Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/muu9NJ1kyzF42IIOBBzyKn9pnok.cer
File: muu9NJ1kyzF42IIOBBzyKn9pnok.cer (raw, json)
Hash identifier: iRpYJnDRQEVqzCTJtzGEELK7Wvd8sHLlNogV0AWSy54=
Subject key identifier: 9A:EB:BD:34:9D:64:CB:31:78:D8:82:0E:04:1C:F2:2A:7F:69:9E:89
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2FE4
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/AC0DD8BEC3A811EB8F648912F8AEA228/muu9NJ1kyzF42IIOBBzyKn9pnok.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/AC0DD8BEC3A811EB8F648912F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:51:39 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 2001:43f8:1470::/48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12260 (0x2fe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:51:39 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F366EFDFAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d5:b4:88:33:cc:20:8a:e5:14:fe:e5:f9:73:
98:19:97:c8:ac:e5:c1:f5:41:b6:fb:0b:d4:b0:3f:
6b:9d:0b:8c:a5:8a:7f:9f:16:92:22:f0:17:61:6c:
88:0e:58:d1:c8:26:ea:18:1d:a2:bd:95:68:b2:eb:
47:af:82:78:d6:2d:7a:9a:5d:f9:50:3a:7e:d5:65:
e2:ae:33:16:5a:b3:c0:09:6d:a8:49:a0:87:f9:a9:
94:e2:09:ff:bf:6e:2d:32:79:b9:fd:e4:41:ac:f6:
14:e8:06:6f:80:58:ae:72:b9:29:ea:e4:b3:8f:6a:
dd:11:d6:0b:4d:a3:de:36:91:ed:fc:6e:c4:d3:94:
a8:27:7c:cc:78:83:ff:08:09:64:08:a8:08:48:d6:
7b:eb:d7:ab:5c:d3:13:c2:52:c6:dd:49:da:23:94:
ab:58:58:a9:43:e9:67:fb:da:5d:ef:4b:a8:45:38:
1b:3b:4c:a4:3c:73:7c:eb:5e:35:1c:f2:62:4b:d0:
0f:bb:ab:11:38:4b:59:71:77:97:5b:04:f5:af:3e:
76:ed:0f:a7:8d:68:d9:2f:24:23:e3:fa:b5:9b:20:
1c:c3:57:8b:66:ae:bb:ce:08:ba:aa:37:56:21:dc:
71:a9:36:3a:46:d5:b7:d0:bf:74:d9:c4:89:e0:77:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EB:BD:34:9D:64:CB:31:78:D8:82:0E:04:1C:F2:2A:7F:69:9E:89
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/AC0DD8BEC3A811EB8F648912F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/AC0DD8BEC3A811EB8F648912F8AEA228/muu9NJ1kyzF42IIOBBzyKn9pnok.mft
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:1470::/48
Signature Algorithm: sha256WithRSAEncryption
34:b4:39:a9:29:2e:2a:9e:8d:44:25:b6:d6:c8:f4:1a:6f:58:
94:5c:cb:ae:66:1b:ed:d4:8f:b7:41:40:df:1d:87:48:d3:68:
79:49:8e:48:65:d7:dc:1f:2c:60:cd:3a:0a:d9:18:46:39:87:
e1:80:6e:de:29:7a:ac:06:78:f9:19:f2:25:cd:2e:aa:38:18:
d3:ef:e5:9e:da:70:66:4c:d7:f7:fe:a5:f1:80:70:fa:61:2f:
02:6d:a8:04:5c:6c:39:8e:37:ab:bb:82:96:de:66:a8:70:ab:
25:28:4d:a9:86:e8:86:65:0e:91:30:fb:9e:5f:64:d9:fd:88:
24:ed:07:28:3a:98:a6:ac:b1:dc:a9:c8:40:5a:d3:12:e5:2f:
ea:f0:0f:62:37:68:c3:bc:b2:95:59:95:a4:29:b8:df:98:8f:
51:a3:06:1f:48:ae:2a:dd:e7:c2:89:49:23:fc:73:eb:70:7e:
e9:b1:39:fd:c6:a6:1c:26:8e:a5:1c:a3:1d:7b:15:7b:60:c3:
ac:a6:5d:1a:9c:b5:db:3a:97:85:1b:d8:fa:40:b2:17:ca:84:
bc:c7:6e:9c:16:99:17:d6:c7:e8:a8:b4:5f:5f:2b:ce:12:91:
ff:0c:bd:23:a5:49:c5:89:b6:37:79:13:63:4e:a2:32:01:93:
d6:24:a5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:53:18 2025 by rpki-client