Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/_06CSYXcD-nm1S0VaP27Fw73EEs.cer
File: _06CSYXcD-nm1S0VaP27Fw73EEs.cer (raw, json)
Hash identifier: tf0ReCUmmdoCbENMfUyrItNSNQE7LsMHN8iKPEYb9Eo=
Subject key identifier: FF:4E:82:49:85:DC:0F:E9:E6:D5:2D:15:68:FD:BB:17:0E:F7:10:4B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 336D
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 06:05:12 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 102.223.110.0/24
IP: 2c0f:e8a0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13165 (0x336d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 06:05:12 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36EF78EAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:43:0f:bc:95:92:17:15:c0:83:cd:ea:2f:
ea:12:d0:d1:e2:46:55:82:83:43:15:c7:64:eb:cf:
3c:3f:dc:d2:37:c9:ba:24:8d:6b:d5:06:51:f5:65:
61:d4:4a:f7:6c:d0:4d:e4:c6:a9:f5:10:e7:be:92:
e8:41:a0:e1:b3:00:e5:9b:47:2f:50:a9:5a:66:1d:
f5:69:72:f8:75:f7:40:dc:0c:f8:fc:a3:79:4b:fc:
c2:16:25:65:7d:94:2c:2e:3b:86:3c:da:b5:bb:62:
45:84:52:ab:44:bb:4a:71:f4:d1:88:ec:77:58:95:
70:83:36:78:da:0e:48:45:32:7c:bb:9b:eb:4d:dc:
0b:b9:7c:3a:fd:67:58:07:da:71:3d:75:c3:3c:3f:
5c:1b:13:6e:c6:07:74:d9:d0:ca:f5:12:2c:32:81:
8a:3e:22:52:58:db:e0:50:5f:14:8f:08:0c:6c:62:
0f:3d:98:c3:32:95:d5:aa:09:a5:bd:1e:04:6d:c3:
87:7b:40:64:35:0e:23:7f:61:f9:db:21:48:e8:82:
59:dd:1c:11:74:84:a0:bf:2c:90:86:fb:d7:39:6a:
41:30:17:06:65:68:4f:1b:79:6c:0b:a7:bf:65:8e:
19:4d:80:09:fd:a7:b2:9e:b0:59:ce:ab:85:2d:ef:
0d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4E:82:49:85:DC:0F:E9:E6:D5:2D:15:68:FD:BB:17:0E:F7:10:4B
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.mft
sbgp-ipAddrBlock: critical
IPv4:
102.223.110.0/24
IPv6:
2c0f:e8a0::/32
Signature Algorithm: sha256WithRSAEncryption
b1:6d:31:bb:b6:d6:78:84:b2:c7:56:24:27:18:88:68:de:ef:
95:b1:fd:6e:26:42:60:3c:3a:32:f7:fd:07:4c:96:39:2d:7a:
14:b2:cc:24:fb:87:41:2d:d4:c4:02:e7:2f:13:4a:c0:db:13:
19:a3:b7:45:5f:c5:cc:7e:09:c9:bb:f1:e8:46:7e:17:e7:ad:
38:5b:5c:ce:1a:57:d5:2b:6b:e5:a9:12:15:03:ca:31:bb:18:
ba:48:2f:26:77:4b:30:c1:a8:c5:3b:75:00:c9:12:a0:d6:7f:
a1:96:6b:51:ae:16:53:74:b9:83:1f:08:9c:41:04:6f:50:e3:
30:2b:b8:7c:66:33:77:05:62:0d:22:52:dd:e8:13:3b:e0:a8:
ed:10:e4:cf:22:a8:c6:90:25:ee:07:a4:57:c7:fe:4d:15:d2:
b1:0c:f4:2c:30:a0:b4:1d:c6:fa:07:ac:13:ca:03:8f:0f:c3:
44:2d:25:92:a6:a0:30:6a:c4:b3:0a:b4:53:08:12:fc:9f:75:
32:de:f1:75:fd:f3:82:13:09:4b:83:f6:d7:c7:2b:5e:e4:04:
7c:29:e7:88:3d:66:9a:20:cb:a5:c3:61:a2:18:fa:91:c0:bd:
6d:b4:1c:17:5c:59:c1:f2:b5:2c:bc:03:1b:65:d5:f5:a4:af:
6d:63:c7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:41:44 2025 by rpki-client