Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/_fBwBNUH4xafjwTMLtjgu_Sq38Y.cer
File: _fBwBNUH4xafjwTMLtjgu_Sq38Y.cer (raw, json)
Hash identifier: DKKYIHAClqX0vFG2SO+wGlLY9yGK0rrPmipEJZSQKgQ=
Subject key identifier: FD:F0:70:04:D5:07:E3:16:9F:8F:04:CC:2E:D8:E0:BB:F4:AA:DF:C6
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3431
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Fri 07 Feb 2025 11:48:39 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329314
IP: 102.211.100.0/22
IP: 2c0f:1740::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13361 (0x3431)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Feb 7 11:48:39 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36B1BD7AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:cf:49:5f:cd:23:ef:57:d3:ed:c1:89:b4:
13:5e:15:cb:ad:aa:8a:97:18:e2:c8:b9:f6:25:22:
49:f1:88:6b:95:84:25:01:57:60:66:ac:ab:af:b8:
c3:fc:03:88:88:9a:6a:22:39:53:3a:82:13:54:13:
11:7e:6a:cd:3e:43:a6:6d:aa:cb:e8:dc:e6:65:97:
ac:db:b0:ae:0b:67:52:74:af:3f:2b:65:2a:44:0c:
31:8b:1f:78:88:1d:3f:43:a6:8d:dc:dd:1f:92:68:
3f:91:62:61:49:af:bc:7d:33:a2:f2:3b:98:23:ca:
71:63:95:89:e8:42:0c:f7:81:0e:06:27:53:c1:03:
bd:18:e7:d2:b7:03:5b:4f:e2:bc:20:6a:45:f9:ce:
f1:ff:66:66:f7:b3:57:cd:29:4c:c5:e0:75:ec:29:
c3:01:fa:2a:ee:ea:9c:fe:89:88:7d:94:32:93:21:
3c:83:fd:ad:70:17:7a:3b:82:c2:e7:b1:32:da:63:
8a:e2:70:38:03:a8:1d:3e:71:9f:00:29:43:f1:06:
3e:be:c8:73:ca:be:89:30:d8:b5:4f:7e:d0:e5:8b:
59:40:3b:3d:3a:bb:11:7b:c2:b6:42:ef:f4:25:d1:
36:f1:e0:9d:9a:9f:a1:31:e7:56:ae:66:05:82:57:
9a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F0:70:04:D5:07:E3:16:9F:8F:04:CC:2E:D8:E0:BB:F4:AA:DF:C6
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329314
sbgp-ipAddrBlock: critical
IPv4:
102.211.100.0/22
IPv6:
2c0f:1740::/32
Signature Algorithm: sha256WithRSAEncryption
66:6e:96:8d:40:b3:6b:03:12:c8:72:13:7f:46:79:81:6e:de:
f9:58:8b:bd:24:70:df:91:58:a4:11:a1:71:75:65:b0:81:b3:
b1:04:89:c3:09:c3:3f:0f:5d:dc:97:08:a9:d0:dc:92:60:c9:
91:38:5c:26:85:71:76:70:41:d9:55:fa:8d:25:18:80:38:8f:
f4:74:02:59:2e:8f:91:44:7a:e7:c7:5f:d7:05:4e:4d:ef:b6:
65:74:ff:c2:94:75:51:d2:29:ca:e7:8b:59:25:08:81:80:41:
00:15:38:7f:5a:78:23:e4:dd:e2:2d:8b:fc:91:a3:2d:23:7d:
d9:44:62:34:81:53:d6:a7:b3:38:7b:40:19:f0:04:83:f0:a7:
37:33:c6:ad:4e:62:87:6c:1a:c1:06:d0:f9:52:f0:e0:11:77:
12:82:40:87:67:b4:fd:bf:01:19:50:2e:76:9c:e0:89:a2:1a:
5e:32:e4:37:cb:f4:ae:2c:ac:f7:85:8e:ad:12:1a:94:58:7d:
05:6d:de:22:ca:33:fd:8d:4c:a1:a3:ea:1f:32:e7:4e:ff:71:
c0:08:dd:bb:21:ad:a8:f7:16:30:ca:ad:a2:f4:8b:bd:bc:7b:
c8:10:62:bf:72:17:42:a7:f5:76:6f:66:6b:1a:54:95:8b:f7:
6e:e0:4a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:31:52 2025 by rpki-client