Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer
File: L9OdkqzapRN7zkgavmyN8dzNDvY.cer (raw, json)
Hash identifier: JjcvvuWmo/26+xglESuLsVUQbpE86VAvTXfdv3EMwA0=
Subject key identifier: 2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3054
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:14:34 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 28683
AS: 328228
IP: 41.85.160.0/19
IP: 41.216.32.0/19
IP: 2001:4320::/32
IP: 2c0f:f188::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12372 (0x3054)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 03:14:34 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F367B8D1AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:98:64:f1:21:37:44:b7:29:2d:24:56:ec:
e2:05:8d:d0:98:65:a7:2e:d6:57:23:b8:a8:85:5d:
09:28:9d:5a:9c:48:49:f8:f6:c6:ee:a1:a2:24:47:
8f:6a:08:a6:de:13:9c:f0:17:ac:8f:06:df:c7:e7:
31:d6:7a:68:99:f6:3a:cf:a1:26:35:b4:42:81:06:
32:24:e3:01:19:37:29:93:dc:b5:a6:c6:6d:ae:b1:
fd:34:84:b6:73:9f:dc:09:3a:89:3f:a4:db:49:7b:
83:97:3e:ae:7d:c7:f1:8a:e2:24:ab:20:3f:7d:17:
eb:e7:1f:32:77:bd:5b:d5:82:dc:69:ef:cf:59:ab:
cd:98:b7:6f:dc:ae:9f:3a:dd:f4:75:85:2f:b1:5d:
e9:55:cd:9a:da:bb:58:e0:09:85:a7:0d:d0:8d:b1:
41:05:02:b6:b0:69:0b:1d:63:75:de:cc:5c:a3:32:
1e:0a:ba:1f:c2:ff:c5:81:dc:ab:17:7b:a4:b3:23:
95:3f:b7:80:26:de:56:d9:2e:a3:fd:a4:5a:62:0f:
6a:55:d9:51:3a:40:33:65:e9:81:c7:62:9a:85:4f:
c4:46:5a:8a:8a:4a:af:e9:37:c4:cc:40:29:6f:da:
e2:1f:2c:7a:25:53:8e:a3:02:9f:c5:90:cf:d4:11:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28683
328228
sbgp-ipAddrBlock: critical
IPv4:
41.85.160.0/19
41.216.32.0/19
IPv6:
2001:4320::/32
2c0f:f188::/32
Signature Algorithm: sha256WithRSAEncryption
08:cd:c9:a0:58:a3:d1:ab:4b:73:5b:d7:8a:d9:50:97:e5:26:
20:7f:8f:eb:34:2d:2b:a3:c0:07:62:18:ed:b9:29:f4:0f:f2:
01:14:7f:41:47:b2:33:b3:05:f7:74:32:4c:b3:0a:46:6d:a3:
30:bb:60:06:ec:21:5f:ba:a4:b1:6d:67:83:bc:29:2c:74:ad:
bf:9b:bf:45:a3:b1:b5:e0:1e:e6:03:d9:41:37:ea:43:b4:4e:
cb:be:11:42:2e:79:d9:88:e9:81:ea:ee:68:c1:72:d1:97:29:
7e:3e:9b:93:6f:91:64:ca:35:1b:30:97:ab:37:f3:a9:61:71:
fc:4a:25:9b:b3:ea:23:f1:a8:cf:02:c9:b9:17:04:1c:c0:2e:
28:c0:98:a0:8d:04:88:3f:6f:24:95:a8:b6:49:ff:b0:d4:ae:
0a:3a:92:67:87:f2:8d:ac:a6:1f:02:53:21:70:5e:4c:53:d0:
6c:39:41:22:40:7d:4a:2e:a6:05:d0:98:f8:a6:49:de:f0:19:
54:06:2d:73:4b:41:61:d8:ee:c7:2d:83:e7:70:ba:12:ec:4e:
c7:27:4c:6d:f9:c4:bd:39:6d:b7:b8:72:7c:53:5f:95:27:6b:
cc:71:95:e0:58:b3:39:05:00:78:fa:ac:fa:6a:c3:85:a8:bc:
e8:ea:6e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:57:28 2025 by rpki-client