Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
File: LJfYJaoVfLyDVnkqObq3O2s8epE.cer (raw, json)
Hash identifier: UtmmjxKnwwJLmf2ZX12Wu2M4SKNCqkwmbiKaQbGX3Ek=
Subject key identifier: 2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2CDF
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:08:48 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328041
IP: 2001:43fc:8000::/40
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11487 (0x2cdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:08:48 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3614F54AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:e5:ef:8f:f0:69:83:18:78:08:2d:6a:4f:
be:20:4b:0a:30:f2:1b:8d:20:fc:e6:6c:c8:70:1e:
7e:f4:49:8e:cc:f2:a7:fb:d9:4a:a4:5f:aa:86:7d:
79:90:4d:c4:0d:5c:95:81:18:d5:4e:6a:e9:e7:70:
1b:29:3f:2d:21:d3:46:6e:99:27:98:2a:fb:e8:e6:
c0:a1:44:7f:07:08:0f:8d:3d:76:3a:31:fe:f9:05:
bb:a5:48:b1:5a:cc:1b:a3:5c:81:2e:c0:e4:6a:ef:
8d:e7:98:c8:64:49:c0:58:3c:33:69:e1:34:ae:de:
ca:98:92:e9:32:cd:da:06:ba:da:d0:1e:50:e5:66:
ea:9b:0e:38:d5:e9:ee:09:86:54:39:72:e3:82:e4:
60:7d:06:3f:1c:2b:54:6e:b9:f3:36:97:64:e9:8e:
83:15:e7:60:2f:e8:d1:53:d9:42:3a:8d:9a:bb:1e:
42:34:42:bc:1b:ee:01:08:7a:fd:77:a6:b4:ff:60:
59:14:99:89:3e:ea:c7:a3:2d:9e:71:72:8b:88:62:
46:5e:11:85:e7:4f:fd:f9:e0:d8:5d:0a:ce:a1:4a:
ac:bb:91:0e:c1:20:c7:fb:ab:83:f3:75:07:d0:a1:
f6:92:2e:c6:13:ae:e9:6c:0e:18:43:eb:52:99:c5:
f0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328041
sbgp-ipAddrBlock: critical
IPv6:
2001:43fc:8000::/40
Signature Algorithm: sha256WithRSAEncryption
28:0a:12:3f:76:b0:ce:08:db:d2:b6:41:27:2f:74:91:98:89:
84:90:55:67:0c:17:3d:96:c5:a4:e1:b0:47:8f:91:d0:77:29:
41:21:77:77:df:d3:be:3d:93:8b:98:db:8e:4c:54:73:fb:47:
84:a3:b6:a4:f9:6b:14:f2:ae:22:e9:bf:af:4d:03:ab:79:ca:
28:49:6d:02:d9:cd:a9:54:51:e2:50:a4:eb:78:67:53:b0:07:
d7:00:55:dc:2e:52:d6:40:6b:bb:8c:16:6b:b3:d4:15:30:c3:
eb:f8:cd:11:77:9e:47:76:16:fe:ae:c6:28:b6:11:8b:e0:3d:
92:b8:4b:0a:7a:80:35:d8:bc:a3:34:68:a0:3c:9d:d7:34:61:
83:81:fc:6d:af:20:67:60:be:83:af:f0:a6:d0:35:1a:78:aa:
ea:a2:ea:d2:42:83:b0:ee:7c:5e:e8:13:d8:be:df:a3:1f:ba:
92:f2:26:4f:5a:bf:75:b6:3f:52:0b:ac:26:87:10:ab:f4:0e:
c6:95:40:87:12:88:b0:42:31:e2:ef:e4:bd:e6:7e:3b:6e:4a:
c5:36:68:c4:a6:d6:53:dc:85:0b:86:f5:26:ac:50:df:7f:83:
16:78:c9:b9:9c:b8:58:cc:f5:33:31:91:7d:2c:c3:23:29:96:
4a:85:46:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:35:29 2025 by rpki-client