxQTVCODUyQTZDOUI2RTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCbrFW6P8/axpq4KlIDpl2iqKxzu5SAqzb1mZvb3Wgj0nnQcdpaK1LQ1ALoJ6Vs
X0J9qPcxzsNQBS/QGIjB0LAg+g3e7mpkDIov+r8mqco1cECSLENhLh7OVj/SzPYQ
WoTScB3uucRYIn9L/lb5q5emQCEeMOKG4eQT43ZoVLpuA6UtMny+3WsM3T32aeOE
Bz1XQjhSz58LKqo4MEtdk0iaRORWJTzaxAptZ0B3symeJOAOnHyk/AGhZIuh6BSc
8jtE3nLchWcnjFCymOfJEQjfgUpwZkwNERldIHhK36GG7fWVb5+5y3n+7U9dTxQw
tJ4vXd9wlY8piMQOA1Jl18GhAgMBAAGjggMKMIIDBjAdBgNVHQ4EFgQUGNpoLB4+
w0ZNOR2bcaW4UqbJtuMwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxRTk5RC84N0RGMUE0NjZBMDQx
MUVCOTA5NDcxN0RGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MUU5OUQvODdERjFBNDY2QTA0MTFFQjkwOTQ3MTdERjhBRUEyMjgvR05wb0xC
NC13MFpOT1IyYmNhVzRVcWJKdHVNLm1mdDAZBggrBgEFBQcBCAEB/wQKMAigBjAE
AgJXcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMQd8DANBgkqhkiG9w0B
AQsFAAOCAQEAdpZM+/lbmKFdgkxMCegmzpsQaCa+e9yHcIBbhYe8cxipqwsiFI9F
32KkqnNSbAIAGrtHTGF4vSz0YPPpkrS8FFTryxBLfz7bNz/jr+O9GPqe91CCnoFU
KJHyzcEJttGI8oKLgwTLjoCfNiZKXrk7tSVQR7dMSA48js9CxqAYMiV60AwHaiM6
lJKuOLtlLUp/SSbND05PgXc70EcSQnlA/P7yEukbYcloJEKEux5tvEwOdV1yiOer
dHxoi0/GEV39DR0rXhmZaWkPuCWFKlGwUWVDevYotb9H8HNTVImqCDJJcP8x+w5W
8ENYXNLC/fv6DXVAUqikiKlKuIqW5GX1ng==
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:31:11 2025 by rpki-client