Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer
File: UJrkB4CHuVMUvanvade7dIgcL94.cer (raw, json)
Hash identifier: NZsKMD//DOgbIqtuK+oM2+NtpUvyuHjkq1qAa25uzQA=
Subject key identifier: 50:9A:E4:07:80:87:B9:53:14:BD:A9:EF:69:D7:BB:74:88:1C:2F:DE
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2DA5
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:54:45 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 102.208.216.0/22
IP: 2c0f:8c0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11685 (0x2da5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:54:45 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3630501AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:74:3c:b2:7b:5a:98:22:a5:12:f5:5b:c8:f2:
cf:46:58:26:49:4e:15:0a:c7:e8:9a:06:37:1b:e1:
6b:3c:04:22:d5:0e:66:cc:9f:16:6c:ad:37:bc:a9:
32:22:2b:b8:18:c4:74:e0:a5:cd:e5:d1:65:5a:4b:
6d:23:98:a3:c3:a4:b0:bb:78:4f:92:ea:3c:d5:e6:
ad:ab:51:fe:ed:71:06:e9:a6:7f:44:53:29:2e:9c:
68:70:5b:64:27:0e:0f:92:f0:40:ba:5b:e9:a8:80:
11:34:52:ca:25:5a:58:40:30:e1:17:06:e6:c7:a1:
ac:dd:13:4c:7f:77:b5:d4:9d:9c:76:a1:9b:86:70:
05:10:d9:82:3d:c2:2a:e2:f2:06:e8:64:bf:3c:ee:
a4:e6:42:50:da:19:30:f1:a7:a8:8a:26:a9:ac:d5:
39:8b:08:5a:9a:c9:51:a4:19:21:6b:6c:60:11:7e:
91:01:40:81:a4:9e:1a:83:b2:46:a5:5a:c9:58:d8:
49:b7:c0:02:c3:78:a6:2f:4e:f7:1a:0b:4d:77:bf:
ad:07:5e:1b:ae:c3:5a:15:c7:d4:95:0b:0b:a7:56:
1c:da:b9:e3:3d:35:60:1a:20:6e:2a:eb:a0:dc:9f:
3b:91:62:63:35:14:61:7d:a3:1b:51:66:62:05:87:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9A:E4:07:80:87:B9:53:14:BD:A9:EF:69:D7:BB:74:88:1C:2F:DE
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
sbgp-ipAddrBlock: critical
IPv4:
102.208.216.0/22
IPv6:
2c0f:8c0::/32
Signature Algorithm: sha256WithRSAEncryption
3d:9e:c1:ec:21:8f:35:90:5b:ac:57:38:ee:c0:e3:3f:45:fd:
42:e8:2b:4a:3f:a2:5b:ec:32:24:d6:f1:e8:a6:b8:23:46:d6:
e1:fd:bd:91:79:19:47:3f:d0:0c:98:d5:0f:e1:f8:17:6c:17:
94:52:c8:85:4c:21:bd:1d:fa:bf:2b:fd:dd:33:d4:9b:3c:87:
9a:48:a3:2a:dd:88:d7:0f:3a:e0:dd:ed:04:20:ec:a2:85:91:
fa:dd:75:d1:06:24:a9:39:15:73:e3:3f:ea:ca:33:de:02:18:
64:da:23:f3:cf:7c:7b:c1:53:b8:c3:b2:78:3a:4d:16:e9:e1:
57:c8:4b:c9:fb:b7:a1:bc:04:61:ab:75:aa:c2:8a:08:3d:38:
fb:d5:e9:52:5b:d3:6a:dd:b9:fb:6c:fc:5a:c2:6a:4f:58:7b:
1c:31:98:78:d7:5c:db:cc:b7:99:1f:20:ad:dc:07:2f:b5:88:
ed:da:7f:27:3d:ac:d4:dd:ac:f6:4f:99:fe:39:c1:14:cb:ca:
9e:a5:8b:12:fd:e3:77:ac:95:f1:c9:07:e3:66:b5:f5:06:20:
69:d8:9d:7e:0c:10:10:1e:db:56:14:61:6f:80:d5:15:27:20:
92:df:03:fa:69:82:32:2e:67:c2:cd:09:f0:81:06:30:05:bc:
ea:30:c0:1d
-----BEGIN CERTIFICATE-----
MIIGCTCCBPGgAwIBAgICLaUwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMDU0NDVaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjMwNTAxQUYxMTAvBgNVBAUTKDUwOUFFNDA3ODA4N0I5NTMxNEJEQTlF
RjY5RDdCQjc0ODgxQzJGREUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDddDyye1qYIqUS9VvI8s9GWCZJThUKx+iaBjcb4Ws8BCLVDmbMnxZsrTe8qTIi
K7gYxHTgpc3l0WVaS20jmKPDpLC7eE+S6jzV5q2rUf7tcQbppn9EUykunGhwW2Qn
Dg+S8EC6W+mogBE0UsolWlhAMOEXBubHoazdE0x/d7XUnZx2oZuGcAUQ2YI9wiri
8gboZL887qTmQlDaGTDxp6iKJqms1TmLCFqayVGkGSFrbGARfpEBQIGknhqDskal
WslY2Em3wALDeKYvTvcaC013v60HXhuuw1oVx9SVCwunVhzaueM9NWAaIG4q66Dc
nzuRYmM1FGF9oxtRZmIFh3X9AgMBAAGjggL+MIIC+jAdBgNVHQ4EFgQUUJrkB4CH
uVMUvanvade7dIgcL94wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYzMDUwMS9EODE1NkQxMDdBNkYx
MUVGQUI2MzdCNDQ3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MzA1MDEvRDgxNTZEMTA3QTZGMTFFRkFCNjM3QjQ0NzYyRTk1MUEvVUpya0I0
Q0h1Vk1VdmFudmFkZTdkSWdjTDk0Lm1mdDAuBggrBgEFBQcBBwEB/wQfMB0wDAQC
AAEwBgMEAmbQ2DANBAIAAjAHAwUALA8IwDANBgkqhkiG9w0BAQsFAAOCAQEAPZ7B
7CGPNZBbrFc47sDjP0X9QugrSj+iW+wyJNbx6Ka4I0bW4f29kXkZRz/QDJjVD+H4
F2wXlFLIhUwhvR36vyv93TPUmzyHmkijKt2I1w864N3tBCDsooWR+t110QYkqTkV
c+M/6soz3gIYZNoj8898e8FTuMOyeDpNFunhV8hLyfu3obwEYat1qsKKCD04+9Xp
UlvTat25+2z8WsJqT1h7HDGYeNdc28y3mR8grdwHL7WI7dp/Jz2s1N2s9k+Z/jnB
FMvKnqWLEv3jd6yV8ckH42a19QYgadidfgwQEB7bVhRhb4DVFScgkt8D+mmCMi5n
ws0J8IEGMAW86jDAHQ==
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:43:57 2025 by rpki-client