Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
File: _ESm2CkBQzmKHfvvhvwdrjRBoro.cer (raw, json)
Hash identifier: K8OkUWBdpM19zOND7pLnezUQI7DGdQPWQNOnUfEAso4=
Subject key identifier: FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2DDA
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:05:33 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329391
IP: 102.210.8.0/22
IP: 2c0f:2b40::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11738 (0x2dda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:05:33 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3636ECFAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:67:68:9f:5a:42:d7:ad:4f:36:3b:a7:23:92:
c5:af:48:52:27:2b:98:ac:c0:dd:e5:a5:fc:fe:f5:
3e:7f:58:22:e7:9a:e5:a0:ea:77:7a:fc:ff:e8:14:
be:1a:bb:23:24:28:06:c9:a3:e3:63:87:13:54:10:
a7:b5:c1:25:59:7a:94:35:58:09:12:c4:2d:76:fd:
5e:f4:aa:09:29:e8:5a:5e:bf:6b:41:3a:c3:93:8a:
5a:c7:47:0a:59:60:70:92:2b:e7:17:4d:2d:b3:cc:
c3:64:82:5f:74:65:b3:13:89:7b:eb:87:2b:35:dc:
78:a9:8e:69:9b:f8:b0:b7:c1:6e:18:c6:5a:8d:97:
21:f4:a0:35:50:86:95:32:37:1c:42:cc:7e:33:8d:
73:fe:d1:90:3d:4b:7d:7e:23:61:3d:4f:a1:54:d2:
ca:fc:04:61:ad:cf:b0:07:9a:a1:89:eb:11:7d:46:
76:28:24:14:5f:e9:32:cc:0a:79:68:62:41:25:a1:
6e:a4:59:43:35:0c:7c:5c:03:7a:9e:6f:26:22:a6:
ca:da:b7:12:07:35:64:04:8e:53:95:a3:4e:85:e4:
ea:da:53:0c:cf:83:8c:07:ef:fb:1f:d3:d3:3e:59:
3c:75:00:79:62:d2:a2:41:c8:e7:8e:b0:9f:de:8c:
20:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329391
sbgp-ipAddrBlock: critical
IPv4:
102.210.8.0/22
IPv6:
2c0f:2b40::/32
Signature Algorithm: sha256WithRSAEncryption
7b:8a:87:61:01:6b:07:1e:47:26:29:3e:80:a8:10:74:1b:68:
47:6d:47:d3:3e:da:fb:a7:7e:20:1b:9a:24:4c:d1:25:b0:f6:
2d:b1:b8:1d:af:71:51:56:3d:91:77:2e:f6:8e:31:4a:df:19:
b3:0e:48:dd:65:84:9c:f0:82:2c:0d:59:eb:fb:1b:e1:5e:6f:
fd:7b:a8:5d:be:a5:1f:4b:f7:95:1d:6d:59:53:6d:4f:1d:f0:
57:be:98:dc:7f:23:1b:96:c0:47:f8:86:f6:f7:92:2c:1f:81:
9a:24:3b:6b:6b:37:df:43:e9:41:97:7a:84:d5:a8:de:9a:20:
37:fe:58:8d:bc:f7:a5:be:38:ec:db:96:e4:d7:71:1f:3a:0a:
13:d7:b8:df:0e:e4:7d:e9:e4:6d:73:03:5e:12:2f:81:81:6c:
43:14:50:84:98:c5:67:bc:44:bc:3b:2c:5b:40:1f:1b:68:c4:
d0:10:3d:f8:6b:36:f4:a6:ef:42:b0:9c:21:41:a0:57:f2:e0:
92:34:e5:74:af:5f:bc:92:83:a2:12:50:30:ae:23:17:d0:dc:
71:3a:de:f6:3b:bd:79:c4:a6:63:07:bc:11:aa:fb:07:6b:1c:
fa:d0:45:d6:32:fe:f1:bc:b5:77:16:e0:4a:d9:d7:75:5a:65:
d8:38:3f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:42:56 2025 by rpki-client