Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
File: Ic9mCQ8NCPeTru46mq74zw9BMAs.cer (raw, json)
Hash identifier: 2Rove82c8e2ySG2v1z50NNc5ICqb0H3rYwqqBsSSJf4=
Subject key identifier: 21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 308B
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:25:39 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328650
IP: 102.36.136.0/22
IP: 2001:43f8:1400::/48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12427 (0x308b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 03:25:39 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36818C8AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:6a:b3:4c:35:03:94:45:3b:16:56:9e:66:
3e:e3:f9:b9:d7:62:84:78:4b:e1:a6:a7:8a:26:14:
38:5c:c1:17:72:55:20:ba:40:bc:29:4c:b1:12:c4:
2f:cb:49:5f:c7:cf:c4:09:b5:ff:ca:61:c4:d8:27:
15:3e:3d:5d:e4:b8:13:a6:8f:7a:a2:db:cb:81:0e:
c4:54:c1:e4:24:e4:bf:22:b6:b6:25:4a:b8:29:05:
0b:01:72:18:0d:a1:44:85:a6:b7:8a:39:a1:0a:ae:
41:86:b2:25:63:5d:43:08:e3:88:91:56:09:f7:57:
95:df:11:04:15:2c:8e:d4:bf:3a:f4:16:ad:b3:72:
f6:da:dd:c5:e9:2e:57:56:88:19:a6:0c:e2:1f:2a:
e6:e0:72:2a:a6:57:61:89:e0:53:67:af:ea:b3:ce:
3e:66:8e:70:27:0a:2b:3e:18:dd:69:1d:e2:91:fb:
79:7a:b0:13:a2:ea:27:00:d7:00:6c:7f:49:35:33:
cd:67:05:d5:5e:eb:42:d0:1f:b5:66:5a:5f:4a:ae:
bb:11:d2:d3:76:9e:d1:ac:c1:44:e4:a6:46:ae:14:
e5:1c:65:fd:fc:e0:1d:65:dd:9f:a1:34:64:3b:0d:
a6:d1:20:f0:c5:02:9b:30:58:46:7b:10:ab:a5:ab:
c5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328650
sbgp-ipAddrBlock: critical
IPv4:
102.36.136.0/22
IPv6:
2001:43f8:1400::/48
Signature Algorithm: sha256WithRSAEncryption
87:c6:8c:ca:33:6b:fe:d1:ee:02:10:79:26:b3:df:61:96:4e:
b7:c1:b3:cf:2a:00:cf:ca:e0:75:26:db:f0:ee:9c:66:6d:3b:
d7:d7:a3:5b:97:43:cc:e0:b6:6b:32:19:11:0c:83:fe:59:3f:
1c:73:2c:f4:9b:29:32:82:9e:7c:5c:fe:d4:af:9a:39:40:4a:
d5:f9:ab:c7:60:b1:3e:6d:45:b3:a9:58:ac:90:84:da:84:db:
66:71:e9:ab:5b:c8:c3:c5:db:ef:6f:75:fc:1c:d1:a4:63:f9:
13:12:ac:1e:c0:4e:24:e0:85:a3:7c:d2:7a:e6:cc:cb:d9:ea:
a4:b2:88:e3:31:f9:4f:76:21:ce:b3:dd:b2:fe:bf:40:3b:70:
62:c5:8d:83:4a:03:d3:fd:7c:2d:f9:2e:6e:97:c7:cc:fb:6a:
cd:ce:6b:93:88:6a:2a:be:ac:c3:7b:df:cb:70:ed:6d:58:2c:
20:c1:89:e3:de:f0:54:6d:96:ef:a1:9d:0a:47:08:db:ff:62:
8b:a9:b8:31:a6:ce:01:a7:a1:bb:28:1c:54:d7:33:18:74:63:
41:99:15:3b:af:ea:19:52:a0:47:83:c2:7c:bb:11:31:be:a7:
91:7f:de:cc:73:e9:33:59:e3:55:ff:80:ca:f9:a3:e4:21:27:
1a:e1:9a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:48:05 2025 by rpki-client