Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
File: aaGydU0sb2tHJmd6cgRQI2vS7NE.cer (raw, json)
Hash identifier: UGmbI2NWzAZafOMZ2A/mJSE4FAcYHiOk8oDUqVjbB0Y=
Subject key identifier: 69:A1:B2:75:4D:2C:6F:6B:47:26:67:7A:72:04:50:23:6B:D2:EC:D1
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 357F
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Fri 04 Jul 2025 11:54:07 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328666
IP: 102.223.6.0/24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 01 Aug 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13695 (0x357f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jul 4 11:54:07 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3641DDCAF, serialNumber=69A1B2754D2C6F6B4726677A720450236BD2ECD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fb:0d:50:8b:af:1b:e4:13:38:6a:00:e8:f3:
9c:0c:ca:f6:7a:cd:5d:2f:72:cf:8a:55:aa:37:82:
70:fc:ab:e4:9e:be:d4:f8:cd:fa:5f:86:db:13:32:
c9:5d:06:ff:3a:24:d9:d0:06:92:c6:d4:0e:f1:b9:
ba:29:b5:d6:6e:2b:ad:7c:62:4d:0f:54:e1:eb:e7:
ad:bd:af:97:ea:30:88:66:48:6b:b2:a1:bc:6c:b0:
22:2b:35:71:b8:26:23:a6:7c:66:d3:15:41:ae:f7:
77:78:ac:63:1e:8b:fd:93:9a:27:27:a0:a6:25:2d:
1d:59:ca:3e:3d:03:43:b1:14:12:f4:96:46:bb:3e:
33:8f:48:6d:03:7e:71:b5:c2:10:f5:83:fe:fc:9b:
32:18:4f:ce:4b:a3:f4:1b:1e:3b:38:a6:a7:3a:41:
16:57:88:c3:0e:43:ae:5e:de:49:ed:58:b8:35:2a:
04:03:59:94:b3:9f:0a:72:9d:a2:fd:28:d6:ab:28:
6e:e3:14:44:87:b8:f5:24:7b:92:79:69:90:98:27:
96:ce:3e:32:64:cb:3e:04:31:91:2f:38:bd:13:1a:
4d:33:d1:7d:bb:16:cf:b4:53:5d:7c:c0:5a:ca:06:
89:de:b1:ba:29:b7:7b:a2:3d:10:08:9d:93:eb:ec:
03:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A1:B2:75:4D:2C:6F:6B:47:26:67:7A:72:04:50:23:6B:D2:EC:D1
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328666
sbgp-ipAddrBlock: critical
IPv4:
102.223.6.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ec:82:94:6a:ac:7d:2f:91:2e:cf:28:94:7c:c3:88:54:0a:
34:09:07:a1:79:e2:46:09:82:99:77:1d:d0:b6:92:ac:68:fb:
be:66:b3:44:a9:32:73:f7:a4:ed:c4:13:e2:04:c0:93:94:59:
2d:95:4d:5b:02:d3:5c:6a:7d:07:93:f8:6d:7b:1f:15:e6:48:
12:87:c5:36:16:c8:19:c0:86:e1:8e:44:38:25:e7:d0:2c:a4:
af:7e:f5:01:a1:9d:3b:a5:25:0e:82:2d:fc:8d:e4:aa:a5:a7:
87:2e:51:66:cd:b1:13:67:93:38:77:21:5f:ce:69:d7:3e:14:
90:c9:88:36:ee:60:72:77:41:cf:23:3b:f6:6f:79:8a:5f:88:
a3:21:f5:9b:c9:3e:c8:88:13:90:28:f3:84:dd:0b:9e:26:9b:
dd:1d:ba:78:48:b0:d9:65:1a:8c:ef:e4:e9:2c:52:aa:b2:1c:
07:e0:0d:40:43:35:26:9f:db:26:35:75:49:9a:a1:71:6a:80:
35:6d:39:1d:df:03:d0:b0:37:87:07:50:6f:75:66:35:ba:92:
d5:86:88:fe:f0:18:f1:d8:2b:80:68:bf:c8:d8:f5:99:74:c8:
86:62:19:a6:98:5a:78:dd:93:ca:74:2d:86:de:a1:cd:67:77:
35:a1:64:a6
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICNX8wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTA3MDQxMTU0MDdaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjQxRERDQUYxMTAvBgNVBAUTKDY5QTFCMjc1NEQyQzZGNkI0NzI2Njc3
QTcyMDQ1MDIzNkJEMkVDRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDX+w1Qi68b5BM4agDo85wMyvZ6zV0vcs+KVao3gnD8q+SevtT4zfpfhtsTMsld
Bv86JNnQBpLG1A7xuboptdZuK618Yk0PVOHr5629r5fqMIhmSGuyobxssCIrNXG4
JiOmfGbTFUGu93d4rGMei/2TmicnoKYlLR1Zyj49A0OxFBL0lka7PjOPSG0DfnG1
whD1g/78mzIYT85Lo/QbHjs4pqc6QRZXiMMOQ65e3kntWLg1KgQDWZSznwpynaL9
KNarKG7jFESHuPUke5J5aZCYJ5bOPjJkyz4EMZEvOL0TGk0z0X27Fs+0U118wFrK
Bonesbopt3uiPRAInZPr7APHAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUaaGydU0s
b2tHJmd6cgRQI2vS7NEwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0MUREQy85MUJFOTkyNjU4Q0Qx
MUYwODZCRjdDRUFEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDFEREMvOTFCRTk5MjY1OENEMTFGMDg2QkY3Q0VBREFFNEVDOUMvYWFHeWRV
MHNiMnRISm1kNmNnUlFJMnZTN05FLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFA9owHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm3wYwDQYJKoZIhvcN
AQELBQADggEBAEnsgpRqrH0vkS7PKJR8w4hUCjQJB6F54kYJgpl3HdC2kqxo+75m
s0SpMnP3pO3EE+IEwJOUWS2VTVsC01xqfQeT+G17HxXmSBKHxTYWyBnAhuGORDgl
59AspK9+9QGhnTulJQ6CLfyN5Kqlp4cuUWbNsRNnkzh3IV/Oadc+FJDJiDbuYHJ3
Qc8jO/ZveYpfiKMh9ZvJPsiIE5Ao84TdC54mm90dunhIsNllGozv5OksUqqyHAfg
DUBDNSaf2yY1dUmaoXFqgDVtOR3fA9CwN4cHUG91ZjW6ktWGiP7wGPHYK4Bov8jY
9Zl0yIZiGaaYWnjdk8p0LYbeoc1ndzWhZKY=
-----END CERTIFICATE-----
Generated at Wed Jul 30 15:33:33 2025 by rpki-client