Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/hv5z7TaP-SiSCjS0l1tObR5U4GM.cer
File: hv5z7TaP-SiSCjS0l1tObR5U4GM.cer (raw, json)
Hash identifier: z1JrnWr7EJif9IEojRL5MDRhivAFmRSRj4/eytzZquk=
Subject key identifier: 86:FE:73:ED:36:8F:F9:28:92:0A:34:B4:97:5B:4E:6D:1E:54:E0:63
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2D65
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:40:40 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329456
IP: 102.208.136.0/22
IP: 2c0f:3c40::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11621 (0x2d65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:40:40 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3627A5BAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:a8:28:e5:6c:fd:1f:09:57:27:a7:cb:10:
0c:55:bd:b4:9e:98:a3:71:c5:42:48:72:01:c0:42:
53:f2:c7:de:e8:b8:c8:cb:2a:e4:15:dd:70:2e:d1:
aa:f0:06:ac:dd:df:2a:e5:8c:5e:35:09:69:16:c9:
e1:db:e5:8a:9a:ae:74:17:61:65:c5:a6:3b:ec:d6:
29:7e:ec:b3:c8:70:7c:56:37:b7:6b:46:2f:18:30:
94:95:cf:43:ac:65:45:1a:b3:e3:fe:cc:eb:43:4e:
c5:f7:f8:3d:d2:05:5a:2e:f5:66:2b:16:48:44:86:
de:12:c2:96:bc:54:71:c2:c7:9a:f0:1c:ae:53:64:
48:af:b3:7f:c4:08:2c:73:56:b3:54:20:de:ce:9b:
5b:f5:68:e7:7d:42:35:46:ef:22:e0:1a:e0:58:7b:
fd:75:e3:5f:1f:eb:56:03:42:6d:5c:d3:f9:06:78:
6d:67:28:e0:36:9c:56:44:46:7d:54:c5:b1:6b:fa:
7d:d9:29:4f:98:7c:73:0d:2e:3b:0d:c1:87:43:08:
8f:89:1e:92:4c:92:87:91:ce:ee:43:94:c9:9d:8d:
68:fc:47:ca:f2:80:01:10:08:d9:a2:78:ce:39:26:
64:f3:e4:f8:42:df:d5:f5:b1:a7:14:4f:02:ab:b2:
50:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FE:73:ED:36:8F:F9:28:92:0A:34:B4:97:5B:4E:6D:1E:54:E0:63
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329456
sbgp-ipAddrBlock: critical
IPv4:
102.208.136.0/22
IPv6:
2c0f:3c40::/32
Signature Algorithm: sha256WithRSAEncryption
12:b7:1d:e7:e0:1f:c2:39:d1:26:1c:2b:49:52:c0:15:2d:f0:
a6:d3:3f:f5:28:7c:a7:3d:36:4d:6d:88:75:91:2e:8a:c5:19:
e6:27:58:f9:41:3a:e8:46:5d:00:79:c8:0e:50:6a:5e:42:a0:
67:80:16:66:ce:e4:6e:4e:5a:88:0c:86:bd:d3:0d:60:a2:1d:
39:9f:3d:f8:bf:c1:28:02:6d:79:fc:00:3c:7a:64:00:8d:f7:
42:f7:c8:84:a5:d4:5e:0c:65:69:7a:77:b2:6b:bb:b4:0d:72:
36:19:16:9f:d0:7f:2e:8b:1e:42:02:a6:6e:50:a9:42:8d:55:
7d:42:ac:70:5b:40:6c:1f:88:9f:55:27:10:43:7c:5e:db:7d:
31:3c:96:2d:87:6c:a9:62:a1:83:97:23:f0:2c:78:d9:2f:ce:
f6:82:06:a6:9e:30:6e:b0:ba:78:c8:3a:05:c4:99:17:d5:76:
dc:c7:d0:3b:70:26:c6:c6:11:84:72:a3:b9:ae:10:26:8e:99:
7d:6b:18:2e:c1:bd:1b:81:c5:6f:f9:a0:f5:62:10:22:90:c3:
4d:01:17:8a:c3:49:67:14:cd:b5:36:2e:10:bc:c1:c8:4b:ee:
32:3c:71:56:06:66:65:c8:c6:c7:23:ab:d0:73:57:f0:2d:81:
23:9b:d9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:41:44 2025 by rpki-client