Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ZQaOT8TTJ_ez8uFZqtkSYYIldUc.cer
File: ZQaOT8TTJ_ez8uFZqtkSYYIldUc.cer (raw, json)
Hash identifier: 4dGYlXtWKsD0Sh+JUPh8VbKJvhQksKR6ieIRlaOW1w8=
Subject key identifier: 65:06:8E:4F:C4:D3:27:F7:B3:F2:E1:59:AA:D9:12:61:82:25:75:47
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3478
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F366E8F3/B743560E032E11F0BCF79465762E951A/ZQaOT8TTJ_ez8uFZqtkSYYIldUc.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F366E8F3/B743560E032E11F0BCF79465762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 17 Mar 2025 12:52:48 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329522
IP: 41.74.144.0/20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13432 (0x3478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Mar 17 12:52:48 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F366E8F3AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dc:d6:74:65:f9:e3:14:3e:2b:23:5c:d5:42:
0b:a0:73:b7:73:c8:f7:f9:04:ad:dd:45:2e:7e:1c:
55:a9:7e:3f:ab:3b:a7:d8:4c:0f:f8:c2:3e:14:24:
21:29:06:46:ad:46:08:29:28:19:63:14:b3:5e:c2:
1a:a9:b2:da:29:01:8c:35:b7:08:8c:15:08:b7:71:
c1:c9:80:4f:f2:54:44:37:58:7b:76:4f:25:ee:cf:
31:5d:7f:4c:72:9d:2d:f6:45:66:6e:bf:34:74:74:
00:b9:e3:4a:41:3b:52:9f:b5:40:fe:f9:20:ab:87:
ee:f0:7f:9a:c4:de:e6:41:8c:48:ed:b8:8a:7d:a5:
0d:c8:60:a9:1d:b4:24:b6:03:89:1a:af:81:a2:56:
da:97:1b:24:e5:40:1b:19:aa:c6:17:b9:78:57:d1:
3c:8a:a9:99:ac:1d:ee:46:25:62:36:70:09:1b:a5:
1b:1d:cb:a0:a3:26:04:d9:e3:52:df:8b:fc:23:1c:
5c:de:07:66:0f:c3:20:d2:8d:41:1c:f0:53:d0:4a:
bb:1c:97:5a:e8:b6:f5:33:a0:53:1b:ca:7e:55:53:
d1:66:39:7c:85:d0:be:38:c3:04:46:51:bd:af:f5:
65:d0:d2:12:c7:0b:7c:12:d1:db:ee:31:2f:e1:f4:
5e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:06:8E:4F:C4:D3:27:F7:B3:F2:E1:59:AA:D9:12:61:82:25:75:47
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E8F3/B743560E032E11F0BCF79465762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E8F3/B743560E032E11F0BCF79465762E951A/ZQaOT8TTJ_ez8uFZqtkSYYIldUc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329522
sbgp-ipAddrBlock: critical
IPv4:
41.74.144.0/20
Signature Algorithm: sha256WithRSAEncryption
6a:18:7a:0f:af:46:9e:01:59:70:ce:7c:49:90:62:a3:ac:bb:
c6:d7:5b:0d:76:32:97:95:2a:f0:a4:5b:ad:3e:2c:4b:53:7d:
b6:a8:c7:04:b1:82:fc:9b:68:09:a5:89:87:98:e4:63:9f:74:
9b:23:65:e6:da:b8:3e:74:af:d2:25:97:4b:e9:05:f7:b8:a7:
9a:a2:4f:a9:e6:80:a5:d8:43:4c:ea:b8:d4:29:c6:7a:58:9b:
9a:27:aa:73:79:9c:12:ef:d3:92:58:7b:12:81:f0:33:19:6c:
2e:d0:5e:2e:52:82:bb:81:51:cb:c2:bc:ba:28:96:d1:88:ac:
d9:ff:3e:19:b4:91:b2:3a:2e:88:33:24:6f:6c:d3:30:e2:70:
19:78:de:d7:cd:39:3a:a3:bc:22:53:c8:8e:80:c2:dd:e6:f1:
12:53:4c:11:4a:6d:c5:e7:23:ff:e3:f6:ae:4e:9d:01:77:4e:
cc:05:8a:1a:4e:b5:23:67:7f:5f:41:24:b3:d1:b1:1a:c4:cd:
29:85:35:97:53:6d:d9:34:a2:78:ef:d1:f7:25:d1:e8:4e:fc:
02:d6:e0:d9:71:68:1d:a1:a9:c9:20:75:85:14:68:c5:e6:d4:
64:ff:61:5b:63:5f:23:82:46:1f:50:d2:6d:f5:48:49:3c:f4:
80:08:41:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 18:27:42 2025 by rpki-client