Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.cer
File: X9TGCuwPWydtqrnbaRF2ZYnYqiQ.cer (raw, json)
Hash identifier: 4K7//t9eB8ggQwpuG3rLY2eMViFrimu9mOcQ8wDRwH0=
Subject key identifier: 5F:D4:C6:0A:EC:0F:5B:27:6D:AA:B9:DB:69:11:76:65:89:D8:AA:24
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 331A
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:46:19 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37724
IP: 102.222.66.0/23
IP: 2001:43f8:1800::/40
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13082 (0x331a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 05:46:19 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36DD1E2AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:af:22:85:5d:21:52:99:c2:54:b0:8e:73:
c3:e6:c5:7c:e5:df:f4:ba:27:85:14:c3:40:09:98:
dd:33:67:d7:1d:ce:ee:7e:e7:5c:ee:c2:99:a2:5c:
17:55:ec:c8:ad:bc:22:c4:f7:79:92:e9:f2:c8:e0:
0e:3b:45:82:ca:57:fa:35:55:9e:a0:8c:cc:9a:08:
9f:d6:15:f5:7f:47:fd:2b:2f:fa:79:d9:06:e2:71:
32:81:aa:c8:ea:d6:45:d1:19:e8:fa:3d:1b:45:25:
2c:ab:b5:2e:19:4f:36:4f:73:c7:9c:5a:0d:8d:fa:
85:29:0a:f3:3a:83:72:78:ab:bb:77:d8:6b:f0:4a:
9c:64:14:2e:a7:c7:1a:58:87:56:c9:e6:ee:82:d8:
3f:9d:d4:3e:12:47:0e:b6:b8:dc:59:77:69:57:f4:
87:de:29:31:5d:75:fa:6c:4d:76:f6:4d:bd:63:2f:
e8:18:5b:60:88:8e:01:24:65:17:f4:03:62:3b:cb:
3e:5b:25:f8:3a:cf:1d:2b:56:98:fe:2a:19:3b:29:
97:60:75:6d:21:ce:12:2c:5a:ba:f4:24:03:04:2c:
bb:7e:0d:c7:e4:f8:5a:46:39:dd:83:e9:ff:d4:15:
78:11:87:62:55:c6:c9:14:7d:42:72:34:e2:5d:6e:
f0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D4:C6:0A:EC:0F:5B:27:6D:AA:B9:DB:69:11:76:65:89:D8:AA:24
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37724
sbgp-ipAddrBlock: critical
IPv4:
102.222.66.0/23
IPv6:
2001:43f8:1800::/40
Signature Algorithm: sha256WithRSAEncryption
73:08:1e:ce:1f:81:52:be:62:58:9f:10:11:57:29:3c:7a:4d:
e0:a9:52:22:88:89:0b:c0:a8:a7:9f:e7:3e:76:3f:6d:f7:7f:
62:1d:04:a8:1c:06:c5:5f:43:9c:0e:af:30:cb:1f:96:22:4c:
f1:3d:1d:57:89:48:a6:88:e3:d6:06:14:88:67:72:d9:42:96:
2c:8e:4c:90:34:7c:1c:63:0b:c4:b3:04:3d:57:38:04:4a:23:
d7:57:37:f4:46:3f:d3:f0:22:12:80:68:b4:cc:3e:93:05:25:
61:a9:5a:5d:0d:c6:48:8d:f0:66:e7:c7:1a:5a:8c:40:89:af:
5e:e4:bf:72:4b:8d:13:5b:1f:05:b2:c7:fd:f3:d0:2b:1f:ae:
54:74:da:1c:1f:d5:f2:c0:0c:5e:c8:77:28:89:5b:d6:68:52:
30:68:c4:90:85:b0:78:18:30:2e:60:b5:11:a5:49:e0:f0:91:
54:4c:a3:72:fd:52:88:51:76:43:98:9b:e7:23:48:0f:f7:44:
a5:85:32:96:56:b2:f6:9d:fc:64:3d:6c:17:03:fb:0d:ba:04:
63:63:53:37:01:ed:03:61:c4:63:05:3c:00:f4:06:c4:22:3a:
80:d7:ac:39:30:6c:8c:17:c3:a6:3a:38:52:8a:a3:37:a1:30:
05:39:31:53
-----BEGIN CERTIFICATE-----
MIIGJjCCBQ6gAwIBAgICMxowDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwNTQ2MTlaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkREMUUyQUYxMTAvBgNVBAUTKDVGRDRDNjBBRUMwRjVCMjc2REFBQjlE
QjY5MTE3NjY1ODlEOEFBMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCrq68ihV0hUpnCVLCOc8PmxXzl3/S6J4UUw0AJmN0zZ9cdzu5+51zuwpmiXBdV
7MitvCLE93mS6fLI4A47RYLKV/o1VZ6gjMyaCJ/WFfV/R/0rL/p52QbicTKBqsjq
1kXRGej6PRtFJSyrtS4ZTzZPc8ecWg2N+oUpCvM6g3J4q7t32GvwSpxkFC6nxxpY
h1bJ5u6C2D+d1D4SRw62uNxZd2lX9IfeKTFddfpsTXb2Tb1jL+gYW2CIjgEkZRf0
A2I7yz5bJfg6zx0rVpj+Khk7KZdgdW0hzhIsWrr0JAMELLt+Dcfk+FpGOd2D6f/U
FXgRh2JVxskUfUJyNOJdbvCpAgMBAAGjggMbMIIDFzAdBgNVHQ4EFgQUX9TGCuwP
WydtqrnbaRF2ZYnYqiQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZERDFFMi81NEM5MTkyQUMwMjkx
MUVBOTFDMzg3MEFGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2REQxRTIvNTRDOTE5MkFDMDI5MTFFQTkxQzM4NzBBRjhBRUEyMjgvWDlUR0N1
d1BXeWR0cXJuYmFSRjJaWW5ZcWlRLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAk1wwLwYIKwYBBQUHAQcBAf8EIDAeMAwEAgABMAYDBAFm3kIwDgQCAAIwCAMG
ACABQ/gYMA0GCSqGSIb3DQEBCwUAA4IBAQBzCB7OH4FSvmJYnxARVyk8ek3gqVIi
iIkLwKinn+c+dj9t939iHQSoHAbFX0OcDq8wyx+WIkzxPR1XiUimiOPWBhSIZ3LZ
QpYsjkyQNHwcYwvEswQ9VzgESiPXVzf0Rj/T8CISgGi0zD6TBSVhqVpdDcZIjfBm
58caWoxAia9e5L9yS40TWx8Fssf989ArH65UdNocH9XywAxeyHcoiVvWaFIwaMSQ
hbB4GDAuYLURpUng8JFUTKNy/VKIUXZDmJvnI0gP90SlhTKWVrL2nfxkPWwXA/sN
ugRjY1M3Ae0DYcRjBTwA9AbEIjqA16w5MGyMF8OmOjhSiqM3oTAFOTFT
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:54:21 2025 by rpki-client