
Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
File: cHofKGrimG32SRDDA05RiafCFt0.cer (raw, json)
Hash identifier: 2uTADVjZgEOsGuAJ4vDOEEo+kSF/NJ0TBt0uxiIT9L4=
Subject key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 361F
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Fri 05 Sep 2025 00:01:31 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37731
AS: 328137
IP: 102.204.236.0/22
IP: 102.215.236.0/22
IP: 2c0f:f030::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13855 (0x361f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Sep 5 00:01:31 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3644DAEAF, serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:ee:27:a2:db:f8:4e:88:62:dd:cc:0f:fc:
f8:d0:75:f3:f1:c0:13:29:79:cb:95:44:e0:0b:c4:
f7:c9:2a:20:2b:bd:00:ac:c5:0b:97:4f:69:b0:30:
51:d8:7d:9e:ff:0d:d6:61:dd:ab:be:b0:03:57:f5:
31:3d:94:80:67:d4:d0:2c:f7:4e:32:b2:6a:3a:a5:
eb:8d:bd:38:70:8a:00:24:e3:c7:04:21:c2:e0:6a:
43:03:9b:e9:1e:ac:68:6f:ac:18:af:e6:1b:ae:03:
eb:82:83:08:7b:4f:8e:7b:3f:6e:b3:a6:c4:6b:c2:
b8:de:3b:b8:d9:3d:ac:e0:a5:73:b7:b9:2e:66:c8:
e5:62:6d:23:90:87:63:77:9b:1c:1c:2f:db:8f:e5:
b4:45:11:7c:11:85:23:ca:e8:ba:e4:20:b0:e2:a4:
62:75:db:f6:63:57:a0:2c:3a:ed:81:c4:45:ce:be:
77:00:e2:17:8f:95:c5:96:c3:cc:96:e7:31:0a:5f:
05:e1:1d:61:a1:ff:d9:4b:75:c2:ff:e9:d1:ce:57:
97:ad:f6:b8:ea:5d:8a:e5:c4:01:40:3d:d3:b7:31:
4e:4e:e2:22:48:4f:8a:b8:3f:26:88:0d:3e:2f:0b:
c5:e4:40:9d:45:29:5f:c9:ea:1d:51:9b:b6:b6:17:
5b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37731
328137
sbgp-ipAddrBlock: critical
IPv4:
102.204.236.0/22
102.215.236.0/22
IPv6:
2c0f:f030::/32
Signature Algorithm: sha256WithRSAEncryption
b0:a2:a3:cc:57:a7:ec:c6:b2:f0:89:47:78:7c:0a:cc:42:b4:
40:9d:ea:80:5c:7b:72:19:00:21:79:be:8c:de:97:b5:ef:fe:
c0:56:c8:4b:ad:ab:ae:5d:d5:22:a2:e2:af:11:e1:ed:b1:a7:
f1:a8:df:cc:94:f0:18:5c:4f:4c:72:f8:80:22:55:89:ad:8e:
84:d9:c2:19:33:f1:e5:62:3c:73:6a:58:b6:b4:d6:a7:14:80:
71:6c:0c:e5:0f:91:34:56:28:7e:4a:be:f8:63:99:99:db:ae:
a3:f0:21:77:2b:04:18:19:56:52:e8:e6:0b:1f:54:23:63:f8:
07:7f:69:cb:d1:23:fe:6c:78:02:f5:83:db:52:7a:17:a5:40:
cb:ce:10:de:d1:a2:5b:4f:d4:3b:27:ce:ae:a1:93:16:6e:25:
12:26:b5:51:44:c9:5d:67:0d:18:d9:68:aa:28:c7:4a:a5:29:
7f:4e:cc:8d:df:2e:89:76:e0:f2:69:15:02:a1:90:cc:1f:72:
99:76:25:5e:66:8b:ac:b3:83:ce:e8:94:9a:dd:79:d5:2d:c5:
15:11:fc:b4:42:29:3a:33:11:ea:87:f2:66:bd:46:e8:50:13:
0c:0a:49:a8:76:91:33:ba:f6:f0:ea:df:2f:b5:1f:f5:bf:61:
d9:50:7c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 01:09:09 2025 by rpki-client