Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/mugn1Lk0wUhwF5ccJ2dzIm9Ij8I.cer
File: mugn1Lk0wUhwF5ccJ2dzIm9Ij8I.cer (raw, json)
Hash identifier: BDFDtqcuHr+8jfBKjyJhQ4HNxwC/eYI4zL8HcDZkoQY=
Subject key identifier: 9A:E8:27:D4:B9:34:C1:48:70:17:97:1C:27:67:73:22:6F:48:8F:C2
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 350A
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F363A17B/5F244F0E35BB11F0A9427EEBDAE4EC9C/mugn1Lk0wUhwF5ccJ2dzIm9Ij8I.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F363A17B/5F244F0E35BB11F0A9427EEBDAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 20 May 2025 20:45:45 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 327716
IP: 154.70.144.0/21
IP: 2c0f:f678::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Jun 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13578 (0x350a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: May 20 20:45:45 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F363A17BAF, serialNumber=9AE827D4B934C1487017971C276773226F488FC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:dc:ba:70:ab:ee:80:d3:9b:6a:74:bc:a9:
b1:90:73:61:e0:ba:af:16:61:5b:fe:55:0f:1a:4f:
b9:3b:d5:39:36:85:38:1a:e2:a1:b0:30:91:5d:01:
ae:01:0f:82:27:94:03:d9:05:33:13:91:e8:42:48:
cb:73:7e:87:69:09:6a:0e:c7:82:20:0c:3f:3c:ed:
88:4d:5e:b8:91:fa:2d:87:b8:05:61:d7:2c:2e:e0:
85:19:5c:9a:11:e7:d6:b6:05:42:4f:ee:1c:a8:41:
0d:c8:67:2d:b0:6d:25:8c:bc:e4:47:10:8a:32:7c:
5a:d8:97:ae:98:b1:dc:92:f2:87:cb:f1:8f:d9:36:
36:dd:f9:f1:1d:ee:4c:47:d3:af:e5:7d:23:21:27:
41:8c:a6:a9:57:d6:81:20:23:dd:fd:bf:28:80:dc:
a9:c6:70:39:ff:fc:87:4d:db:60:a1:8f:04:8c:9e:
5a:26:a0:21:82:09:9b:b2:d0:d7:bf:37:34:1b:80:
f0:83:28:37:56:e5:85:d3:db:05:47:b0:ea:bf:39:
ae:eb:54:b6:82:9a:08:26:17:1f:2e:0f:53:98:9f:
a9:ad:9d:1e:1b:6c:1f:7d:20:ac:b1:09:0e:9b:95:
7e:3f:6e:9c:42:7d:8d:c0:ba:4d:0a:d5:63:82:62:
6d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E8:27:D4:B9:34:C1:48:70:17:97:1C:27:67:73:22:6F:48:8F:C2
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A17B/5F244F0E35BB11F0A9427EEBDAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A17B/5F244F0E35BB11F0A9427EEBDAE4EC9C/mugn1Lk0wUhwF5ccJ2dzIm9Ij8I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327716
sbgp-ipAddrBlock: critical
IPv4:
154.70.144.0/21
IPv6:
2c0f:f678::/32
Signature Algorithm: sha256WithRSAEncryption
03:b9:e4:89:d9:8b:88:d2:21:ad:62:29:3e:d5:d9:b0:ee:21:
77:5d:32:f7:80:e3:d7:93:c7:f9:87:aa:25:ef:00:a6:8b:5c:
f1:db:40:60:8c:a5:45:4c:18:da:3c:45:be:2d:89:18:be:49:
a4:16:ff:3a:f3:00:52:71:c8:ba:69:3a:a4:e5:20:ea:28:4c:
c2:1c:4a:07:9a:ec:ae:fc:69:32:67:3e:b1:f2:86:f8:ab:ba:
80:f8:05:2c:af:2d:9d:82:b8:99:e7:e4:33:9f:0d:47:2a:58:
6d:9e:03:e7:c3:62:7c:9c:ea:b2:cc:ac:8c:e0:98:dd:3f:84:
38:61:c8:0f:37:31:8d:cb:a6:7f:f4:8f:cc:43:c3:4c:bc:26:
e7:7c:df:bb:da:df:8c:4e:c6:7b:80:8a:20:d2:a0:bd:51:09:
23:a5:26:5e:c5:e6:15:ae:66:72:78:51:1a:e0:5a:51:78:b6:
1a:f6:d1:11:10:66:54:30:a2:83:c3:21:ff:cc:8b:a1:43:27:
7f:eb:68:8a:00:9b:c8:da:98:56:44:c6:64:1d:10:2a:70:c2:
47:5c:9e:19:00:cc:08:9a:ce:e8:eb:1a:f6:c7:ec:5f:35:2b:
b8:f4:d2:37:d6:48:d2:5b:ea:79:0d:f6:da:8a:b5:e8:48:f6:
7e:2a:f0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 17:09:59 2025 by rpki-client