Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
File: JLXuZ0cVou7uiGTqX17kcyPPdmw.cer (raw, json)
Hash identifier: hSdEddSd4LQ2I754lb4H+FmtzliVnvLgbxTvZxQESDs=
Subject key identifier: 24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3029
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:05:42 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 2905
AS: 4178
AS: 4571
AS: 9129
AS: 11569
AS: 12091
AS: 16637
AS: 24788
AS: 28698
IP: 41.112.0.0/12
IP: 41.181.0.0/16
IP: 41.195.0.0/16
IP: 41.208.0.0/18
IP: 105.176.0.0/15
IP: 105.208.0.0/12
IP: 105.236.0.0/15
IP: 196.3.224.0/19
IP: 196.4.87.0 -- 196.4.93.255
IP: 196.7.0.0/16
IP: 196.11.239.0/24
IP: 196.13.228.0/22
IP: 196.22.64.0/18
IP: 196.30.0.0/15
IP: 196.41.160.0/19
IP: 196.44.0.0/19
IP: 196.47.0.0/18
IP: 197.64.0.0/12
IP: 2001:4218::/32
IP: 2001:4260::/32
IP: 2c0f:fb08::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12329 (0x3029)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 03:05:42 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F367678FAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e5:a5:30:fc:00:2c:15:bf:f7:c1:ca:9d:8f:
a9:b5:ae:b1:3b:24:42:39:80:ad:36:96:6c:a9:33:
6f:09:1e:39:4d:af:7f:d9:41:a0:74:cb:0e:c1:78:
72:59:7c:27:48:e4:de:48:4e:b8:e4:63:6f:0b:30:
39:18:cc:04:31:6f:a5:d2:bc:94:f0:2b:d6:c8:29:
00:7c:d5:3c:2b:09:74:74:7f:55:b3:99:c2:1a:17:
69:a5:dc:e3:cb:25:cf:2a:fd:19:5e:f4:30:e6:67:
4a:b7:d5:20:37:1c:01:29:67:eb:27:91:c8:11:c8:
2c:d2:40:b7:d1:c5:61:82:a8:6c:1c:73:bb:89:3b:
c6:0f:56:73:02:ee:3f:c6:61:06:a6:ff:50:3d:bc:
f6:4e:f7:20:c8:c6:f6:94:fc:2c:0d:a2:09:d5:9c:
09:6f:a0:21:10:70:31:e1:a3:31:d3:fe:fb:6a:5a:
bc:fa:19:96:bf:c8:09:66:13:ca:54:dc:ae:62:0a:
aa:44:7b:e0:4f:e2:fd:dd:52:5b:4f:56:da:29:ec:
fa:fd:2e:e3:43:ce:51:bf:40:0e:9a:ae:f1:3f:6f:
dd:f8:c6:43:9f:5c:8e:7d:7d:ef:df:8e:b1:b7:6e:
62:5c:dc:ee:87:f1:96:9a:1b:13:36:89:70:a8:15:
79:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2905
4178
4571
9129
11569
12091
16637
24788
28698
sbgp-ipAddrBlock: critical
IPv4:
41.112.0.0/12
41.181.0.0/16
41.195.0.0/16
41.208.0.0/18
105.176.0.0/15
105.208.0.0/12
105.236.0.0/15
196.3.224.0/19
196.4.87.0-196.4.93.255
196.7.0.0/16
196.11.239.0/24
196.13.228.0/22
196.22.64.0/18
196.30.0.0/15
196.41.160.0/19
196.44.0.0/19
196.47.0.0/18
197.64.0.0/12
IPv6:
2001:4218::/32
2001:4260::/32
2c0f:fb08::/32
Signature Algorithm: sha256WithRSAEncryption
a3:9d:ce:84:85:7a:f3:88:29:38:f5:b8:3c:70:65:80:bf:44:
2d:47:2a:41:57:2f:a5:c5:88:cc:c1:ce:4c:15:62:e0:67:ad:
94:57:de:fc:0a:06:26:6f:6e:a9:d1:53:e5:6e:68:b8:1b:51:
69:a6:88:1d:45:4a:de:9a:4d:9b:3c:4b:20:70:f6:fc:b4:e5:
fe:c8:a8:59:cc:5a:73:1d:1b:8b:07:e7:f1:bf:71:17:93:93:
bd:e7:32:79:6a:00:e8:ca:ef:8f:f1:5b:36:a6:a9:2a:04:d9:
06:37:fd:d2:c2:01:e1:8c:f0:9c:7f:c7:db:aa:6f:4e:5c:eb:
b7:54:08:1e:9a:41:bf:0f:2b:b2:a2:99:c9:5d:41:d0:23:d1:
41:ab:6e:4e:8e:4c:15:b8:ea:ee:8d:f8:41:c9:c7:d3:1c:e7:
5d:52:7d:78:e6:a6:3e:00:f0:3d:49:53:be:87:f2:74:71:bf:
06:ea:6a:6f:19:28:8a:e0:d8:65:a1:b0:48:58:0f:8a:a8:ab:
01:95:c0:df:c4:d2:da:93:0b:29:93:bb:bc:e0:85:81:27:16:
8a:4d:d0:1c:21:6b:d2:f4:da:9f:a7:d4:d4:0b:77:0b:1b:4f:
ea:bc:39:ba:69:a2:8c:bf:31:55:69:0a:02:93:e3:cb:50:b6:
25:c5:f2:5f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:49:27 2025 by rpki-client