Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
File: o5s35g1cIOlutaIPRdIs7vh_5bw.cer (raw, json)
Hash identifier: 3teoUnGMq7GxGYFNVAz885EbxiOlt3hTRBSpvIzIaxo=
Subject key identifier: A3:9B:37:E6:0D:5C:20:E9:6E:B5:A2:0F:45:D2:2C:EE:F8:7F:E5:BC
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 341F
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 30 Jan 2025 09:29:39 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329385
IP: 102.210.60.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13343 (0x341f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 30 09:29:39 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36BD167AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d3:a9:c7:ef:ce:14:19:6f:8d:ad:e2:48:50:
88:e8:e0:b8:52:4a:98:95:62:8a:dc:61:15:36:45:
05:f3:49:09:53:0d:c7:62:e9:ad:08:29:6b:44:f4:
ae:a6:9d:b0:6e:65:a7:f6:6e:51:fe:17:e1:78:1e:
3c:ee:52:d2:02:c8:42:73:06:ca:7d:f5:51:10:77:
5b:67:24:f1:9d:56:57:01:08:22:65:f2:09:15:93:
01:cc:96:8e:9a:5c:8e:49:c8:ec:13:83:81:be:81:
68:21:c2:01:77:d7:9a:ae:9a:65:d4:c6:1d:c8:08:
a6:94:7a:67:2f:3c:9d:03:82:06:1c:08:a1:00:3e:
e0:cb:d0:33:c7:8c:7b:1d:12:b4:65:77:51:6d:fe:
9a:dc:ef:49:b2:db:8f:ff:38:38:a0:a7:bc:98:e2:
c5:5e:f5:52:0c:d6:0c:15:a6:f1:92:87:2b:93:05:
d5:45:9b:54:5c:a7:60:3e:ac:27:1e:99:c5:07:86:
2b:2d:e5:d0:e5:5f:da:55:71:df:76:5e:a7:d9:e8:
de:c2:20:eb:c1:f1:db:a9:ac:64:cc:fd:68:94:ef:
53:41:39:d1:e7:ee:8d:af:08:aa:2c:52:db:65:57:
24:f1:80:8a:a4:be:bd:50:8f:a2:e5:0e:3f:79:9e:
84:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9B:37:E6:0D:5C:20:E9:6E:B5:A2:0F:45:D2:2C:EE:F8:7F:E5:BC
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329385
sbgp-ipAddrBlock: critical
IPv4:
102.210.60.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:87:30:06:e2:0e:30:7e:7d:ab:08:8c:62:a8:e1:e3:f3:bc:
14:03:3b:6f:92:77:9e:f8:fd:a2:ef:de:f1:09:a7:bc:f5:2b:
90:f7:a6:46:7e:79:88:96:5e:c4:a4:72:40:de:f4:2f:57:b9:
67:3a:2d:da:29:0f:9e:e0:8d:b2:e0:1b:12:27:ab:8b:d5:d9:
b1:d9:07:b5:77:4f:92:76:e5:0a:8e:74:8b:d7:6a:e9:69:0a:
aa:c8:4b:20:e7:55:41:9a:be:3f:f9:36:a8:7a:4d:f0:48:40:
23:f7:7e:17:d1:a4:45:0e:df:71:01:be:c6:08:c0:79:16:2b:
0c:d6:06:dc:0f:6f:e8:2a:0b:b5:74:b3:cf:5b:31:70:5e:b7:
4a:7d:75:c6:48:81:bb:20:18:c5:f1:7f:cd:0a:15:72:03:c8:
d0:af:3b:6e:8d:2c:0e:ee:91:f0:f0:e4:4a:51:a2:c1:2d:83:
24:3b:53:bd:76:2b:c8:de:99:7b:f4:31:d7:b7:29:d4:66:4b:
5d:9d:e1:ec:c1:96:51:b1:ff:85:39:b8:ff:79:29:64:b9:8a:
9a:bc:bc:85:6d:08:04:57:65:dd:12:5c:7b:9f:ea:c9:f5:ca:
83:8a:de:49:61:6e:6f:b1:2d:47:2f:46:89:d8:7f:19:35:77:
62:21:92:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:55:23 2025 by rpki-client