Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ePyy5tDIIPu5vVgQYfogSi1R9BI.cer
File: ePyy5tDIIPu5vVgQYfogSi1R9BI.cer (raw, json)
Hash identifier: Q5a3rodj61PUJzaDv4YA1bq0bSZEAg4Z1L4k59Qi7pI=
Subject key identifier: 78:FC:B2:E6:D0:C8:20:FB:B9:BD:58:10:61:FA:20:4A:2D:51:F4:12
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 33AC
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 06:20:53 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329331
IP: 102.211.36.0/22
IP: 2001:43ff:9000::/48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13228 (0x33ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 06:20:53 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36FABDEAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:2d:a9:75:b8:88:d3:6d:f4:b5:89:92:9e:
b2:ea:3e:6d:0c:46:79:73:60:f8:c9:99:f0:a2:fe:
52:36:f0:0c:fc:91:df:b5:be:9b:6c:b3:0d:88:f7:
3b:da:79:d5:2d:9e:e3:40:d9:77:c5:da:68:0e:83:
2b:e1:f3:77:19:43:ed:a9:f7:3e:8e:8e:48:7f:56:
0a:b6:41:d6:08:cf:da:62:53:ee:d7:6e:5b:ce:80:
dd:67:de:30:48:da:7b:b8:9c:d4:db:f7:5e:ea:cd:
3d:e1:e3:2a:1d:11:d0:26:dd:e8:74:82:ad:2b:52:
56:44:5e:02:55:39:0f:33:b0:8b:40:8b:26:97:d5:
00:8c:ff:c4:47:0b:8b:97:cb:37:d5:e5:bb:93:35:
e5:fc:fb:d3:6a:d3:28:94:bc:29:3b:2d:f2:c5:46:
7a:17:a7:b0:07:f1:31:a2:41:6a:f0:cb:46:3d:23:
bb:df:c7:d9:6a:52:f8:a7:81:e0:52:52:2c:13:6d:
dc:74:d5:fe:f8:33:24:e8:69:d4:58:34:92:e9:c5:
91:0f:7e:4f:ba:d9:7a:e3:c4:61:1b:70:f3:c0:15:
cb:ed:56:6b:d4:f9:14:22:f0:b8:7b:54:50:5d:33:
70:de:68:55:ff:5b:da:15:24:5f:79:d5:b4:cf:b8:
f9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FC:B2:E6:D0:C8:20:FB:B9:BD:58:10:61:FA:20:4A:2D:51:F4:12
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329331
sbgp-ipAddrBlock: critical
IPv4:
102.211.36.0/22
IPv6:
2001:43ff:9000::/48
Signature Algorithm: sha256WithRSAEncryption
be:64:cc:05:e8:de:6c:39:29:86:f1:81:fa:8b:e6:cc:d0:61:
5f:8f:6a:7a:f2:23:6d:fb:e1:c3:5f:c7:6c:8f:eb:09:d2:7e:
97:d2:2a:48:cc:94:f0:4c:0e:7b:f0:21:85:a5:ba:01:82:39:
8b:e0:d8:01:e9:7f:e7:29:99:e0:c7:04:77:70:95:06:06:79:
34:7b:0b:43:00:2f:b6:ee:7c:28:6b:1f:cd:03:ed:13:66:30:
f0:8c:50:d3:a6:10:52:84:7d:2e:98:d9:61:9d:56:13:5a:9c:
19:5d:f6:cb:28:e9:99:51:f4:0a:19:b6:7f:a8:56:b1:67:c9:
4d:76:d1:1d:6d:98:ab:bf:e6:41:17:c5:9d:79:95:6f:e1:c1:
2a:73:a8:90:03:c5:ce:6f:7a:7b:0c:a6:77:91:f5:39:aa:c1:
ee:34:72:ce:3a:26:6e:e1:af:c6:a7:de:48:e1:bc:3e:3c:bc:
2a:fc:b6:9c:71:23:b7:9b:06:7d:01:fd:a0:6f:e3:69:af:b2:
2a:9a:07:91:10:ea:3f:2d:e5:6c:4b:af:48:23:1c:31:67:b6:
bc:be:b6:ec:ca:35:8a:25:59:e1:17:9c:07:2a:3a:6b:8e:77:
5a:82:05:ed:e1:b1:34:d4:db:12:70:51:76:4c:d1:87:97:e5:
b2:76:c4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:39:30 2025 by rpki-client