Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/g2HVptDz1JxnYMDqaGxnxBSd1t8.cer
File: g2HVptDz1JxnYMDqaGxnxBSd1t8.cer (raw, json)
Hash identifier: 8BElm2WUurVB3h/QIbqJMqk8/G+dL5d8nly9y6d5DJ4=
Subject key identifier: 83:61:D5:A6:D0:F3:D4:9C:67:60:C0:EA:68:6C:67:C4:14:9D:D6:DF
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2F01
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:06:23 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 327992
IP: 102.207.4.0/22
IP: 2c0f:eea0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12033 (0x2f01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:06:23 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36580B0AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:c7:47:0c:fd:34:b5:c0:2a:47:ec:6a:50:
b1:95:24:35:b6:97:f6:08:76:42:9d:e6:e6:91:dd:
e9:15:79:0b:5b:b9:2a:ba:8e:16:46:e4:89:c3:11:
60:92:a5:d5:e8:10:0e:c7:94:08:76:fa:47:e5:0b:
a0:f0:7e:ad:a9:49:f1:b0:e2:bc:aa:a3:18:66:04:
ea:0d:41:a6:08:d7:20:8c:0d:24:29:23:2c:eb:a1:
58:46:27:cb:df:ea:4f:85:65:a4:b7:d4:3b:51:8d:
49:14:de:88:8f:7a:cb:c4:58:85:04:55:f0:a2:70:
6b:be:79:ca:0a:ec:ef:b9:ea:54:df:57:56:b0:a0:
7d:08:90:50:81:4e:3a:2f:cb:11:d1:a8:7d:82:e2:
66:eb:2f:59:e7:8d:33:55:b6:fd:74:12:d0:67:35:
84:65:99:28:ed:a9:51:3e:13:fe:81:2d:0e:b7:aa:
54:d0:55:0d:50:3c:aa:d3:d2:b1:f8:b3:c2:24:80:
01:56:6e:aa:d5:e5:be:17:73:8e:fa:ca:6e:12:7b:
18:71:96:7d:4f:ab:20:2e:0d:1a:9a:dc:68:ed:92:
4e:6b:26:4c:7b:c8:14:99:4a:b6:f2:06:2e:9d:c0:
a9:59:b8:32:5d:f2:ef:36:31:c0:42:d6:59:2d:84:
1b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:61:D5:A6:D0:F3:D4:9C:67:60:C0:EA:68:6C:67:C4:14:9D:D6:DF
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327992
sbgp-ipAddrBlock: critical
IPv4:
102.207.4.0/22
IPv6:
2c0f:eea0::/32
Signature Algorithm: sha256WithRSAEncryption
0b:b8:8c:4a:4c:7d:0f:87:16:d6:ea:d0:8b:de:19:f5:b3:1c:
b4:a6:e1:d8:dd:98:5c:d4:dc:c3:2c:28:94:f5:0c:48:0e:56:
17:ce:f9:01:25:99:7a:f4:50:a9:de:c3:50:77:c3:8a:94:96:
6d:68:2b:09:ed:89:e9:05:c7:68:71:13:bf:2d:c2:ad:22:95:
5f:ab:fe:c9:78:5c:83:31:df:ff:e2:4c:7c:39:7e:f7:76:4d:
a3:10:45:c8:bf:d3:03:9d:e2:68:7a:c0:98:f7:1e:91:51:2f:
bc:e1:37:a9:8f:bc:4b:a9:7f:3a:cb:f1:d4:29:5f:3c:37:97:
41:78:72:42:9b:4b:b6:89:96:af:63:49:48:b6:a8:ea:3f:45:
3e:48:15:1b:31:00:3c:db:6c:a3:a4:f1:62:58:96:04:e0:14:
37:85:f6:8b:8c:cc:4d:31:84:bc:27:59:4a:99:ab:a7:5c:26:
31:69:ba:4a:62:e7:71:88:53:d7:d6:fb:7d:ec:65:dd:2b:49:
f9:2d:10:ee:f0:08:3f:c7:35:74:57:7b:71:b3:22:4f:f3:a9:
25:87:40:6f:80:db:e9:6c:93:12:d3:f3:0b:ea:91:99:a1:13:
87:7c:24:8f:4b:e4:fe:0b:ba:f4:86:a2:7e:d6:30:56:c9:a0:
fe:08:78:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:48:04 2025 by rpki-client