Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
File: IlhakHPb2Nx6VQRFf_nceJcpdE4.cer (raw, json)
Hash identifier: rFlGYWE2bTz3zqUG1Ughu69uw1FOXNX9kweDpWRot8U=
Subject key identifier: 22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3532
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 04 Jun 2025 00:01:19 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328029
IP: 102.207.20.0/22
IP: 196.61.240.0/20
IP: 2c0f:eb80::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 07:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13618 (0x3532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jun 4 00:01:19 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F363CC24AF, serialNumber=22585A9073DBD8DC7A5504457FF9DC789729744E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:e0:36:1e:89:7d:4d:87:d2:ca:b3:cd:b8:
8b:8b:8a:bb:48:be:7b:ed:21:ef:eb:3d:e9:d4:95:
10:5a:c8:72:88:2d:02:bd:fb:0c:31:a6:1c:b2:da:
89:26:9c:ac:8c:e8:60:ea:84:14:e2:a2:0b:5e:dd:
bd:91:0c:4f:1d:91:cf:7c:e4:ee:7f:8f:b5:f1:7e:
6f:c3:cc:c4:62:00:aa:a2:96:5d:1a:aa:32:93:a5:
8a:aa:e6:9d:f0:3a:85:29:07:94:fc:87:b7:95:b6:
17:0a:89:8c:53:12:8b:79:97:23:9c:8b:55:5e:37:
2f:f9:7f:dc:7d:f2:d3:ae:3c:9c:13:72:8b:0b:4e:
2f:8d:1f:ff:6e:2a:b7:8a:9a:0d:8c:8a:65:8c:40:
b4:83:ed:0b:3e:6d:bb:e0:81:14:af:3b:0e:19:2f:
38:25:3e:52:07:15:e6:12:69:8b:92:f9:cd:5f:d2:
26:ee:a5:c1:9a:3b:c3:05:dc:7a:7d:72:e5:7e:48:
80:47:4d:d2:4d:61:4a:96:75:0c:0e:7c:de:3f:4b:
7e:8a:29:d6:4f:e6:0a:e2:9b:37:fd:dc:d2:f3:49:
5e:43:67:fb:7e:bc:1b:1a:56:4c:50:31:bc:40:44:
cd:81:fb:61:e6:3f:5d:b9:70:d1:39:2d:ad:81:18:
69:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328029
sbgp-ipAddrBlock: critical
IPv4:
102.207.20.0/22
196.61.240.0/20
IPv6:
2c0f:eb80::/32
Signature Algorithm: sha256WithRSAEncryption
99:3a:cb:3c:f0:e9:f5:f6:e5:b0:83:95:74:9f:93:fa:59:12:
d7:d9:3d:bb:92:c9:a2:0d:bf:53:e0:ea:ea:77:ea:a5:1a:04:
75:55:44:b5:4e:f7:c9:a2:19:4b:27:dc:78:04:6c:4c:f2:7b:
74:29:1d:62:b3:f9:53:9f:48:8a:1a:88:9b:92:f4:7c:13:4f:
e9:77:fb:95:09:88:9d:e7:90:c1:0e:7f:f9:06:26:46:d9:a0:
c6:16:72:4e:6d:32:83:f0:2b:0a:aa:3a:ef:88:f8:38:25:83:
68:24:29:f3:f4:3b:a4:cb:07:98:4f:d7:d1:7b:1e:6b:d8:87:
08:72:0c:99:32:93:5e:a8:54:11:9d:3f:4e:f3:0c:c3:94:2d:
71:fa:e4:99:37:ae:7d:b2:77:cf:f1:56:14:4f:ac:6d:0a:77:
11:14:b3:06:46:8b:77:78:5e:e4:e8:85:56:65:b0:ac:d6:8d:
fb:fc:2e:4c:2e:ed:1c:3f:80:bb:6e:e0:e1:9b:17:cc:c6:1c:
1f:3c:ce:28:5b:7d:ae:e2:d8:48:44:80:d7:9f:a9:fd:63:b1:
31:28:83:82:77:b6:4c:15:a2:ef:04:1d:52:b9:06:49:03:9f:
10:4e:a8:a1:26:ac:cf:9c:b9:0e:77:44:e7:c9:72:0e:6a:d5:
56:1e:12:a8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:26:19 2025 by rpki-client