Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/avc50Bd3BoQ35SESTux6ZtiYCW8.cer
File: avc50Bd3BoQ35SESTux6ZtiYCW8.cer (raw, json)
Hash identifier: 04A98NDt1f0dDMjKhakHCacdbWddCbPpWu/62LKCFzY=
Subject key identifier: 6A:F7:39:D0:17:77:06:84:37:E5:21:12:4E:EC:7A:66:D8:98:09:6F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3244
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/avc50Bd3BoQ35SESTux6ZtiYCW8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:58:59 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329327
IP: 102.211.105.0/24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12868 (0x3244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:58:59 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36BA57FAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:07:fd:81:b0:9f:04:3f:f9:53:03:5a:90:e0:
47:26:6a:30:1c:cb:99:35:67:e4:a0:7f:f6:c2:93:
8a:58:58:09:36:be:30:32:99:49:db:e1:1c:f0:bf:
10:1a:12:4b:11:57:17:42:c8:ec:fd:5d:78:63:f6:
96:e2:54:d8:86:65:01:c9:4a:42:6f:e3:20:0b:73:
2b:c4:b1:ff:e3:6d:00:eb:a1:70:d6:af:cc:5e:30:
62:c3:3e:34:b7:72:89:78:ff:07:ad:03:de:0c:13:
b7:7d:8b:59:58:c1:25:4f:bb:b1:bd:e5:cf:dc:2b:
cc:45:bd:4d:bb:97:ff:69:96:e6:c4:67:c5:7e:a4:
56:91:82:9e:74:48:39:0f:69:e4:27:4b:90:2d:ae:
f7:78:1d:a5:1e:66:e9:b9:86:0f:8d:4f:df:4b:78:
bc:69:c1:30:7c:9e:c9:bf:82:e4:f2:10:2d:d9:9f:
20:4c:10:a0:36:88:c7:a2:70:77:91:a8:37:2a:27:
03:a6:44:42:21:28:0a:88:72:3e:b6:3d:f8:da:5c:
2e:6a:e2:59:c9:f6:3c:06:d6:83:db:7f:e4:82:7f:
59:d2:35:6c:9b:ae:f6:bf:98:5a:30:0b:95:3a:b2:
47:fa:74:88:f4:d5:27:fb:d3:51:c2:31:72:69:07:
8c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F7:39:D0:17:77:06:84:37:E5:21:12:4E:EC:7A:66:D8:98:09:6F
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/avc50Bd3BoQ35SESTux6ZtiYCW8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329327
sbgp-ipAddrBlock: critical
IPv4:
102.211.105.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:4c:9c:da:43:e7:89:21:73:5d:2a:75:3b:70:6f:a9:40:5a:
ca:45:b2:fe:35:f5:ad:d1:d1:01:9c:30:5e:f7:0b:b9:78:3e:
2d:47:15:f7:dc:ac:82:38:d7:47:56:2d:cf:b4:dc:86:27:d6:
e7:52:59:4b:56:da:24:8b:c1:cd:f0:40:f8:0c:4f:d8:78:78:
b4:e0:aa:08:21:b6:92:59:46:21:fc:60:e6:99:a2:a4:96:a5:
24:fa:4a:b0:da:2f:de:c0:04:84:a6:8d:d3:f8:9f:e3:ba:2b:
d0:cc:cc:bf:b9:c8:7b:c2:f8:34:e9:05:25:08:e1:04:c8:a8:
16:58:cb:51:ea:0f:24:f3:d0:dc:30:e8:b3:b9:01:33:2b:78:
af:ba:26:71:c7:10:d7:b0:fd:10:f8:01:b3:67:78:b2:95:f2:
de:c6:a5:06:6c:63:ff:df:06:5c:a4:a2:81:16:1f:59:2b:15:
71:6a:04:62:71:c9:0b:2b:76:c4:6b:d7:90:9b:17:5a:c2:4d:
e7:c9:4d:57:7b:39:0d:74:5b:45:51:c7:8d:7c:3c:28:45:66:
74:18:44:f5:09:6c:8e:ab:14:91:f2:10:9b:15:49:81:46:c1:
df:fc:12:a5:76:17:c2:9a:49:e7:ec:2c:df:21:04:10:12:ad:
2e:6c:c3:be
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICMkQwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwNDU4NTlaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkJBNTdGQUYxMTAvBgNVBAUTKDZBRjczOUQwMTc3NzA2ODQzN0U1MjEx
MjRFRUM3QTY2RDg5ODA5NkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDcB/2BsJ8EP/lTA1qQ4EcmajAcy5k1Z+Sgf/bCk4pYWAk2vjAymUnb4RzwvxAa
EksRVxdCyOz9XXhj9pbiVNiGZQHJSkJv4yALcyvEsf/jbQDroXDWr8xeMGLDPjS3
col4/wetA94ME7d9i1lYwSVPu7G95c/cK8xFvU27l/9plubEZ8V+pFaRgp50SDkP
aeQnS5Atrvd4HaUeZum5hg+NT99LeLxpwTB8nsm/guTyEC3ZnyBMEKA2iMeicHeR
qDcqJwOmREIhKAqIcj62PfjaXC5q4lnJ9jwG1oPbf+SCf1nSNWybrva/mFowC5U6
skf6dIj01Sf701HCMXJpB4wBAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUavc50Bd3
BoQ35SESTux6ZtiYCW8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZCQTU3Ri8yRDhGQzNDNDg1N0Ix
MUVGQjY0NDY3QkI3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QkE1N0YvMkQ4RkMzQzQ4NTdCMTFFRkI2NDQ2N0JCNzYyRTk1MUEvYXZjNTBC
ZDNCb1EzNVNFU1R1eDZadGlZQ1c4Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBm8wHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm02kwDQYJKoZIhvcN
AQELBQADggEBAMFMnNpD54khc10qdTtwb6lAWspFsv419a3R0QGcMF73C7l4Pi1H
FffcrII410dWLc+03IYn1udSWUtW2iSLwc3wQPgMT9h4eLTgqgghtpJZRiH8YOaZ
oqSWpST6SrDaL97ABISmjdP4n+O6K9DMzL+5yHvC+DTpBSUI4QTIqBZYy1HqDyTz
0Nww6LO5ATMreK+6JnHHENew/RD4AbNneLKV8t7GpQZsY//fBlykooEWH1krFXFq
BGJxyQsrdsRr15CbF1rCTefJTVd7OQ10W0VRx418PChFZnQYRPUJbI6rFJHyEJsV
SYFGwd/8EqV2F8KaSefsLN8hBBASrS5sw74=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:51:20 2025 by rpki-client