Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
File: KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer (raw, json)
Hash identifier: CG6W12OeqiivA8uXY2FYKi74ZqH0mTxqhD06JeeNnwg=
Subject key identifier: 2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3220
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:51:45 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 327996
IP: 102.132.32.0/19
IP: 102.212.84.0/22
IP: 102.212.128.0/22
IP: 102.213.20.0/22
IP: 102.213.144.0/22
IP: 196.11.176.0/21
IP: 196.251.128.0/21
IP: 2c0f:5a00::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12832 (0x3220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:51:45 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36E29EDAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e6:43:e2:c5:bd:c7:f4:a9:53:3d:0c:ef:8a:
4d:ae:6d:cc:29:35:31:82:f2:c9:7b:76:25:2d:68:
11:9f:18:c9:bd:76:f0:36:20:2c:ba:f7:6a:41:27:
2e:e8:34:54:ef:63:3d:da:18:ed:df:7b:df:32:26:
13:9b:8e:cf:ef:5a:cd:39:1e:3a:4e:08:fc:1d:ca:
16:46:69:8d:44:1c:e9:6d:32:b5:c0:03:ac:3d:91:
ef:05:d5:1e:f3:ba:ec:9c:46:f8:1c:88:ff:2a:91:
13:d3:d0:de:98:ab:a6:da:5c:b1:3a:8c:6a:f4:62:
d1:79:ec:4b:6a:6a:54:04:83:7c:1b:ee:98:ad:da:
8e:53:a9:d0:b9:b7:5b:ac:9c:29:6c:69:43:a7:b9:
2f:ec:bc:6a:9c:6a:be:14:8f:5f:69:9e:b4:c4:24:
3e:de:7f:2f:42:82:08:2e:f5:71:90:19:0e:5e:7d:
49:73:6c:48:b7:5f:4d:d4:1e:bb:79:3b:28:6e:8b:
31:b8:3d:dd:e9:ad:1a:c8:29:59:1b:65:f8:8c:3a:
e2:f3:94:f9:6a:be:8e:fc:ad:f4:8f:6e:60:2b:97:
ac:df:9b:b5:b1:3b:6f:33:c6:80:4c:19:02:a8:86:
71:3d:8b:1b:49:9b:fd:d7:76:80:18:2f:72:d6:a7:
c0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327996
sbgp-ipAddrBlock: critical
IPv4:
102.132.32.0/19
102.212.84.0/22
102.212.128.0/22
102.213.20.0/22
102.213.144.0/22
196.11.176.0/21
196.251.128.0/21
IPv6:
2c0f:5a00::/32
Signature Algorithm: sha256WithRSAEncryption
96:ea:8f:07:eb:36:d2:c5:5a:6f:cb:08:38:ac:3a:80:e7:cf:
1c:44:ee:b9:f3:b7:30:50:8f:24:a4:93:f3:ab:f4:ed:cb:8c:
60:15:21:55:d3:e8:34:4c:48:66:6a:72:77:38:0f:ef:a8:1c:
b5:95:ba:1c:87:9a:77:5e:ee:8d:13:59:67:fb:b5:e0:5c:2d:
a2:16:26:6e:ba:f9:04:98:4f:63:a1:0c:20:31:bf:f3:3e:52:
b8:ca:99:41:95:6d:d3:08:2f:44:9a:6c:2d:e6:13:dc:dd:0e:
f2:4c:4a:05:31:2c:03:46:a0:cf:e2:15:cf:de:a5:43:ff:b0:
9b:b6:22:ea:2f:04:c0:8b:44:ed:35:7d:0e:23:37:57:56:73:
ca:b5:e0:ff:58:b3:27:fd:4c:37:e4:51:c7:01:51:ef:e9:05:
3d:03:f2:a1:3f:d6:d2:4c:08:1e:ae:8d:38:fd:52:0f:2b:78:
bd:a8:f5:49:31:d9:32:21:7e:84:55:eb:d2:4b:b7:2d:c0:bb:
86:05:13:a0:93:00:72:43:8e:fe:f9:9d:b0:54:bc:54:8c:cb:
9c:5a:c9:2a:dc:99:59:9f:4e:7b:e7:7d:a7:10:03:15:01:86:
e0:7a:ad:0e:c6:28:ad:ca:88:0c:29:eb:5b:4a:52:ff:5c:38:
f4:76:38:00
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgICMiAwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwNDUxNDVaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkUyOUVEQUYxMTAvBgNVBAUTKDJBM0NDOUU1NTE5QTVBNUJCMTNEMDgz
MTBDQTkzNDgyNDg5NkZBNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDW5kPixb3H9KlTPQzvik2ubcwpNTGC8sl7diUtaBGfGMm9dvA2ICy692pBJy7o
NFTvYz3aGO3fe98yJhObjs/vWs05HjpOCPwdyhZGaY1EHOltMrXAA6w9ke8F1R7z
uuycRvgciP8qkRPT0N6Yq6baXLE6jGr0YtF57EtqalQEg3wb7pit2o5TqdC5t1us
nClsaUOnuS/svGqcar4Uj19pnrTEJD7efy9Cgggu9XGQGQ5efUlzbEi3X03UHrt5
OyhuizG4Pd3prRrIKVkbZfiMOuLzlPlqvo78rfSPbmArl6zfm7WxO28zxoBMGQKo
hnE9ixtJm/3XdoAYL3LWp8BfAgMBAAGjggM+MIIDOjAdBgNVHQ4EFgQUKjzJ5VGa
WluxPQgxDKk0gkiW+lowHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFMjlFRC8xQzVCNUQwMkRDMDkx
MUVDOUNFQkRFOUJGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RTI5RUQvMUM1QjVEMDJEQzA5MTFFQzlDRUJERTlCRjEyMjI0NjgvS2p6SjVW
R2FXbHV4UFFneERLazBna2lXLWxvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFATwwUgYIKwYBBQUHAQcBAf8EQzBBMDAEAgABMCoDBAVmhCADBAJm1FQDBAJm
1IADBAJm1RQDBAJm1ZADBAPEC7ADBAPE+4AwDQQCAAIwBwMFACwPWgAwDQYJKoZI
hvcNAQELBQADggEBAJbqjwfrNtLFWm/LCDisOoDnzxxE7rnztzBQjySkk/Or9O3L
jGAVIVXT6DRMSGZqcnc4D++oHLWVuhyHmnde7o0TWWf7teBcLaIWJm66+QSYT2Oh
DCAxv/M+UrjKmUGVbdMIL0SabC3mE9zdDvJMSgUxLANGoM/iFc/epUP/sJu2Iuov
BMCLRO01fQ4jN1dWc8q14P9Ysyf9TDfkUccBUe/pBT0D8qE/1tJMCB6ujTj9Ug8r
eL2o9Ukx2TIhfoRV69JLty3Au4YFE6CTAHJDjv75nbBUvFSMy5xaySrcmVmfTnvn
facQAxUBhuB6rQ7GKK3KiAwp61tKUv9cOPR2OAA=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:42:56 2025 by rpki-client