Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
File: T0jn6jDJibFdNjk3djVToH4WzY4.cer (raw, json)
Hash identifier: z0iIZYfo1UVWgUyid52Q6BKH89x4t61Kt8kkCEfu2UI=
Subject key identifier: 4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3057
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:15:08 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328866
IP: 41.92.128.0/21
IP: 41.92.152.0/21
IP: 41.92.180.0 -- 41.92.187.255
IP: 41.92.196.0 -- 41.92.203.255
IP: 41.92.208.0 -- 41.92.219.255
IP: 41.92.224.0/24
IP: 41.92.248.0/21
IP: 41.190.224.0/22
IP: 41.217.148.0/22
IP: 2c0f:7c40::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12375 (0x3057)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 03:15:08 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F367BA6AAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:38:7b:93:90:83:2e:f8:a7:2c:df:09:c4:f3:
ba:13:2a:ea:a6:d5:02:03:a1:5b:30:52:23:23:4b:
51:d1:4f:4b:2f:f1:72:59:32:2c:f6:b2:43:cb:98:
2c:de:e6:dc:21:7a:ee:69:50:d7:fa:59:ea:52:03:
f2:fa:70:7f:93:23:a7:ec:93:da:3d:a2:d0:67:a3:
f6:ae:7b:fe:3c:28:cf:69:fd:70:8a:2d:d3:9a:7b:
ff:be:70:b9:72:a5:3f:2b:75:d1:2a:2f:16:e7:3c:
63:0f:14:3c:90:c0:ae:bd:28:e5:84:f3:82:7a:5b:
77:f3:db:91:48:89:dc:65:c9:26:ba:61:6d:08:b0:
8e:18:44:cf:84:b9:95:ae:8b:83:a8:2f:8a:1e:5d:
51:24:55:a2:7f:ca:e7:8f:cd:95:18:3e:15:c2:85:
7e:c3:6c:aa:24:ed:ce:d5:56:df:c7:41:4a:78:04:
69:e4:a6:33:86:8b:2e:76:89:46:3f:ae:6a:ce:4a:
41:14:aa:7b:fe:5c:9f:33:d7:67:6e:d0:7a:bf:25:
c9:d4:09:c6:b0:04:16:cc:b0:3a:8b:54:71:09:d9:
76:d5:d1:a4:55:eb:ef:cc:c1:c4:74:05:a3:99:18:
ba:92:ab:7f:4f:35:fc:8a:21:4e:a7:d8:71:bc:10:
56:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328866
sbgp-ipAddrBlock: critical
IPv4:
41.92.128.0/21
41.92.152.0/21
41.92.180.0-41.92.187.255
41.92.196.0-41.92.203.255
41.92.208.0-41.92.219.255
41.92.224.0/24
41.92.248.0/21
41.190.224.0/22
41.217.148.0/22
IPv6:
2c0f:7c40::/32
Signature Algorithm: sha256WithRSAEncryption
03:90:9f:ed:92:58:46:5d:2e:32:33:ba:01:2b:b0:d0:8c:c4:
4c:3b:85:fa:7d:fd:60:08:ea:da:bd:aa:bd:d6:b9:22:b4:c3:
b9:a6:f9:ba:e3:fd:8d:d6:b8:f1:1a:64:bd:27:74:25:1e:6b:
fa:54:8d:07:fc:59:79:1e:d8:fa:d8:f6:e4:64:65:c8:0f:77:
e1:10:96:43:cc:6e:95:12:21:cf:1f:4d:f4:d7:1e:e2:36:fa:
a7:07:e6:e1:8b:2c:cd:be:e0:60:4a:f7:d9:c0:cd:27:f6:28:
65:99:62:9b:b3:e1:c7:d1:96:7c:c8:16:68:50:2b:34:6d:ca:
15:a1:da:e6:89:e0:88:76:42:c6:b8:c4:2b:7f:63:53:dd:e4:
4a:cb:d9:fe:06:c4:89:d4:d5:29:3d:48:4d:67:74:08:85:c5:
ab:e7:e4:df:49:38:56:8d:61:7e:9c:b7:7e:45:b0:f1:21:7e:
09:52:c0:1b:4e:04:38:a5:f7:61:b4:a2:19:c8:5f:b5:5c:6d:
9d:15:f8:87:3a:dc:90:ca:60:69:84:07:cf:96:72:67:90:2e:
53:9e:21:7c:c2:69:04:3b:3c:fb:e7:eb:e7:33:e7:92:22:e4:
26:68:79:c1:5f:8c:76:1d:69:5b:61:89:f9:42:7a:99:85:9a:
02:2f:9d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 21:03:05 2025 by rpki-client