Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/YZqjZCy0bzvSy4kctn_92t5nNq4.cer
File: YZqjZCy0bzvSy4kctn_92t5nNq4.cer (raw, json)
Hash identifier: aEu3ftnQiEEYXS/hj16Nzy7qggbR/th6ZgTstDxW0gI=
Subject key identifier: 61:9A:A3:64:2C:B4:6F:3B:D2:CB:89:1C:B6:7F:FD:DA:DE:67:36:AE
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 32CF
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36CC7DD/A9306F4CC72211ED8F0703EEF1222468/YZqjZCy0bzvSy4kctn_92t5nNq4.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36CC7DD/A9306F4CC72211ED8F0703EEF1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:28:51 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328547
IP: 102.23.208.0/21
IP: 2c0f:ea90::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13007 (0x32cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 05:28:51 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36CC7DDAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:55:b3:6f:84:66:14:00:5c:55:82:60:08:
1e:2c:c3:0d:6d:5e:66:ab:db:97:af:2c:41:ae:39:
ec:84:d8:16:13:5d:5a:d2:4f:9f:85:9c:5c:38:66:
3f:89:2a:48:a9:6a:af:d2:30:4e:17:5d:88:90:89:
02:64:56:12:43:ab:8a:80:78:f1:c4:6b:6c:62:5c:
32:7d:f7:8c:25:d8:0c:17:62:2b:e5:82:c2:7c:06:
3c:1b:0f:df:de:1b:17:43:2f:d1:a7:f1:69:de:42:
79:b6:af:9a:eb:3f:1a:5f:e5:7a:33:23:bc:18:c3:
b4:ad:c7:ff:5a:41:c5:88:00:5c:40:6a:c4:32:7f:
4f:b7:12:2d:3c:0c:93:8b:14:0b:fe:e9:54:d1:13:
aa:ce:9c:48:cf:cc:71:fa:9a:8b:bc:58:e7:2b:7c:
d2:2d:43:24:80:32:10:44:ba:a0:bd:5e:21:fd:e8:
40:43:71:46:1a:7a:b8:c3:a1:2e:31:0d:ee:3c:a9:
ae:3e:e9:78:bb:b5:9f:77:85:58:9f:fd:0a:6b:2c:
53:7a:9e:7b:cc:3c:c3:05:70:67:cb:35:a0:f6:68:
0a:5b:9c:e1:f4:ab:a0:02:57:f8:3e:45:9a:0a:ab:
bf:0f:73:bb:1e:c0:26:df:c2:4a:c5:47:4e:00:73:
e6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9A:A3:64:2C:B4:6F:3B:D2:CB:89:1C:B6:7F:FD:DA:DE:67:36:AE
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC7DD/A9306F4CC72211ED8F0703EEF1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC7DD/A9306F4CC72211ED8F0703EEF1222468/YZqjZCy0bzvSy4kctn_92t5nNq4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328547
sbgp-ipAddrBlock: critical
IPv4:
102.23.208.0/21
IPv6:
2c0f:ea90::/32
Signature Algorithm: sha256WithRSAEncryption
0b:f4:66:e7:2e:9a:06:57:a1:cd:ea:08:66:a5:cf:a8:88:cf:
df:d2:8d:bc:d9:66:ae:b8:7d:28:cf:58:18:92:92:01:d5:37:
97:ab:02:ad:e6:c9:11:2f:66:b5:c5:6a:94:70:14:97:ea:e0:
94:5a:68:73:4d:25:99:cf:0c:dc:98:e6:f4:04:5e:63:ee:a6:
33:a3:53:7f:75:7a:ae:9c:f9:37:ec:92:fc:a8:0f:7f:50:6e:
a2:84:c2:f3:96:24:0d:bc:0b:7d:36:ef:97:a8:d8:e3:84:07:
b7:71:b8:38:f0:98:47:b5:bb:7f:33:bc:92:22:6f:b5:0e:8f:
f2:93:af:33:11:7e:8c:17:15:46:e9:9b:85:89:ab:2c:d1:96:
38:9a:4c:8e:eb:84:9c:6e:09:64:d4:e2:41:69:97:87:26:ad:
f6:1b:d9:f8:4d:53:1a:0a:bd:b3:ae:50:e3:78:70:ef:5c:f9:
23:4f:7e:4f:f8:f4:ee:e6:56:d1:bc:da:b7:4b:c2:17:39:3d:
d0:bf:9f:08:6a:56:dc:21:b7:e4:61:79:1e:46:5c:c4:57:49:
cb:b5:c2:7c:e4:1b:bf:7c:f7:63:7a:2f:7e:b5:f4:9e:d0:ef:
fb:15:2f:2e:6a:58:fb:e0:b2:a6:3e:c7:f3:ee:73:f7:be:e2:
25:d0:68:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:37:35 2025 by rpki-client