
Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ePCj07rEmhSIR2PZN9PKGSCVOxU.cer
File: ePCj07rEmhSIR2PZN9PKGSCVOxU.cer (raw, json)
Hash identifier: WaGVnJTxvr28iy6jBtzL0eRj11BWMhiTCij72AuAzgk=
Subject key identifier: 78:F0:A3:D3:BA:C4:9A:14:88:47:63:D9:37:D3:CA:19:20:95:3B:15
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 33D6
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 06:30:43 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328503
IP: 102.67.32.0/20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13270 (0x33d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 06:30:43 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36FF74CAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:db:c4:59:da:9a:1b:31:6b:c0:7e:a7:b9:
e3:f8:c1:d0:eb:e3:cc:b3:63:b5:2c:4d:e3:38:87:
61:4d:4f:84:8b:96:66:a8:f1:dc:19:11:d2:d3:16:
01:ff:01:4b:03:8c:b5:03:9e:24:cb:fe:28:a0:4f:
4c:9c:50:3c:cd:61:21:a3:22:fe:d4:f8:6d:d0:98:
aa:ed:9c:eb:50:6b:db:4a:98:4c:e1:99:da:96:94:
0b:13:a6:57:56:7f:23:50:79:ba:86:c4:9e:f7:86:
a0:1f:8e:06:f2:b3:2c:f5:1b:ae:89:34:8c:3a:f8:
23:3b:67:37:b9:fa:95:f3:0c:ab:b1:5c:af:e1:b3:
a6:d5:56:4d:31:1d:80:18:c2:c0:84:c2:ef:64:ad:
40:a4:bc:a3:ca:2a:1b:98:99:46:21:ef:e3:84:0a:
94:d7:47:69:84:fb:07:b5:40:41:93:8c:f2:c0:76:
e6:22:06:ad:25:81:e5:c4:fc:ab:6a:ea:0a:c2:63:
c4:19:5f:d4:53:c5:00:54:e0:6c:9f:71:86:f1:18:
37:4c:49:45:33:8d:d5:7b:fc:f5:69:2d:31:2c:e7:
7d:18:90:30:8a:5d:35:c2:b9:4d:e6:54:35:1b:ad:
d5:a1:c6:4d:29:bd:fb:68:55:f5:96:80:c3:cc:fa:
65:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F0:A3:D3:BA:C4:9A:14:88:47:63:D9:37:D3:CA:19:20:95:3B:15
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328503
sbgp-ipAddrBlock: critical
IPv4:
102.67.32.0/20
Signature Algorithm: sha256WithRSAEncryption
06:8b:f7:77:c6:b7:78:15:96:8e:ac:76:2f:90:98:5d:c7:e5:
b2:a0:e7:e9:ab:d9:da:61:da:39:b7:b5:b4:0c:e1:35:ce:30:
f3:58:bf:94:6c:d3:de:52:ec:56:59:96:ce:20:9d:4e:d8:1d:
cc:27:c8:39:db:5c:f4:37:93:a6:ad:97:fc:27:21:b2:a1:78:
50:a8:fe:4f:37:db:0b:31:2e:27:76:29:99:18:10:a5:2d:57:
cb:74:d0:df:90:5f:4b:d3:97:6a:9a:b5:2b:f9:5b:e7:11:09:
82:37:4f:b2:3d:65:7a:16:fa:a0:d4:96:53:7c:31:4b:28:77:
d8:34:04:a2:58:33:4f:2d:04:f2:21:96:f8:eb:75:4c:0a:4f:
80:0d:69:33:02:c7:b6:cf:b2:6b:1d:49:4c:8e:e1:b5:b7:df:
ea:1f:c5:02:59:5d:b8:e9:c0:ba:46:ce:ea:74:d7:de:2a:bd:
4d:99:c8:45:63:34:95:54:03:8f:8b:1f:fb:de:67:27:78:d9:
ff:bb:52:e4:22:6f:83:1a:a1:ae:44:08:52:db:14:10:d1:1c:
e5:98:2c:b5:78:c0:25:51:01:69:61:9a:2d:68:48:c1:8c:88:
94:f5:b4:23:08:9f:70:0e:1e:b7:62:ea:a0:39:35:3e:0e:08:
4a:c2:7f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:50:12 2025 by rpki-client