Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/g_IB39JtAymSbgjMDdW77FB5ifQ.cer
File: g_IB39JtAymSbgjMDdW77FB5ifQ.cer (raw, json)
Hash identifier: nlyeD64jJgtmith3ot9XZ6bjpr8muWznI09d4FdTI4E=
Subject key identifier: 83:F2:01:DF:D2:6D:03:29:92:6E:08:CC:0D:D5:BB:EC:50:79:89:F4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 357C
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3693767/B2C6E23257F511F0B65479ECDAE4EC9C/g_IB39JtAymSbgjMDdW77FB5ifQ.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3693767/B2C6E23257F511F0B65479ECDAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 03 Jul 2025 10:08:51 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328312
AS: 328968
IP: 102.164.240.0/22
IP: 102.213.236.0/22
IP: 2001:43fe:a000::/40
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13692 (0x357c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jul 3 10:08:51 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3693767AF, serialNumber=83F201DFD26D0329926E08CC0DD5BBEC507989F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:ee:8e:0d:01:5e:2a:37:9f:a6:e5:97:5a:
af:ce:10:27:71:a9:b9:4a:c8:c2:a9:b9:d5:93:ad:
25:9c:61:62:7b:cd:d6:f7:3a:c0:a9:4f:3c:45:6a:
7d:ee:b1:80:2f:b7:bf:9c:69:b2:14:ed:fe:bf:86:
88:25:f8:e2:d5:10:20:95:6a:76:f4:20:6d:0a:c7:
d2:5c:3d:b6:20:e0:c9:00:f9:20:46:b0:a0:01:75:
3d:b7:00:d5:38:71:10:e3:aa:1c:9f:19:6b:7b:b1:
21:8a:ea:e3:89:4b:92:42:a3:94:a6:2c:ca:88:83:
52:19:5b:ee:15:d9:6d:ae:30:93:44:3e:01:a2:63:
b3:ba:70:25:b4:ef:03:b7:44:b9:b5:bf:d0:73:77:
ea:fa:e2:aa:7e:b9:ba:51:be:c1:e7:0b:5e:64:b3:
6a:8e:60:77:38:ce:00:4b:a1:0f:43:de:7a:be:f3:
d7:c4:be:1f:df:4c:16:cd:13:dc:6a:84:14:3b:fc:
a9:27:82:a6:30:ab:8f:5d:3a:9c:aa:9a:b7:e2:f9:
24:bf:c0:cc:7b:4a:30:17:0d:76:c3:53:e1:ac:8d:
74:7a:47:5c:6e:e1:92:f7:b9:93:98:3e:9f:ed:d2:
a4:94:df:e5:01:90:d9:ea:5b:c6:2e:47:26:d2:9c:
db:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F2:01:DF:D2:6D:03:29:92:6E:08:CC:0D:D5:BB:EC:50:79:89:F4
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693767/B2C6E23257F511F0B65479ECDAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693767/B2C6E23257F511F0B65479ECDAE4EC9C/g_IB39JtAymSbgjMDdW77FB5ifQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328312
328968
sbgp-ipAddrBlock: critical
IPv4:
102.164.240.0/22
102.213.236.0/22
IPv6:
2001:43fe:a000::/40
Signature Algorithm: sha256WithRSAEncryption
99:a9:ed:9c:24:93:ca:cd:2e:3a:2e:aa:93:a5:ee:89:f2:48:
32:e4:59:41:2b:87:4f:5f:e4:a6:1c:a3:b7:81:66:49:96:ee:
6c:45:c6:4a:47:4f:c4:6b:6d:5a:43:33:33:02:51:f1:25:d1:
3e:f5:ed:1d:01:4c:cd:07:1c:b0:68:7a:81:a1:a2:65:09:5f:
51:ee:f8:5a:89:65:6b:48:6a:f1:0c:d9:32:8a:19:ca:08:69:
8b:c7:5d:17:43:68:f8:22:ca:61:d7:b2:24:d2:83:d9:ef:e0:
0a:7e:be:35:77:4b:07:e9:fe:9b:73:30:57:ac:d3:35:76:da:
27:fd:28:3e:ee:e0:15:28:04:01:a6:44:f0:67:4f:82:f7:e6:
bc:e7:67:79:12:a1:cc:45:1e:66:f2:d3:18:64:b7:f7:63:be:
69:98:76:71:37:53:3c:27:96:ec:e7:08:34:c2:20:9e:34:35:
74:1d:da:79:b7:5e:85:11:14:f5:a4:29:72:a3:84:5b:5d:6d:
43:04:fe:c7:cd:05:37:1c:d1:35:00:17:8b:fb:3d:74:43:2e:
f2:32:5f:bc:08:69:fd:34:f8:ed:2a:3e:9f:ea:1b:10:22:75:
02:a5:d3:7a:d5:0a:53:70:e9:5c:16:a8:b6:b4:29:e9:06:41:
19:2c:60:af
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgICNXwwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTA3MDMxMDA4NTFaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjkzNzY3QUYxMTAvBgNVBAUTKDgzRjIwMURGRDI2RDAzMjk5MjZFMDhD
QzBERDVCQkVDNTA3OTg5RjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9l+6ODQFeKjefpuWXWq/OECdxqblKyMKpudWTrSWcYWJ7zdb3OsCpTzxFan3u
sYAvt7+cabIU7f6/hogl+OLVECCVanb0IG0Kx9JcPbYg4MkA+SBGsKABdT23ANU4
cRDjqhyfGWt7sSGK6uOJS5JCo5SmLMqIg1IZW+4V2W2uMJNEPgGiY7O6cCW07wO3
RLm1v9Bzd+r64qp+ubpRvsHnC15ks2qOYHc4zgBLoQ9D3nq+89fEvh/fTBbNE9xq
hBQ7/KkngqYwq49dOpyqmrfi+SS/wMx7SjAXDXbDU+GsjXR6R1xu4ZL3uZOYPp/t
0qSU3+UBkNnqW8YuRybSnNv5AgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUg/IB39Jt
AymSbgjMDdW77FB5ifQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5Mzc2Ny9CMkM2RTIzMjU3RjUx
MUYwQjY1NDc5RUNEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTM3NjcvQjJDNkUyMzI1N0Y1MTFGMEI2NTQ3OUVDREFFNEVDOUMvZ19JQjM5
SnRBeW1TYmdqTURkVzc3RkI1aWZRLm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK
AgMFAngCAwUFCDA1BggrBgEFBQcBBwEB/wQmMCQwEgQCAAEwDAMEAmak8AMEAmbV
7DAOBAIAAjAIAwYAIAFD/qAwDQYJKoZIhvcNAQELBQADggEBAJmp7Zwkk8rNLjou
qpOl7onySDLkWUErh09f5KYco7eBZkmW7mxFxkpHT8RrbVpDMzMCUfEl0T717R0B
TM0HHLBoeoGhomUJX1Hu+FqJZWtIavEM2TKKGcoIaYvHXRdDaPgiymHXsiTSg9nv
4Ap+vjV3Swfp/ptzMFes0zV22if9KD7u4BUoBAGmRPBnT4L35rznZ3kSocxFHmby
0xhkt/djvmmYdnE3UzwnluznCDTCIJ40NXQd2nm3XoURFPWkKXKjhFtdbUME/sfN
BTcc0TUAF4v7PXRDLvIyX7wIaf00+O0qPp/qGxAidQKl03rVClNw6VwWqLa0KekG
QRksYK8=
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:00:45 2025 by rpki-client