Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer
File: GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer (raw, json)
Hash identifier: dIKIAs9uNCLzXZ36JRDCxLUBIx11PMe9aiCHsPGFAzY=
Subject key identifier: 19:E5:BB:02:BA:88:03:B2:B1:3C:88:8E:C6:1A:19:E8:6D:CD:5A:67
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 35B2
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 22 Jul 2025 10:15:49 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37539
IP: 41.207.252.0/22
IP: 2c0f:f8e8::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13746 (0x35b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jul 22 10:15:49 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F368356FAF, serialNumber=19E5BB02BA8803B2B13C888EC61A19E86DCD5A67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:e9:86:e9:76:49:5f:f3:45:e2:e8:06:90:
43:e9:ba:19:c0:c0:ec:45:92:fa:d7:65:d7:b8:9a:
f0:9c:99:f1:70:70:8d:79:12:ee:18:ce:85:26:21:
e3:54:5c:29:65:5e:a4:cf:ea:16:44:22:f5:fa:0a:
c4:c4:80:65:1c:98:9a:09:95:bc:3e:20:d6:7e:cb:
f6:92:d8:fc:95:b6:ab:c5:c3:dc:87:39:6f:12:0a:
30:83:0b:75:39:88:6c:53:45:bd:a6:84:0c:70:73:
00:b2:93:60:6f:24:9a:03:ed:77:a4:34:6c:80:98:
e0:be:3c:95:08:7e:52:66:44:33:a8:f1:e2:da:60:
34:de:6a:1c:81:d2:95:18:ae:32:9d:5b:50:1c:46:
ab:98:a3:a8:4d:91:b4:ee:15:ba:85:bb:4d:d4:ef:
8e:a6:83:9f:27:0a:be:0e:a3:ef:af:b1:2d:1d:88:
f9:74:29:06:0a:fd:b1:7c:49:5a:03:16:4b:c9:93:
16:ff:2f:b8:1f:31:8d:10:01:b4:36:b6:1b:d9:b5:
79:1e:5f:ac:f1:11:f2:46:29:bf:ba:08:00:4c:84:
9d:24:91:6c:d3:66:54:e0:14:ff:3f:a4:82:1e:5f:
c0:24:c6:f3:b6:27:3b:a9:b7:bb:d1:af:db:c6:70:
33:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E5:BB:02:BA:88:03:B2:B1:3C:88:8E:C6:1A:19:E8:6D:CD:5A:67
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37539
sbgp-ipAddrBlock: critical
IPv4:
41.207.252.0/22
IPv6:
2c0f:f8e8::/32
Signature Algorithm: sha256WithRSAEncryption
32:d3:75:3b:e7:de:37:f3:11:37:5c:b5:3d:04:37:99:a5:5d:
2f:35:4c:38:0b:a7:5a:59:6f:3a:15:4d:3e:69:d2:20:ae:f0:
42:0c:4c:46:91:7a:d4:5b:d5:9a:e6:02:60:2b:7a:91:a5:47:
fc:eb:27:98:99:a2:b8:99:41:2a:a5:8e:92:07:a6:40:4e:b9:
06:2e:6e:1c:3b:03:6d:bf:1f:53:75:f4:1e:a0:03:8f:42:2d:
0c:86:7d:37:e4:ad:53:35:6d:40:fd:26:4a:4b:4d:ea:97:dc:
56:2d:9a:27:15:87:ca:57:95:60:23:08:da:a7:76:19:9b:21:
66:dd:78:cc:4c:27:13:30:cb:1a:ac:85:54:92:14:97:43:b0:
34:74:32:43:92:1e:5a:3f:10:e5:1e:20:fe:2d:5b:26:dd:ab:
7b:42:7f:eb:05:e8:8a:11:8d:9c:83:f1:bf:05:87:fd:00:0d:
fe:8b:fe:6a:ac:2a:25:a0:d2:7e:c6:1d:34:70:8d:a5:8c:14:
f1:6a:37:b8:c2:b2:d4:49:39:57:a1:de:a4:9c:aa:40:f6:a4:
68:29:17:1d:27:ad:c0:2f:5f:e1:03:79:e7:dd:eb:2a:c8:06:
e3:f0:d4:dc:a9:ba:b6:81:83:b4:82:05:e5:2e:93:e4:a6:5c:
2c:91:62:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:22:44 2025 by rpki-client