Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/cDnVox_x8yuxXUeMEJeGl7YiJlc.cer
File: cDnVox_x8yuxXUeMEJeGl7YiJlc.cer (raw, json)
Hash identifier: V2hHi1SRKSbQ2yq8LWMMczuNuc3Q1EFFfuJDZ6vOFt0=
Subject key identifier: 70:39:D5:A3:1F:F1:F3:2B:B1:5D:47:8C:10:97:86:97:B6:22:26:57
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2EB1
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:50:09 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328285
IP: 102.164.64.0/20
IP: 2c0f:ee88::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11953 (0x2eb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:50:09 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F369A625AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f7:db:1f:9f:07:2d:79:51:6c:ff:03:95:d2:
15:9d:47:5c:62:30:4e:ea:6b:ef:e9:e6:ff:9f:00:
03:eb:2a:01:f6:3d:12:fa:38:9e:d2:92:c5:b2:a0:
31:1d:df:aa:9c:4c:05:39:c7:8b:42:b0:4f:a6:8d:
05:28:e0:cf:72:8b:50:25:5d:b5:0d:43:e0:c1:93:
3c:6b:d7:28:58:ce:f7:09:96:74:3a:d0:f9:db:45:
92:88:11:55:37:3b:28:04:c1:c7:de:f4:c4:a7:03:
30:1e:07:42:13:3b:ce:dd:74:9c:42:2e:85:81:cf:
dd:00:aa:b9:6c:91:0c:bb:e2:06:2f:f5:d9:03:44:
00:cc:6d:db:e8:85:b2:cb:4f:b4:b2:21:1f:cd:2e:
d2:0d:da:eb:7e:ab:43:72:62:02:0f:25:e2:35:c0:
80:7c:36:41:f7:00:44:a0:3a:ff:cc:ee:86:73:a9:
28:42:49:de:0b:79:68:ef:a2:c2:64:0e:eb:36:ca:
c0:03:85:df:d9:3e:81:e0:50:da:ab:d1:97:1e:ce:
be:4e:1b:42:96:59:02:f8:51:90:62:e7:c4:64:7d:
07:19:5d:ec:90:45:3a:b8:08:b1:1d:0a:39:3d:67:
6b:28:aa:5e:07:7f:4e:86:e2:e2:74:26:28:6e:53:
82:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:39:D5:A3:1F:F1:F3:2B:B1:5D:47:8C:10:97:86:97:B6:22:26:57
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328285
sbgp-ipAddrBlock: critical
IPv4:
102.164.64.0/20
IPv6:
2c0f:ee88::/32
Signature Algorithm: sha256WithRSAEncryption
5f:e9:0b:1e:1c:b7:ff:75:ce:b6:d2:f4:24:25:99:e9:c1:81:
ba:f6:1b:38:87:1a:b5:30:6d:99:60:a0:15:89:92:51:89:6e:
a4:5a:28:b9:99:08:93:43:fb:7e:da:d1:ee:d8:e6:eb:8b:fc:
9f:14:8c:02:98:13:69:ee:fb:ca:6b:7c:f3:87:0b:75:ee:e0:
c2:00:4d:0e:ca:a6:ae:54:96:fa:18:34:f9:24:6a:48:2d:d2:
87:7a:9c:d1:77:6b:71:03:8b:9b:13:ca:54:8b:48:ba:93:ec:
fe:a9:dc:58:1e:4e:c2:c4:61:1d:6a:45:70:87:e7:b5:48:f0:
f5:f7:d2:9e:00:20:a0:b3:cd:8f:64:ad:ee:e7:43:44:58:f1:
34:b1:0c:f4:db:ca:94:f6:90:05:10:a9:ea:a5:69:2e:4a:c2:
5f:8a:84:fc:74:9d:7b:b3:ff:3a:a6:23:db:ce:99:32:a8:34:
5a:da:88:bb:f7:f0:29:a0:49:5a:3d:f8:7c:49:48:49:31:bb:
0f:b6:26:d8:8f:f5:7e:e3:89:ae:fe:25:08:ad:48:9c:0f:d2:
ee:a1:bc:f1:0f:4b:46:98:be:65:e8:ca:e7:c7:ee:f0:50:68:
87:2f:c0:e6:13:4d:ee:1c:6b:61:93:db:a4:e8:bb:27:6c:da:
6c:9e:a8:14
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICLrEwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMTUwMDlaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjlBNjI1QUYxMTAvBgNVBAUTKDcwMzlENUEzMUZGMUYzMkJCMTVENDc4
QzEwOTc4Njk3QjYyMjI2NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJ99sfnwcteVFs/wOV0hWdR1xiME7qa+/p5v+fAAPrKgH2PRL6OJ7SksWyoDEd
36qcTAU5x4tCsE+mjQUo4M9yi1AlXbUNQ+DBkzxr1yhYzvcJlnQ60PnbRZKIEVU3
OygEwcfe9MSnAzAeB0ITO87ddJxCLoWBz90AqrlskQy74gYv9dkDRADMbdvohbLL
T7SyIR/NLtIN2ut+q0NyYgIPJeI1wIB8NkH3AESgOv/M7oZzqShCSd4LeWjvosJk
Dus2ysADhd/ZPoHgUNqr0Zcezr5OG0KWWQL4UZBi58RkfQcZXeyQRTq4CLEdCjk9
Z2soql4Hf06G4uJ0JihuU4IFAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUcDnVox/x
8yuxXUeMEJeGl7YiJlcwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5QTYyNS84QTM4Mjc0MDc4Qjgx
MUU5ODI5ODQzNEZGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OUE2MjUvOEEzODI3NDA3OEI4MTFFOTgyOTg0MzRGRjhBRUEyMjgvY0RuVm94
X3g4eXV4WFVlTUVKZUdsN1lpSmxjLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAl0wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBARmpEAwDQQCAAIwBwMF
ACwP7ogwDQYJKoZIhvcNAQELBQADggEBAF/pCx4ct/91zrbS9CQlmenBgbr2GziH
GrUwbZlgoBWJklGJbqRaKLmZCJND+37a0e7Y5uuL/J8UjAKYE2nu+8prfPOHC3Xu
4MIATQ7Kpq5UlvoYNPkkakgt0od6nNF3a3EDi5sTylSLSLqT7P6p3FgeTsLEYR1q
RXCH57VI8PX30p4AIKCzzY9kre7nQ0RY8TSxDPTbypT2kAUQqeqlaS5Kwl+KhPx0
nXuz/zqmI9vOmTKoNFraiLv38CmgSVo9+HxJSEkxuw+2JtiP9X7jia7+JQitSJwP
0u6hvPEPS0aYvmXoyufH7vBQaIcvwOYTTe4ca2GT26Touyds2myeqBQ=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:54:20 2025 by rpki-client