Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
File: XTIRwmpetGVqxFtni0_0vyQECa4.cer (raw, json)
Hash identifier: HnvU7AYqdVAsAJo/oese4JdRCygq8VSBuVdZb9jXnMo=
Subject key identifier: 5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2D4F
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:35:25 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328270
IP: 102.165.168.0/21
IP: 2c0f:eee0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11599 (0x2d4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:35:25 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3625046AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:72:0b:02:44:e4:fe:b2:b2:fa:9e:88:60:6c:
67:de:0b:46:33:76:be:ce:c4:1a:05:bc:47:5b:2a:
c1:9d:5e:98:04:8c:1f:2f:22:cf:92:d9:33:93:54:
b5:92:3d:75:be:0d:a9:ce:ed:d0:d3:a1:47:9c:13:
ad:aa:ba:93:3f:75:58:de:7e:01:e4:81:56:bf:4b:
b0:dc:3c:23:82:56:86:48:0f:70:67:f2:3b:a9:5c:
f2:b3:23:a9:50:7c:c4:10:86:9d:94:e3:6e:15:97:
f9:fc:8f:4e:13:cd:4d:18:70:d9:07:ad:b6:26:3b:
f7:66:30:b9:cb:92:f4:26:df:cb:6c:2e:fc:ed:cd:
f2:f1:56:0c:4c:a3:b5:91:0b:8f:6b:00:60:18:18:
7f:30:5c:05:86:cb:30:2a:d5:30:86:df:a1:f7:bf:
2f:9b:ab:f2:7a:b1:28:b0:5e:70:4a:ec:ac:bc:a8:
36:da:f1:f7:75:a4:d6:5f:ae:a4:fa:c9:bc:8a:0c:
6c:ee:36:82:d6:6e:7a:68:61:c2:c9:13:c0:64:5a:
b9:b3:dd:21:62:aa:79:da:c8:5a:6b:69:34:b2:1e:
c5:4d:fb:e8:53:69:23:8d:02:08:91:eb:56:60:a6:
5c:04:78:65:69:e3:f1:30:e2:26:02:2d:cd:42:c8:
be:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328270
sbgp-ipAddrBlock: critical
IPv4:
102.165.168.0/21
IPv6:
2c0f:eee0::/32
Signature Algorithm: sha256WithRSAEncryption
27:85:54:b0:6a:68:6c:9f:1e:24:1c:f0:3b:40:14:97:17:b9:
db:46:35:ed:2e:63:3f:3f:6d:c5:44:f9:3d:d9:c5:0e:a6:36:
d0:3e:fd:be:84:d0:e6:59:ae:c4:65:65:55:0e:3c:45:36:b2:
6c:ff:ec:31:f9:3d:95:6f:9c:b5:47:4d:61:8e:34:4f:fe:be:
86:e4:16:ec:73:59:be:1e:44:5b:36:97:6c:d0:e6:75:ec:45:
68:fe:5a:87:b7:ed:2c:3b:5e:e5:41:1b:d7:7a:b7:2d:81:fc:
7e:2c:fa:44:25:12:4d:c6:73:32:d4:da:3d:65:93:10:ff:70:
30:fc:f6:f8:9e:58:d2:66:0f:62:a6:9e:97:99:c5:1c:5b:e5:
c4:4d:23:37:98:dc:b1:6a:fd:4c:39:d8:e6:2a:40:45:56:e8:
52:0a:45:fe:96:67:87:cb:77:ef:16:ef:11:5c:8a:12:b1:8e:
f6:ef:c1:68:0d:81:ab:09:19:f1:29:25:3b:90:8f:a0:78:94:
b9:fb:d1:af:97:c8:8b:7f:4f:06:18:b3:5d:02:04:48:2c:83:
7d:d9:aa:7e:a5:5b:41:2a:cc:2b:84:bd:e3:91:bd:a0:bb:2e:
a7:7b:ed:4c:65:dd:a3:c0:97:ac:01:b8:0c:53:c9:6a:bf:fa:
74:6a:a7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:52:17 2025 by rpki-client