Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/htX2BC5GaJ_lpQPn0t-J8OP8khQ.cer
File: htX2BC5GaJ_lpQPn0t-J8OP8khQ.cer (raw, json)
Hash identifier: PKE3vK5IgGb6txmTFEhBnteCLww1hXR3Q6bAhJwQ5Es=
Subject key identifier: 86:D5:F6:04:2E:46:68:9F:E5:A5:03:E7:D2:DF:89:F0:E3:FC:92:14
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 32D2
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:29:27 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 29091
IP: 41.184.0.0/16
IP: 2c0f:fd28::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13010 (0x32d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 05:29:27 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36CC8EBAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ad:f1:1e:7b:32:7f:dd:38:b4:a0:b2:1a:16:
1c:9f:20:dd:1f:16:98:72:74:98:e0:89:d6:57:2b:
f9:de:68:0c:ff:4e:b1:22:ac:11:9c:e7:68:f9:cc:
a4:3c:19:f9:0d:88:23:b4:91:30:bd:45:98:40:e2:
ba:9e:ba:d2:93:24:81:20:b7:c1:70:b7:39:81:e9:
11:d3:04:21:2b:80:d7:28:35:de:ac:0a:09:a7:dc:
c1:6b:0f:14:fc:9c:77:d2:ab:05:4c:55:c8:ad:bb:
fe:0f:b6:79:01:25:e3:d6:b8:3c:37:04:a1:5e:a7:
fe:a9:d8:84:49:7d:a3:d9:2e:b7:91:c2:24:73:69:
53:11:ed:88:b6:5d:da:c8:d1:7a:aa:f9:8e:7d:a4:
8a:9d:be:fe:2f:af:64:c8:c3:86:01:d2:36:dd:ce:
7e:10:37:53:4b:63:01:93:e0:31:04:ec:eb:d9:7e:
ae:ac:b6:c5:8c:39:cc:6d:d5:c8:61:63:92:b2:e2:
44:29:73:a7:c3:01:e5:e1:df:06:ea:3f:6f:4a:ed:
d6:7e:86:0b:48:e5:d4:f7:d8:c3:85:99:a3:03:20:
b3:0a:9e:c8:b9:24:ca:9e:f7:51:04:d0:1f:77:8a:
4b:5a:cf:5e:b7:6d:57:04:32:0a:ed:d9:8e:c7:a4:
32:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D5:F6:04:2E:46:68:9F:E5:A5:03:E7:D2:DF:89:F0:E3:FC:92:14
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29091
sbgp-ipAddrBlock: critical
IPv4:
41.184.0.0/16
IPv6:
2c0f:fd28::/32
Signature Algorithm: sha256WithRSAEncryption
4f:48:55:09:78:8f:dc:a3:ae:ab:0d:9a:75:0f:9e:77:8d:e4:
4a:b7:7c:4e:2f:fe:9c:aa:24:b5:49:e0:ef:58:e4:77:d0:19:
35:b2:ad:6a:c2:1c:74:0e:5a:79:52:4d:44:3a:76:39:c5:a3:
c7:4d:93:9d:13:b3:65:ab:1a:28:c7:5c:0c:99:93:8b:c9:af:
fb:b2:29:93:09:a3:8e:79:03:2a:84:22:1c:7d:c3:dd:5e:4f:
35:b2:3c:89:fb:88:38:26:19:e0:47:0f:ed:ff:34:55:23:d1:
a8:d5:15:a4:2b:3d:4e:c1:b9:23:f4:0c:72:24:c6:a9:a2:4d:
cd:52:6c:bc:2f:d3:c3:f1:04:08:0b:17:4f:5f:74:9f:f8:1b:
7d:ab:05:3a:10:fb:ca:9b:1d:7f:1e:f6:94:de:4a:47:a6:72:
81:c3:23:2b:8e:4d:63:d6:71:13:9c:f8:ca:b6:d7:d8:38:ee:
94:cd:cc:67:72:a2:09:27:ac:0d:e6:26:ee:6b:40:21:9a:55:
42:d1:3e:85:2c:c3:06:74:2c:0a:7c:0b:98:24:d8:8d:c5:a0:
0f:2a:65:c0:69:0f:4a:64:f4:15:41:ec:2b:1d:a9:41:93:20:
13:b4:08:55:78:dc:e0:be:26:c4:12:be:dd:57:8e:f9:a8:e2:
86:0a:57:3a
-----BEGIN CERTIFICATE-----
MIIGIzCCBQugAwIBAgICMtIwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwNTI5MjdaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkNDOEVCQUYxMTAvBgNVBAUTKDg2RDVGNjA0MkU0NjY4OUZFNUE1MDNF
N0QyREY4OUYwRTNGQzkyMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDurfEeezJ/3Ti0oLIaFhyfIN0fFphydJjgidZXK/neaAz/TrEirBGc52j5zKQ8
GfkNiCO0kTC9RZhA4rqeutKTJIEgt8FwtzmB6RHTBCErgNcoNd6sCgmn3MFrDxT8
nHfSqwVMVcitu/4PtnkBJePWuDw3BKFep/6p2IRJfaPZLreRwiRzaVMR7Yi2XdrI
0Xqq+Y59pIqdvv4vr2TIw4YB0jbdzn4QN1NLYwGT4DEE7OvZfq6stsWMOcxt1chh
Y5Ky4kQpc6fDAeXh3wbqP29K7dZ+hgtI5dT32MOFmaMDILMKnsi5JMqe91EE0B93
iktaz163bVcEMgrt2Y7HpDKZAgMBAAGjggMYMIIDFDAdBgNVHQ4EFgQUhtX2BC5G
aJ/lpQPn0t+J8OP8khQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZDQzhFQi9COERBRDlBNkIwRUQx
MUVDODQ5NEQwODE1QTQwRDU3Ny8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Q0M4RUIvQjhEQUQ5QTZCMEVEMTFFQzg0OTREMDgxNUE0MEQ1NzcvaHRYMkJD
NUdhSl9scFFQbjB0LUo4T1A4a2hRLm1mdDAZBggrBgEFBQcBCAEB/wQKMAigBjAE
AgJxozAtBggrBgEFBQcBBwEB/wQeMBwwCwQCAAEwBQMDACm4MA0EAgACMAcDBQAs
D/0oMA0GCSqGSIb3DQEBCwUAA4IBAQBPSFUJeI/co66rDZp1D553jeRKt3xOL/6c
qiS1SeDvWOR30Bk1sq1qwhx0Dlp5Uk1EOnY5xaPHTZOdE7Nlqxoox1wMmZOLya/7
simTCaOOeQMqhCIcfcPdXk81sjyJ+4g4JhngRw/t/zRVI9Go1RWkKz1Owbkj9Axy
JMapok3NUmy8L9PD8QQICxdPX3Sf+Bt9qwU6EPvKmx1/HvaU3kpHpnKBwyMrjk1j
1nETnPjKttfYOO6UzcxncqIJJ6wN5ibua0AhmlVC0T6FLMMGdCwKfAuYJNiNxaAP
KmXAaQ9KZPQVQewrHalBkyATtAhVeNzgvibEEr7dV475qOKGClc6
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:39:29 2025 by rpki-client