Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer
File: KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer (raw, json)
Hash identifier: yo9kBh7tqdKdhmHx+xwH2Wfr+plpm9HmkqUAdKZGw2M=
Subject key identifier: 28:29:34:36:D4:D6:DA:3A:93:A6:0E:CA:3F:BE:C7:7D:8D:C3:8F:61
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 32E9
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:34:54 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37276
IP: 41.75.96.0/20
IP: 41.78.200.0/22
IP: 197.214.112.0/21
IP: 197.215.208.0/21
IP: 2c0f:2040::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13033 (0x32e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 05:34:54 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36D5F5AAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:15:76:05:37:3c:5d:d1:67:fb:0f:c6:22:9b:
f7:37:95:86:27:bb:92:8b:83:78:b5:d3:c0:a8:14:
80:a9:cd:1b:d8:60:47:8e:82:09:87:7c:27:72:3d:
88:18:e5:8c:d1:75:12:56:d6:0e:e0:7f:18:b6:8a:
6c:cc:eb:bd:97:75:eb:aa:42:05:e1:8b:67:ed:b8:
ad:3f:46:dd:c6:98:09:7d:12:d1:e2:f8:4c:78:de:
95:be:c5:40:6b:7c:6b:75:65:42:c5:40:80:90:9f:
fe:4b:44:3d:9c:d4:60:c0:c7:d1:53:2f:a9:7f:98:
f6:d6:91:c7:c4:6a:cd:0c:39:f1:bb:a2:96:f1:58:
b1:3d:9c:4d:b1:b3:fe:b3:5f:45:30:c0:33:96:18:
bd:35:12:6d:27:aa:75:6d:1b:b9:49:c2:6a:de:cb:
c5:3c:0d:c4:a9:57:aa:66:27:04:25:48:50:d3:68:
34:40:27:d7:48:e6:00:d3:e6:25:c3:38:1f:86:f8:
2e:f7:90:c8:fe:a4:2b:ad:cc:8a:3e:18:64:65:3f:
34:cc:8f:21:1e:a0:5e:7d:25:16:80:07:ec:a5:75:
95:00:61:85:72:5d:79:aa:12:02:3e:f8:80:a2:50:
51:45:c8:d4:1a:fa:a3:0e:7f:1d:a2:45:cc:42:33:
c1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:29:34:36:D4:D6:DA:3A:93:A6:0E:CA:3F:BE:C7:7D:8D:C3:8F:61
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37276
sbgp-ipAddrBlock: critical
IPv4:
41.75.96.0/20
41.78.200.0/22
197.214.112.0/21
197.215.208.0/21
IPv6:
2c0f:2040::/32
Signature Algorithm: sha256WithRSAEncryption
a6:58:09:de:0c:ee:86:8d:f4:85:4d:b0:e2:a1:3d:b4:1a:1b:
8c:e7:3f:51:e8:27:35:f6:39:a7:8c:c1:e8:7d:6c:d1:d8:db:
b4:21:6c:2a:a3:eb:a0:a5:94:0a:29:01:66:63:c1:ab:17:85:
08:e3:3c:87:40:9c:32:4e:16:60:c9:76:93:96:d7:d3:05:b1:
f6:af:4f:5e:0f:09:ce:04:81:b3:a2:de:fd:ba:e5:a1:0d:d0:
67:c3:ed:9f:67:d7:5e:ed:57:3d:5d:cf:02:a1:c6:44:31:f1:
c6:b9:46:55:99:dd:98:ac:a0:7e:7e:3b:ac:8a:77:e4:1a:55:
8b:aa:e0:54:29:ff:2f:e8:8f:5c:aa:9b:f1:d6:00:70:7f:b6:
55:8d:1c:af:8a:a5:8b:d3:ad:c9:13:9b:04:34:fd:b4:e0:5c:
f2:07:32:d0:e7:07:a4:ba:cc:60:b4:11:eb:84:03:9b:90:b7:
1d:a1:2d:a9:84:37:f7:d1:71:71:22:ad:82:58:c0:c9:88:02:
5d:51:36:59:de:1a:c2:91:4d:8a:c1:b8:e1:a0:c7:ee:90:72:
08:58:b3:4d:ed:84:c4:54:11:ea:36:51:61:32:8a:02:09:56:
eb:fb:9b:18:78:f0:32:8a:39:d7:91:81:af:63:23:02:73:23:
23:1c:e5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:30:28 2025 by rpki-client