Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/QUU0FvBOj22xFq-_-XGXUae9vPc.cer
File: QUU0FvBOj22xFq-_-XGXUae9vPc.cer (raw, json)
Hash identifier: kZp1J0H6CY7GxVD6jNxqZmB1612zeC+kJlVqmpcg/Fk=
Subject key identifier: 41:45:34:16:F0:4E:8F:6D:B1:16:AF:BF:F9:71:97:51:A7:BD:BC:F7
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 31C7
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:32:35 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328742
IP: 102.221.184.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12743 (0x31c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:32:35 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36AC99EAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ff:5f:51:df:6b:5e:94:32:f8:b2:08:5f:61:
97:b9:17:88:7e:f6:d1:c7:e1:56:92:91:75:4b:37:
12:1f:0a:39:93:0a:bf:24:7a:13:26:76:87:63:f4:
d6:66:43:a5:33:e8:9d:69:f1:8c:ec:80:7c:fd:12:
5c:86:38:11:6e:d1:b9:00:b8:64:87:20:7f:c9:32:
7a:16:be:13:a2:83:fb:48:4c:9b:6e:bd:94:e7:49:
2d:a7:43:c5:fe:25:fa:95:51:b5:bf:a2:f2:e5:3d:
04:66:0e:cc:d0:5f:30:a4:40:7a:ae:cc:76:66:15:
a2:4d:56:42:1e:ec:11:f2:ad:46:35:7c:e1:36:2b:
d6:a9:f5:f3:9c:86:f6:8c:fe:f5:c2:a7:2a:a1:c3:
9d:92:1d:99:1f:3d:55:24:4f:59:8b:ab:90:7a:97:
c3:63:54:6a:78:9a:64:72:ff:7a:10:bc:80:59:ec:
3b:b7:ef:84:cf:f2:5a:b2:e9:0e:81:58:33:cc:ae:
75:e9:59:35:28:36:5f:c8:36:db:f7:c1:58:b6:ce:
29:c9:0c:2f:0e:23:a7:13:7c:09:cd:4a:b4:f3:20:
3c:55:49:db:9b:94:a8:ed:af:68:17:ae:ad:10:e0:
24:88:13:af:c2:08:46:de:5d:9a:64:76:e8:70:23:
5c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:45:34:16:F0:4E:8F:6D:B1:16:AF:BF:F9:71:97:51:A7:BD:BC:F7
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328742
sbgp-ipAddrBlock: critical
IPv4:
102.221.184.0/22
Signature Algorithm: sha256WithRSAEncryption
33:d5:5a:56:3a:d9:a5:c2:0b:29:05:e3:6a:8e:2b:28:c0:3f:
a6:b5:f2:c0:a7:60:4c:d9:a2:18:62:c3:e5:1e:a2:67:30:98:
a4:54:eb:ba:3a:f1:43:57:c9:4a:c0:71:57:54:d1:d3:df:41:
c4:65:33:b6:85:db:34:e7:86:a8:9d:5f:a4:db:ca:47:02:a8:
6a:6e:24:c1:c6:e4:ee:27:6b:28:1b:24:52:3d:c6:1e:ff:34:
0c:95:b8:95:c2:e5:21:28:7a:5e:78:80:4c:14:ff:31:0b:54:
56:fa:ac:30:24:aa:ad:2c:41:80:4b:73:11:3f:57:e9:e7:9b:
8f:5e:e5:3a:7c:2f:bf:e4:0d:15:6b:b0:24:4c:49:b5:22:27:
ea:37:d1:04:10:71:4a:a9:b3:1f:44:16:b6:19:ea:5e:34:33:
60:71:4c:0a:6d:4c:79:01:c9:78:f6:65:4d:f3:15:3e:65:43:
45:0b:3b:59:61:d4:36:ed:14:da:a6:9b:89:7e:8d:de:ad:30:
72:6f:8e:ef:a2:bd:22:6f:a8:62:8f:d6:b2:3c:3a:83:df:60:
c2:34:1c:a6:28:a7:0d:20:25:64:44:df:25:cf:cc:3f:22:1d:
0e:59:ff:0a:3e:86:e8:48:ad:80:86:2c:c1:04:73:82:a7:04:
d8:cc:ad:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:54:20 2025 by rpki-client