Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/RK8jZrYxTFF3rs0VIYd9fFqx7G8.cer
File: RK8jZrYxTFF3rs0VIYd9fFqx7G8.cer (raw, json)
Hash identifier: OBR0xeLU+2L7ly/3YO+wdGAJ0/s47ZqfeqAXzjJ2NWk=
Subject key identifier: 44:AF:23:66:B6:31:4C:51:77:AE:CD:15:21:87:7D:7C:5A:B1:EC:6F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2E0D
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:16:03 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 327942
IP: 196.13.111.0/24
IP: 196.223.112.0/20
IP: 2001:43f8:b10::/48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11789 (0x2e0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:16:03 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F363CC54AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:24:71:19:de:0f:51:3d:f4:f6:54:4b:9f:
41:51:2e:27:08:8b:b0:f1:bf:5a:40:29:b4:e3:4d:
14:3a:46:49:24:7a:47:58:d5:65:bd:3d:2f:36:fa:
97:e7:fa:73:28:b8:b7:5e:48:04:d9:ef:ac:fd:c8:
c1:61:26:3d:04:d4:fd:7c:98:e7:d2:23:dd:04:e8:
80:78:0e:f5:d9:e8:a8:59:58:e7:e4:52:49:fa:78:
ef:58:6b:51:bb:f7:06:9c:ba:c8:6c:a0:40:bb:af:
73:ec:50:ee:9f:43:d8:31:32:93:c9:21:bf:ca:de:
4c:49:96:04:37:a2:e1:47:f5:0c:02:5b:af:3b:01:
c0:70:3a:4c:cb:b5:a7:91:27:1c:48:08:4a:0d:b1:
e2:dc:f4:a9:cf:93:b9:43:66:02:e8:04:97:88:16:
28:4e:ae:5e:cd:23:32:f9:1d:ad:43:8d:b8:85:8f:
cf:15:f5:f5:29:aa:33:e1:b6:e9:36:99:60:05:d4:
56:bb:df:03:05:a8:91:ff:8a:6b:71:d2:dc:45:87:
6e:26:5c:60:78:55:16:cf:75:c0:bc:fd:d0:44:f0:
24:5b:7c:64:2d:fd:ab:b2:a7:b5:35:6d:ae:05:81:
ca:d8:16:2c:bc:73:45:96:79:43:33:b2:19:38:73:
fc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AF:23:66:B6:31:4C:51:77:AE:CD:15:21:87:7D:7C:5A:B1:EC:6F
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327942
sbgp-ipAddrBlock: critical
IPv4:
196.13.111.0/24
196.223.112.0/20
IPv6:
2001:43f8:b10::/48
Signature Algorithm: sha256WithRSAEncryption
27:9e:e8:82:13:be:7c:09:65:4c:2d:e0:3d:3d:6c:2a:2d:96:
2c:2a:88:23:2b:65:81:da:e1:4e:30:74:cd:60:05:50:1a:3a:
83:b7:72:2d:fa:2c:de:2a:b8:e4:f8:32:71:f1:48:8f:ec:94:
7b:44:71:46:c5:62:4a:05:66:45:05:6a:5b:9b:73:86:f8:50:
f4:5e:12:5a:31:5b:eb:ea:f3:6b:98:ae:7f:60:dd:11:68:59:
08:a6:c1:06:f3:46:be:82:3e:bf:15:04:e9:30:7c:59:ed:32:
13:f0:0c:6b:08:f8:85:33:38:3d:36:1b:ee:0a:6e:53:3c:3a:
e2:dc:5a:59:eb:ef:f4:9e:c2:f0:57:89:23:7f:53:a7:13:01:
b0:56:63:12:ea:fe:94:93:e6:94:82:3e:b7:fc:0f:fe:a8:f7:
61:bd:e0:6e:1b:74:51:26:ea:e7:d3:71:87:d2:5a:4f:39:f8:
75:d2:c6:9d:40:5d:b4:52:83:98:ae:70:85:f7:04:12:a9:86:
fd:99:97:62:ba:e0:9d:02:7c:a7:f9:55:5d:7e:bd:09:fa:88:
6e:3b:5e:65:f2:7a:f1:9e:5d:66:f9:e3:b2:50:29:3f:23:e1:
24:b9:a2:a5:99:e4:1e:80:83:51:4b:26:7a:92:a5:00:84:08:
e6:11:71:42
-----BEGIN CERTIFICATE-----
MIIGLTCCBRWgAwIBAgICLg0wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMTE2MDNaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjNDQzU0QUYxMTAvBgNVBAUTKDQ0QUYyMzY2QjYzMTRDNTE3N0FFQ0Qx
NTIxODc3RDdDNUFCMUVDNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC71iRxGd4PUT309lRLn0FRLicIi7Dxv1pAKbTjTRQ6RkkkekdY1WW9PS82+pfn
+nMouLdeSATZ76z9yMFhJj0E1P18mOfSI90E6IB4DvXZ6KhZWOfkUkn6eO9Ya1G7
9wacushsoEC7r3PsUO6fQ9gxMpPJIb/K3kxJlgQ3ouFH9QwCW687AcBwOkzLtaeR
JxxICEoNseLc9KnPk7lDZgLoBJeIFihOrl7NIzL5Ha1DjbiFj88V9fUpqjPhtuk2
mWAF1Fa73wMFqJH/imtx0txFh24mXGB4VRbPdcC8/dBE8CRbfGQt/auyp7U1ba4F
gcrYFiy8c0WWeUMzshk4c/zdAgMBAAGjggMiMIIDHjAdBgNVHQ4EFgQURK8jZrYx
TFF3rs0VIYd9fFqx7G8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYzQ0M1NC82Rjc4RjlBNEM1OTEx
MUU5QjZDNjJFMkZGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2M0NDNTQvNkY3OEY5QTRDNTkxMTFFOUI2QzYyRTJGRjhBRUEyMjgvUks4alpy
WXhURkYzcnMwVklZZDlmRnF4N0c4Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAQYwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwDBADEDW8DBATE33AwDwQC
AAIwCQMHACABQ/gLEDANBgkqhkiG9w0BAQsFAAOCAQEAJ57oghO+fAllTC3gPT1s
Ki2WLCqIIytlgdrhTjB0zWAFUBo6g7dyLfos3iq45PgycfFIj+yUe0RxRsViSgVm
RQVqW5tzhvhQ9F4SWjFb6+rza5iuf2DdEWhZCKbBBvNGvoI+vxUE6TB8We0yE/AM
awj4hTM4PTYb7gpuUzw64txaWevv9J7C8FeJI39TpxMBsFZjEur+lJPmlII+t/wP
/qj3Yb3gbht0USbq59Nxh9JaTzn4ddLGnUBdtFKDmK5whfcEEqmG/ZmXYrrgnQJ8
p/lVXX69CfqIbjteZfJ68Z5dZvnjslApPyPhJLmipZnkHoCDUUsmepKlAIQI5hFx
Qg==
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:40:33 2025 by rpki-client