Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
File: Upl4cSNfYM1xWncQ_9bi6kyI0po.cer (raw, json)
Hash identifier: J0PMLFZOoKRm68shB8A8RzXu8PppkHWSRwi9gnCddJE=
Subject key identifier: 52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 339A
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 06:16:47 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328155
IP: 154.65.80.0/21
IP: 2c0f:f610::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13210 (0x339a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 06:16:47 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36F7F21AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:81:9f:18:26:1c:e1:d1:2a:0b:c8:ce:81:f8:
7e:b6:22:78:94:77:4a:f6:96:a4:3b:a8:91:69:fc:
43:e2:8f:b4:ad:e5:61:e2:73:ad:d4:35:01:2a:89:
11:cc:22:2a:d7:f1:b4:c4:0d:cb:7c:4f:4e:6f:02:
9b:d3:ff:ec:ab:25:b2:f0:29:80:8c:bc:1e:a9:31:
b5:6c:0e:cb:3b:ea:ba:ef:58:6e:0e:e5:aa:82:63:
c4:af:a3:ee:cc:fb:37:f6:45:68:34:cc:38:6a:e7:
bb:0d:bb:95:dc:07:36:d1:8b:aa:f4:81:7e:bf:3c:
e8:74:b0:bf:ef:4f:cd:a0:7e:ab:d1:9b:21:d4:7f:
2c:a7:24:f5:40:0a:05:ff:bd:b4:0d:dd:4f:2d:ce:
a1:98:57:c5:89:49:7e:7d:84:50:57:6a:3a:37:58:
ff:bd:b7:b5:80:95:25:f0:87:44:c2:9d:ed:90:fc:
6e:f8:a5:65:cc:db:de:46:f9:13:02:da:f5:ab:ec:
1d:c2:cb:9d:61:7e:ae:b7:e9:6a:03:6c:b3:17:d4:
73:58:88:36:73:a8:a4:d4:4d:5b:ae:0d:bd:f2:3c:
9d:43:e2:80:ea:e7:90:fb:ca:9c:45:63:65:1e:6f:
1c:e4:68:d5:e0:a3:92:8a:37:b9:99:14:7c:04:8d:
63:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328155
sbgp-ipAddrBlock: critical
IPv4:
154.65.80.0/21
IPv6:
2c0f:f610::/32
Signature Algorithm: sha256WithRSAEncryption
b1:76:ec:0d:8d:5c:cf:a9:6e:69:98:d7:97:85:08:e0:ed:8d:
5f:62:8e:f0:be:00:3c:0b:5e:4e:39:08:5d:20:50:cb:40:60:
d3:48:54:69:ae:be:08:61:ac:02:97:c4:6e:9f:83:c0:7a:b5:
ef:fe:7a:9b:60:81:c8:4d:ec:76:67:e8:6c:40:77:d5:2e:e9:
a1:10:78:a8:86:32:cc:04:b3:a9:86:ef:35:76:58:6a:1c:77:
a4:23:f3:4d:40:84:72:ba:21:2e:b2:4f:29:c9:14:f1:af:41:
ce:aa:5f:78:b7:b8:53:3a:50:14:dc:0a:e3:27:ba:3d:70:71:
e4:fe:88:e8:6b:32:af:04:f4:fe:94:dd:16:d9:44:0d:27:28:
c0:b5:a8:7f:51:88:49:88:61:50:dd:9a:72:ff:61:28:83:b9:
9d:04:f4:a8:ec:05:db:e3:76:60:76:14:c4:a9:38:27:29:94:
36:81:9f:69:7f:44:cb:65:85:b6:94:db:13:45:de:51:7c:ea:
0e:ce:39:9c:09:af:47:5d:13:af:b0:f3:24:05:f1:e6:ad:39:
ac:40:64:8d:5a:7d:6e:e1:50:46:49:f3:51:b5:f0:7d:b6:c9:
02:b3:9a:c7:55:e3:0b:25:e5:c1:68:77:fe:b8:d4:0b:ff:3e:
86:f5:b2:ed
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICM5owDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwNjE2NDdaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkY3RjIxQUYxMTAvBgNVBAUTKDUyOTk3ODcxMjM1RjYwQ0Q3MTVBNzcx
MEZGRDZFMkVBNEM4OEQyOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBgZ8YJhzh0SoLyM6B+H62IniUd0r2lqQ7qJFp/EPij7St5WHic63UNQEqiRHM
IirX8bTEDct8T05vApvT/+yrJbLwKYCMvB6pMbVsDss76rrvWG4O5aqCY8Svo+7M
+zf2RWg0zDhq57sNu5XcBzbRi6r0gX6/POh0sL/vT82gfqvRmyHUfyynJPVACgX/
vbQN3U8tzqGYV8WJSX59hFBXajo3WP+9t7WAlSXwh0TCne2Q/G74pWXM295G+RMC
2vWr7B3Cy51hfq636WoDbLMX1HNYiDZzqKTUTVuuDb3yPJ1D4oDq55D7ypxFY2Ue
bxzkaNXgo5KKN7mZFHwEjWNhAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUUpl4cSNf
YM1xWncQ/9bi6kyI0powHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGN0YyMS8zNTVENzM3RUU3MDAx
MUVDOUM4NEQ3QjlGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjdGMjEvMzU1RDczN0VFNzAwMTFFQzlDODREN0I5RjEyMjI0NjgvVXBsNGNT
TmZZTTF4V25jUV85Ymk2a3lJMHBvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAdswLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAOaQVAwDQQCAAIwBwMF
ACwP9hAwDQYJKoZIhvcNAQELBQADggEBALF27A2NXM+pbmmY15eFCODtjV9ijvC+
ADwLXk45CF0gUMtAYNNIVGmuvghhrAKXxG6fg8B6te/+eptggchN7HZn6GxAd9Uu
6aEQeKiGMswEs6mG7zV2WGocd6Qj801AhHK6IS6yTynJFPGvQc6qX3i3uFM6UBTc
CuMnuj1wceT+iOhrMq8E9P6U3RbZRA0nKMC1qH9RiEmIYVDdmnL/YSiDuZ0E9Kjs
BdvjdmB2FMSpOCcplDaBn2l/RMtlhbaU2xNF3lF86g7OOZwJr0ddE6+w8yQF8eat
OaxAZI1afW7hUEZJ81G18H22yQKzmsdV4wsl5cFod/641Av/Pob1su0=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:41:44 2025 by rpki-client