Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/V1CM30lSOjgTPpe8DBv0p6NfZ6Q.cer
File: V1CM30lSOjgTPpe8DBv0p6NfZ6Q.cer (raw, json)
Hash identifier: r/TE/UNf4P92W3qSg6aA8ppbLzpjBDy0AD5GfD4nWss=
Subject key identifier: 57:50:8C:DF:49:52:3A:38:13:3E:97:BC:0C:1B:F4:A7:A3:5F:67:A4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2FE2
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F366E94B/61E32A7E27B411EE92E3412B4AD9E6FC/V1CM30lSOjgTPpe8DBv0p6NfZ6Q.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F366E94B/61E32A7E27B411EE92E3412B4AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:51:10 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329247
IP: 102.212.24.0/22
IP: 2c0f:4340::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12258 (0x2fe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:51:10 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F366E94BAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:25:5f:d3:69:bd:e1:33:ec:b6:7c:ce:48:b9:
f2:11:c9:8b:06:21:0d:9a:ac:7b:2a:fd:d8:19:85:
c6:78:21:1b:b4:71:85:05:f9:8c:bf:d7:7a:51:fb:
71:49:ea:98:a0:d6:20:fd:c1:04:6e:9b:5b:dd:70:
00:7c:91:d1:61:ad:26:eb:02:66:c3:88:4d:74:b5:
dc:b5:b7:5d:4c:ac:a8:93:f5:f9:17:e1:0b:88:a0:
f3:6a:cc:0b:66:11:77:d8:96:e1:40:49:aa:02:16:
89:9c:25:ad:93:d9:6c:43:70:72:5d:23:2d:54:e1:
c0:41:7b:68:8a:6c:bc:46:90:05:fa:0c:36:9f:9e:
57:ac:16:cc:69:71:21:03:16:a5:44:1f:91:ec:fe:
11:b4:6a:db:19:52:21:ba:c1:62:ae:2b:ec:92:08:
15:46:10:c9:74:85:33:85:70:7c:5a:05:8b:54:e4:
35:ca:c4:98:5f:46:65:a5:32:2a:c9:a7:f0:e1:96:
25:05:ce:5b:6a:e6:de:e0:e8:54:76:0b:5e:94:cd:
db:2d:1c:0e:8e:a1:3b:39:b1:54:db:2f:6c:fb:ee:
32:93:f8:ea:c5:f5:01:f7:70:77:07:90:46:63:9e:
6e:99:74:18:49:9f:a3:61:fe:09:1d:96:5e:8e:b0:
7f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:50:8C:DF:49:52:3A:38:13:3E:97:BC:0C:1B:F4:A7:A3:5F:67:A4
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E94B/61E32A7E27B411EE92E3412B4AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E94B/61E32A7E27B411EE92E3412B4AD9E6FC/V1CM30lSOjgTPpe8DBv0p6NfZ6Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329247
sbgp-ipAddrBlock: critical
IPv4:
102.212.24.0/22
IPv6:
2c0f:4340::/32
Signature Algorithm: sha256WithRSAEncryption
1c:2b:32:30:fb:7a:98:d1:ce:7a:84:a4:94:2d:03:cb:67:17:
eb:d0:29:44:46:0a:2e:5a:75:6e:84:fe:a8:81:de:24:35:a4:
5b:79:ea:bc:91:88:a8:a7:b3:58:5f:81:a3:fc:52:de:c0:d9:
5a:55:61:89:10:10:61:57:91:c0:f0:87:4c:59:09:c8:3d:00:
19:0d:7b:21:70:93:0b:22:00:33:74:d6:df:d4:91:e2:3d:2b:
9a:a5:1c:93:5d:f9:cf:b8:27:bf:8f:ee:7e:29:ee:c6:84:17:
1d:b8:f8:78:28:87:ee:5b:31:f1:a2:28:f9:c3:fb:f7:f3:5d:
76:5f:d4:88:c2:07:ea:fc:c0:de:d4:9d:f5:d4:99:db:81:5d:
a1:1c:e8:58:81:2a:22:92:ac:30:04:b5:83:e6:99:1c:33:b5:
e7:45:9c:a2:6f:a7:03:88:a3:95:3e:3e:37:0d:04:c7:41:ad:
4d:33:3a:fd:40:7d:16:2d:ae:fb:d5:0a:7f:43:a6:58:74:98:
a0:8b:68:2c:8d:37:e6:60:95:d0:6c:65:cd:fd:35:08:67:e9:
af:06:7c:84:20:73:d2:0f:68:dc:cd:af:b1:6f:e8:b4:ed:50:
42:7a:dd:48:9b:78:f5:af:eb:0c:7d:15:0b:ba:0b:6f:e8:80:
6b:79:34:7c
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICL+IwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMjUxMTBaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjZFOTRCQUYxMTAvBgNVBAUTKDU3NTA4Q0RGNDk1MjNBMzgxMzNFOTdC
QzBDMUJGNEE3QTM1RjY3QTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDWJV/Tab3hM+y2fM5IufIRyYsGIQ2arHsq/dgZhcZ4IRu0cYUF+Yy/13pR+3FJ
6pig1iD9wQRum1vdcAB8kdFhrSbrAmbDiE10tdy1t11MrKiT9fkX4QuIoPNqzAtm
EXfYluFASaoCFomcJa2T2WxDcHJdIy1U4cBBe2iKbLxGkAX6DDafnlesFsxpcSED
FqVEH5Hs/hG0atsZUiG6wWKuK+ySCBVGEMl0hTOFcHxaBYtU5DXKxJhfRmWlMirJ
p/DhliUFzltq5t7g6FR2C16UzdstHA6OoTs5sVTbL2z77jKT+OrF9QH3cHcHkEZj
nm6ZdBhJn6Nh/gkdll6OsH/hAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUV1CM30lS
OjgTPpe8DBv0p6NfZ6QwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2RTk0Qi82MUUzMkE3RTI3QjQx
MUVFOTJFMzQxMkI0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NkU5NEIvNjFFMzJBN0UyN0I0MTFFRTkyRTM0MTJCNEFEOUU2RkMvVjFDTTMw
bFNPamdUUHBlOERCdjBwNk5mWjZRLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBh8wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm1BgwDQQCAAIwBwMF
ACwPQ0AwDQYJKoZIhvcNAQELBQADggEBABwrMjD7epjRznqEpJQtA8tnF+vQKURG
Ci5adW6E/qiB3iQ1pFt56ryRiKins1hfgaP8Ut7A2VpVYYkQEGFXkcDwh0xZCcg9
ABkNeyFwkwsiADN01t/UkeI9K5qlHJNd+c+4J7+P7n4p7saEFx24+Hgoh+5bMfGi
KPnD+/fzXXZf1IjCB+r8wN7UnfXUmduBXaEc6FiBKiKSrDAEtYPmmRwztedFnKJv
pwOIo5U+PjcNBMdBrU0zOv1AfRYtrvvVCn9Dplh0mKCLaCyNN+ZgldBsZc39NQhn
6a8GfIQgc9IPaNzNr7Fv6LTtUEJ63UibePWv6wx9FQu6C2/ogGt5NHw=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:38:27 2025 by rpki-client