Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
File: cJAIrccXkY_f_PFnQftbEwunxDA.cer (raw, json)
Hash identifier: RFkVGZVMpBnPyVbUB9DNP6aWoN9t5KtynwYzE/bkV/c=
Subject key identifier: 70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2CC1
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:01:36 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329392
IP: 102.210.0.0/22
IP: 2c0e:7000::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11457 (0x2cc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:01:36 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36111C6AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:15:c4:5e:69:f4:ff:c9:c8:5d:31:7d:3e:14:
89:68:63:dd:c2:8b:af:91:ec:46:5a:9b:17:21:44:
83:01:dd:6d:93:d9:04:12:da:3e:bc:af:8e:da:e9:
70:05:35:8d:86:66:15:c4:c6:89:c1:f5:ea:ee:35:
ae:e1:0c:fd:e7:51:e6:d2:76:96:e5:1a:76:b6:3c:
4a:e2:ad:19:f0:98:9a:b3:da:ba:26:36:b0:7a:b4:
f5:2d:61:90:8c:b7:17:b7:4d:4d:f6:f5:55:ed:0b:
f9:8f:a9:28:c6:fd:64:cd:52:33:28:e2:fd:8f:46:
89:b1:82:76:41:59:7d:26:e1:44:b9:02:71:47:12:
c4:e1:5f:35:cb:95:51:78:ea:3a:8b:b2:d7:4d:b9:
39:5b:05:c1:60:81:be:5a:f0:3d:ae:cf:fa:6d:59:
3b:a5:40:85:d2:28:4a:9f:37:1c:53:0c:7a:ca:b2:
b9:6f:ee:f2:44:fb:73:73:bf:2f:e9:8f:79:90:7a:
c1:c5:85:27:b0:24:d6:61:3e:bc:f7:5c:49:f1:6c:
61:f9:31:33:c5:f7:e2:ef:59:a2:e3:2d:18:db:d6:
2b:bc:14:9f:c5:11:aa:02:aa:21:66:1f:af:d7:41:
1d:1a:98:a3:3b:1e:71:19:88:83:93:ed:07:5f:c9:
95:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329392
sbgp-ipAddrBlock: critical
IPv4:
102.210.0.0/22
IPv6:
2c0e:7000::/32
Signature Algorithm: sha256WithRSAEncryption
be:8c:64:47:bf:63:40:cc:a0:a2:f4:cf:10:7e:3b:72:8e:3c:
7c:d2:81:9c:51:f6:ea:e4:c5:3b:d7:8d:c4:65:e2:bc:d2:ae:
0e:07:81:e3:54:53:68:62:60:c8:a8:43:25:6d:a9:97:69:e1:
ab:4a:c3:55:8a:44:8e:14:0b:b3:44:91:93:cb:80:36:2b:0f:
5d:32:36:52:38:91:7b:92:74:a4:42:95:92:be:0d:46:02:6d:
ed:8d:fa:45:db:2f:07:3c:f1:07:95:9b:11:33:26:49:e1:3a:
01:62:e2:16:24:98:1b:7d:a4:92:67:21:82:20:b4:71:59:0e:
f5:97:60:a4:72:c0:49:8f:47:f7:1b:e4:ea:35:fa:b0:9e:1e:
ab:1d:6a:7e:2d:3c:83:0d:4d:24:62:fb:5a:91:41:8c:e9:dc:
9a:07:a2:33:1f:29:f8:15:59:ae:38:4f:e2:28:d3:b1:d1:e8:
08:3a:1e:fb:df:5a:ed:77:cc:b5:ce:10:94:28:10:80:3c:fa:
12:56:3f:bd:22:6f:91:17:82:28:eb:29:9e:52:50:01:7d:40:
87:21:9d:32:31:81:67:90:55:f2:8c:18:41:e7:9e:2c:2f:9e:
8c:0e:ed:2c:3f:5a:15:29:15:75:36:2b:b3:58:cb:fd:76:0f:
66:02:e6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:38:28 2025 by rpki-client