
Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
File: POdKxSWrybUFEx5W069Lqgyoa8c.cer (raw, json)
Hash identifier: GP2kKvk9mCPvrVm7B8gbvCTFPdJ76USVXvc68mLRJS0=
Subject key identifier: 3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2CDD
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:08:19 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37738
IP: 102.210.212.0/22
IP: 2c0f:5f40::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11485 (0x2cdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:08:19 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3614DFDAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:87:d8:cf:a7:83:00:03:18:ff:e0:93:af:
20:d3:be:0d:67:62:6c:20:ad:f1:2a:2c:e4:b8:6a:
b5:cc:09:6a:4b:39:72:cd:68:99:ba:a3:57:42:ae:
b0:46:b5:1a:5b:ed:ab:ef:89:67:34:cc:0c:97:e0:
ff:11:b0:6a:9d:22:d8:70:d9:2b:13:f0:bb:c4:0b:
53:41:f3:08:10:47:2a:6d:69:a3:ba:ae:d9:3b:1e:
73:81:13:85:7b:79:9d:4a:02:ef:df:64:28:b8:ff:
9d:d5:b7:dd:8c:f4:0b:56:b4:3d:cf:02:b4:03:eb:
81:ff:d1:36:c4:bb:fc:e9:d3:de:d1:e3:03:1b:1a:
29:6a:18:08:09:3e:5f:a4:1b:f7:72:39:6c:3a:09:
20:40:39:93:8b:6c:89:85:3e:7f:d7:11:d4:97:1a:
90:c8:df:3a:39:87:96:1d:15:6b:05:e7:b3:ad:cc:
1b:10:d5:92:e6:78:f2:4c:4d:29:08:de:09:49:01:
52:1c:4f:35:17:27:d4:d7:96:5e:45:ad:94:9f:75:
84:ca:01:ff:8e:fa:a7:e6:cc:92:8a:45:94:2a:05:
61:b0:7c:93:9c:38:9e:34:a1:7b:11:8d:2b:ed:e2:
1d:3c:b6:26:f1:45:96:3c:10:17:81:ec:ec:3a:55:
78:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37738
sbgp-ipAddrBlock: critical
IPv4:
102.210.212.0/22
IPv6:
2c0f:5f40::/32
Signature Algorithm: sha256WithRSAEncryption
47:3a:08:3b:c1:f2:75:51:e8:cc:4f:41:fa:69:f5:5a:3f:df:
5c:94:87:f4:77:68:86:4e:fd:0f:ff:78:00:6e:3c:a1:bd:27:
25:72:97:95:c9:f4:bc:fa:9f:de:94:8e:ec:22:08:bf:19:ec:
bc:a9:94:59:5b:fa:c3:81:05:74:fc:1d:95:a0:3c:3e:18:a7:
c1:3c:e3:77:c6:36:8b:1f:ca:08:b1:bd:56:b2:6a:35:51:b8:
1d:4c:ca:97:5a:b3:1a:7e:db:9e:d3:a7:6a:92:85:d6:9b:6e:
48:ec:fd:82:1b:ef:79:48:b2:f1:d5:d7:19:43:3f:d4:82:a6:
3c:41:c8:89:b6:3a:46:5a:45:2f:78:ee:49:11:03:34:d4:c6:
21:d7:83:6f:96:5f:1e:f5:c0:3c:39:ae:e3:b6:c3:af:c0:c4:
40:da:54:36:75:34:a6:db:ea:fc:38:fe:50:25:a3:fb:d5:4e:
64:01:f1:6d:ea:11:ee:53:61:e5:e2:62:27:26:14:64:67:4f:
76:88:bb:5d:31:27:5e:90:70:3d:16:23:c6:e2:fc:a9:8a:3d:
7b:53:aa:bd:b2:12:cf:b0:f6:ff:2d:a0:86:cf:bc:fb:28:c3:
32:74:d4:a7:ef:6b:db:90:3b:d4:91:b8:f3:5a:c2:63:c8:8e:
54:0e:c8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:36:31 2025 by rpki-client