Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer
File: VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.cer (raw, json)
Hash identifier: q7xpa1zyi2W/ZrJKUxG6Fp0GCKl7I2siZGNCze/56Ns=
Subject key identifier: 56:95:2E:F9:30:F4:4F:FE:91:27:70:E3:DB:C1:63:04:9F:5A:FD:B7
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2D63
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:40:12 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37721
AS: 37734
IP: 102.67.96.0/19
IP: 102.212.160.0/23
IP: 102.214.64.0/22
IP: 2c0f:ee00::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11619 (0x2d63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:40:12 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3627A02AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2c:95:a0:42:61:54:e8:fd:81:8f:1a:db:86:
cb:24:76:16:f5:12:e2:99:4c:02:8e:9f:4e:d3:da:
52:b2:2e:d1:08:b9:60:8f:b5:e4:e1:f1:05:5d:da:
89:0c:a0:bb:c0:6f:e1:78:ae:b9:51:18:86:a5:ca:
49:b2:1f:eb:47:e5:bf:a5:77:55:d8:cd:df:4c:27:
f0:dd:ff:45:89:f3:dc:10:f4:b1:87:d9:a7:8f:9d:
be:ad:c5:04:cd:cc:cb:27:ed:1b:83:8c:2d:58:42:
c1:15:f2:cd:04:ef:e1:9b:ca:0a:08:47:a8:bd:1e:
15:55:0e:19:07:ab:46:02:45:20:d8:c5:03:3e:ce:
01:7d:95:d6:f1:af:c9:da:cd:5f:ab:3c:0a:66:9f:
bf:cb:0f:0b:3d:8b:59:a8:32:31:95:55:40:1c:78:
45:35:bd:48:28:4a:d3:98:aa:5a:ca:cf:da:03:f9:
2c:fb:56:81:83:d8:ca:31:5e:54:2f:eb:6a:82:02:
49:15:48:f1:c7:e5:3a:ff:1f:d2:f2:6b:5a:55:b3:
a3:49:a7:6a:ea:33:a7:27:19:85:7e:93:e6:7b:40:
6d:c0:72:8c:4e:d5:64:f3:ff:87:e8:17:6a:0d:2a:
1d:ef:d2:da:52:44:be:49:6c:be:cf:37:ac:79:d7:
d7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:95:2E:F9:30:F4:4F:FE:91:27:70:E3:DB:C1:63:04:9F:5A:FD:B7
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/26DFD6B8B58E11E8A6CE2664F8AEA228/VpUu-TD0T_6RJ3Dj28FjBJ9a_bc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37721
37734
sbgp-ipAddrBlock: critical
IPv4:
102.67.96.0/19
102.212.160.0/23
102.214.64.0/22
IPv6:
2c0f:ee00::/32
Signature Algorithm: sha256WithRSAEncryption
a1:2c:19:4d:ad:51:93:e1:61:92:4b:74:b0:37:4c:2d:50:01:
cb:77:94:a6:cc:7f:b2:c2:e2:f6:22:3f:c9:ec:5d:bf:82:ea:
56:82:ef:8c:27:47:ce:93:4e:6a:da:55:50:21:7b:11:55:68:
8f:53:4c:26:0d:58:b1:e8:3b:2a:18:0b:45:96:d2:e5:9d:36:
89:29:94:3f:d9:5e:fb:2e:1e:49:c2:0b:2d:0b:ce:9c:d9:a7:
cd:ab:e8:7c:3a:f5:e7:86:22:66:46:a0:8f:e3:b2:d6:af:7c:
e0:22:23:fb:6d:90:68:03:fd:06:47:0a:a4:48:25:42:9b:dc:
10:24:70:2f:35:87:c0:b8:c3:bb:23:92:c4:92:21:73:f2:67:
f7:d0:59:9a:7b:3d:d5:6c:bc:a8:27:b5:ba:ba:e3:fd:ca:3c:
e9:42:af:1f:7b:6e:4c:2c:4b:fd:f7:81:a4:95:67:62:24:9f:
d7:94:79:42:43:1b:61:86:ac:db:0d:c4:66:0a:0a:e4:d8:1e:
62:42:e6:08:60:05:1c:e7:9f:d0:ce:e4:4d:1c:4f:05:42:cf:
21:74:a7:8c:bd:98:7f:aa:8d:8b:aa:34:e2:50:0d:47:6a:d6:
23:96:6d:8b:fd:fa:de:0d:2a:e7:c7:a3:1a:b9:34:eb:05:02:
49:d2:13:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:38:29 2025 by rpki-client