Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/fHsh1E3T3s6a76jRvdnhrs9LUY0.cer
File: fHsh1E3T3s6a76jRvdnhrs9LUY0.cer (raw, json)
Hash identifier: fXhR3+Ky3fDBdnBKHjiIyR8UyeSFB8zXDMc8anDTwM0=
Subject key identifier: 7C:7B:21:D4:4D:D3:DE:CE:9A:EF:A8:D1:BD:D9:E1:AE:CF:4B:51:8D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 356A
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362DE23/89A6C26455A711F0A059BAEDDAE4EC9C/fHsh1E3T3s6a76jRvdnhrs9LUY0.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362DE23/89A6C26455A711F0A059BAEDDAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 30 Jun 2025 11:44:25 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37052
IP: 41.191.192.0/21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13674 (0x356a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jun 30 11:44:25 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F362DE23AF, serialNumber=7C7B21D44DD3DECE9AEFA8D1BDD9E1AECF4B518D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:50:76:3c:4e:24:dc:39:87:a6:29:8b:df:
22:3b:3b:64:aa:ef:5a:e5:01:18:ac:7b:05:a9:5a:
88:3f:7d:ca:be:b0:ae:fc:c2:25:0f:15:44:d6:82:
63:9e:ee:06:9e:ef:d8:60:03:45:ee:92:98:43:b0:
35:44:cc:c1:94:67:12:c3:8e:00:ef:0d:5a:2e:61:
fc:e6:ce:88:a4:fc:8b:9a:53:da:92:31:1e:e9:0f:
94:85:61:76:78:0d:14:66:ac:df:e6:39:c0:8b:f3:
55:a7:4f:8b:32:cd:e1:81:df:d4:91:1e:d1:d3:9a:
7b:74:23:49:4e:9f:04:7f:0b:7d:0b:73:aa:f5:39:
91:6f:52:dd:f3:17:53:0e:77:e1:7c:df:92:40:15:
51:8f:52:c3:0f:2a:11:30:63:0b:59:d3:50:0e:51:
4a:78:25:d2:b8:db:a5:fd:21:5b:f3:47:e7:5b:e7:
37:57:41:f9:e9:02:a8:1e:9c:e2:24:d0:33:53:61:
f7:82:62:21:00:0d:83:ce:02:34:32:53:e1:74:bf:
8d:e4:4a:4e:fc:7d:3c:6f:60:dd:a6:d5:f8:54:13:
3b:6b:9f:c8:d5:39:6f:ff:a0:07:df:cc:d9:d5:04:
00:71:09:d3:46:cb:4d:bc:1f:2e:f8:e2:54:05:26:
1d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7B:21:D4:4D:D3:DE:CE:9A:EF:A8:D1:BD:D9:E1:AE:CF:4B:51:8D
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362DE23/89A6C26455A711F0A059BAEDDAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362DE23/89A6C26455A711F0A059BAEDDAE4EC9C/fHsh1E3T3s6a76jRvdnhrs9LUY0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37052
sbgp-ipAddrBlock: critical
IPv4:
41.191.192.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:55:90:96:0e:38:74:d0:01:d9:8e:56:6f:26:22:e2:66:c4:
a2:75:0a:63:fb:4f:ad:0c:c2:69:55:5a:37:c8:87:e9:65:2d:
90:d0:da:f0:31:97:b1:68:ed:51:49:4d:60:7b:eb:31:52:27:
12:9b:6a:b9:4a:73:4a:5e:9c:47:36:f1:c2:43:55:e9:0a:93:
73:f4:6c:31:12:09:05:40:c7:77:5f:cd:33:71:25:5d:6d:9f:
a1:e4:68:1a:34:41:31:a3:12:70:36:96:2a:3c:25:41:fc:92:
d1:9d:7b:8e:ef:6d:3c:bd:5a:dc:53:b4:22:48:59:a0:c8:42:
fe:40:42:ad:88:dd:4e:de:62:b7:24:0c:a6:0f:f8:73:20:9f:
e6:00:45:4b:4d:24:5d:bc:03:3c:74:6a:7a:91:08:91:db:07:
f9:2c:bf:65:23:ea:ab:05:69:52:67:43:04:9c:ae:fa:a5:17:
5e:74:18:7e:9f:97:f0:b8:42:5b:7a:23:ef:d5:8a:16:36:d7:
20:dc:12:fb:41:d7:3f:48:99:61:54:c5:1c:d1:f5:8a:ee:51:
87:85:f3:c5:d6:ac:1b:dc:94:6d:1e:27:4c:9a:48:bd:29:26:
db:4a:ef:a4:09:7c:17:01:db:6e:07:31:b6:3d:1c:6f:ef:a5:
4f:2f:c0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 07:32:59 2025 by rpki-client