Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/HcAr3BsvKH4ONIJ3vfa-35w8G_k.cer
File: HcAr3BsvKH4ONIJ3vfa-35w8G_k.cer (raw, json)
Hash identifier: y7o48DlUUJyJAdy+K0G61U5FUC6ymKck8HtIyvyCfZc=
Subject key identifier: 1D:C0:2B:DC:1B:2F:28:7E:0E:34:82:77:BD:F6:BE:DF:9C:3C:1B:F9
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2FB2
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:41:42 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328575
IP: 102.22.124.0/22
IP: 2c0f:e820::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12210 (0x2fb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:41:42 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36B13C7AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d5:cd:17:eb:37:69:e5:34:3a:98:cd:19:63:
92:2a:ec:19:92:25:5a:49:7d:33:37:a3:c2:05:30:
68:fa:fa:58:8d:8a:c8:30:f0:b3:3b:47:da:6d:52:
9f:cb:48:56:7a:ec:2c:46:ea:b7:02:d9:16:ec:3c:
37:94:94:eb:63:26:05:31:e9:b5:94:60:b0:ee:fa:
3e:ba:cc:84:e3:a0:fa:45:61:9f:40:32:c5:e7:7b:
12:97:b0:30:29:96:47:ab:76:eb:52:e6:d8:89:01:
22:f2:d4:0d:5f:4d:3a:46:d3:6f:0d:de:7c:cf:3b:
aa:a9:db:39:b1:1d:69:a9:02:ba:bb:46:79:5e:0c:
67:4d:0e:3a:6f:ff:c1:1b:af:81:a7:a3:0b:f6:95:
53:d2:4e:cf:2a:b6:82:50:a8:58:94:78:3e:35:6c:
fa:20:b4:eb:ec:2c:b7:79:ad:a1:07:4f:11:ab:ec:
7a:7e:f2:45:81:5a:c3:ad:5d:f5:19:ab:b8:4a:f2:
db:29:03:a2:57:b6:91:47:71:03:87:bc:13:52:5e:
e2:fd:ee:aa:6d:7f:c1:4a:e2:c9:c7:f2:e7:0f:8a:
56:a0:70:df:5b:7d:2d:12:72:ab:ba:42:06:cf:a4:
1a:bc:e6:b1:9b:19:29:be:f6:39:2e:7c:08:46:65:
27:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C0:2B:DC:1B:2F:28:7E:0E:34:82:77:BD:F6:BE:DF:9C:3C:1B:F9
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328575
sbgp-ipAddrBlock: critical
IPv4:
102.22.124.0/22
IPv6:
2c0f:e820::/32
Signature Algorithm: sha256WithRSAEncryption
7d:88:2c:d7:a1:12:3a:1a:4f:69:3c:30:a1:e1:d7:f9:89:c9:
41:66:b2:b3:68:84:d6:5f:55:a3:2b:16:be:86:26:62:85:1b:
09:83:72:c5:d1:2b:ad:cd:1c:06:59:f5:16:09:38:39:89:33:
8b:ec:9b:09:10:64:27:b3:8d:69:f6:44:7a:49:46:9d:f1:1e:
c6:3f:e1:a4:ab:fc:9a:68:ea:63:04:4e:37:42:dd:7f:4c:e5:
1f:6b:a0:b2:ba:e3:62:69:80:3a:a3:c0:cd:79:f6:99:2c:39:
df:af:ac:d0:74:f2:10:db:cc:6e:3c:bc:9b:3d:d8:94:c8:19:
3e:cf:96:02:f5:a8:0d:ad:39:44:05:d8:ad:92:af:4d:cc:e0:
2a:1e:f0:f7:42:68:0f:d3:eb:d9:42:a3:da:84:2c:b3:d1:29:
0d:80:a2:24:87:34:db:d9:22:51:21:45:4e:82:6e:50:d7:2e:
ef:aa:ee:5c:d4:13:8e:63:e9:2f:4a:3b:76:0c:2b:0d:d7:1a:
ab:dc:2f:b3:72:46:74:99:87:1b:e4:b7:93:87:4e:b5:05:f0:
9e:77:5f:45:9c:1d:87:e5:62:41:79:5c:d4:ef:f0:1f:cf:d8:
15:78:10:4d:96:92:f4:7b:a4:f2:8f:a5:0c:2d:4c:ec:19:fa:
4d:63:23:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:50:12 2025 by rpki-client