Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/XugMfoiMcbMQJBh4C9bhClLRcIg.cer
File: XugMfoiMcbMQJBh4C9bhClLRcIg.cer (raw, json)
Hash identifier: 2/DWp6T/N4EwyvPSmh1umZISkDRleHF2e6KYtBIdU4o=
Subject key identifier: 5E:E8:0C:7E:88:8C:71:B3:10:24:18:78:0B:D6:E1:0A:52:D1:70:88
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 34FF
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/XugMfoiMcbMQJBh4C9bhClLRcIg.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Fri 16 May 2025 00:01:12 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328974
IP: 102.206.84.0/22
IP: 102.217.228.0/22
IP: 2c0f:5f00::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13567 (0x34ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: May 16 00:01:12 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36364C2AF, serialNumber=5EE80C7E888C71B3102418780BD6E10A52D17088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:36:0c:c5:1d:c2:d4:0d:3c:4d:24:47:f2:be:
a8:12:97:6d:f5:67:f9:9e:15:53:86:66:85:9e:5d:
5a:e2:98:bb:61:b3:35:2a:91:2a:38:82:d1:cb:0f:
a3:af:2f:c0:28:29:75:9d:ea:09:15:46:ce:be:72:
cf:81:b2:29:30:08:4d:6d:3d:cd:c0:05:46:eb:ed:
da:36:bd:ad:1e:71:ce:00:87:ec:cf:58:59:bc:14:
39:db:ea:c2:c5:fe:04:73:08:26:68:2d:56:ff:37:
82:bc:69:08:ef:63:d8:ff:eb:4b:bd:43:bf:6c:47:
1e:96:f0:0f:09:3c:91:3d:46:ae:da:70:14:37:9a:
5d:cd:aa:93:07:8c:28:98:ed:32:52:66:85:2b:2a:
14:31:f1:a0:bf:c4:9d:38:49:7e:12:98:b6:fc:96:
50:51:e7:03:22:f4:c5:8a:82:59:48:ba:e6:de:ba:
0e:07:e9:7e:2c:72:64:9a:27:a9:d2:e1:1e:15:13:
01:2b:06:8f:80:b8:9f:7d:3d:cb:06:a4:8f:30:f2:
1c:2f:50:eb:40:b1:8c:e1:b6:57:4f:a7:ab:f1:b8:
16:fa:f6:cd:f3:6f:84:b3:4a:8e:d0:9c:12:4e:62:
0f:f9:33:7b:e2:c0:3f:45:aa:37:60:d6:ed:a5:b0:
11:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E8:0C:7E:88:8C:71:B3:10:24:18:78:0B:D6:E1:0A:52:D1:70:88
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/XugMfoiMcbMQJBh4C9bhClLRcIg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328974
sbgp-ipAddrBlock: critical
IPv4:
102.206.84.0/22
102.217.228.0/22
IPv6:
2c0f:5f00::/32
Signature Algorithm: sha256WithRSAEncryption
34:8f:85:c1:d9:21:5f:b9:ae:4b:88:d9:a9:f4:0a:d2:a0:58:
fe:65:d4:8e:d9:17:aa:41:f8:38:3e:3e:b6:af:ea:ed:9d:f9:
7c:35:d3:b8:82:37:4e:65:b3:26:1a:31:0b:48:81:be:cc:8c:
b4:a5:f7:47:c1:9c:47:01:14:a5:00:e6:2e:97:aa:80:e8:be:
91:d8:1a:65:74:a0:d6:63:24:fe:2c:12:4f:06:fe:85:35:7e:
8b:8c:56:03:ed:66:a8:0b:07:47:18:96:24:0f:36:f6:11:5b:
e2:a4:5d:00:bf:3e:16:6c:4a:c4:f9:43:b0:72:74:a7:eb:d8:
d1:0d:c7:bf:44:3f:67:d1:35:fa:31:ce:92:62:71:bf:e6:b9:
68:79:c3:fc:d7:b6:8b:b5:3f:1b:3a:15:b9:e4:4a:88:fe:f6:
e3:b5:d4:4d:c7:d1:39:37:5f:8d:4a:73:c0:a8:8d:16:8d:be:
2b:9b:4b:de:f2:51:d8:0b:9d:37:15:fa:7d:5e:19:30:e9:b5:
d1:51:58:a6:a0:08:f1:93:98:79:0b:21:e3:d2:c9:24:11:5c:
9c:ea:02:4d:bb:da:20:a8:51:5d:24:e4:a2:1d:a3:1d:4f:81:
f8:f3:fa:75:d6:49:f6:2c:f9:ef:c7:0a:31:8a:b4:80:f7:c2:
ae:d0:02:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 4 11:08:43 2025 by rpki-client