Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/pfjRvVkiC4dTo3nUoz0jv0IysTY.cer
File: pfjRvVkiC4dTo3nUoz0jv0IysTY.cer (raw, json)
Hash identifier: xw7bj0enABvfGUXoCnJfPHcGBYWkuDywdBBpd9Vd1lo=
Subject key identifier: A5:F8:D1:BD:59:22:0B:87:53:A3:79:D4:A3:3D:23:BF:42:32:B1:36
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2D83
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:47:46 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 102.221.240.0/22
IP: 2c0f:e9c0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11651 (0x2d83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:47:46 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F362B5D1AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7d:8c:84:be:4f:5e:cd:c7:19:23:94:cd:61:
4b:fe:6f:3e:a8:46:c5:1d:12:25:c7:e7:c0:7b:58:
ae:a2:06:67:4d:16:fa:fb:6e:23:5d:bc:03:37:e2:
3d:77:6f:4d:8b:2b:e9:3a:37:2a:c4:7f:e7:fd:43:
ff:94:2e:2c:68:00:f0:31:d8:0f:a8:8e:1a:12:e0:
da:be:ff:de:4a:0f:40:06:06:57:5c:5f:ee:eb:4a:
ee:c4:d6:15:f7:e3:e8:35:61:e0:5c:44:80:88:d7:
b2:bd:ee:83:19:b6:87:6f:c1:57:4e:de:38:d4:62:
39:23:39:4a:f6:66:81:51:16:90:46:5d:f8:59:7d:
aa:16:0e:57:fd:d2:3c:9a:35:01:4a:e3:49:a1:6f:
b5:3d:8c:30:03:80:fb:18:ad:a3:2a:b7:2c:30:26:
9f:a0:6d:b6:dd:f7:ea:e5:07:fb:5a:12:c5:ec:49:
59:52:5e:ac:41:8d:92:9c:20:42:a7:86:ab:d1:b9:
41:fb:7c:2d:dc:e4:6c:d4:24:c8:b5:6b:a6:03:41:
9b:9a:6b:f1:27:39:45:de:0c:80:aa:93:f7:94:07:
43:14:ba:d8:94:93:eb:35:2e:6e:63:46:c2:ee:41:
97:92:6d:46:2c:53:6c:87:2f:7c:9c:cb:77:0d:f8:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F8:D1:BD:59:22:0B:87:53:A3:79:D4:A3:3D:23:BF:42:32:B1:36
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft
sbgp-ipAddrBlock: critical
IPv4:
102.221.240.0/22
IPv6:
2c0f:e9c0::/32
Signature Algorithm: sha256WithRSAEncryption
47:6c:2f:67:c9:dc:7b:a1:86:2d:99:aa:ca:3e:f2:98:77:5c:
36:9b:26:f2:ba:9e:69:d6:bb:fc:e4:37:a5:ee:de:b6:2e:8a:
63:64:a4:3b:e9:09:6f:7d:b1:93:1a:fb:ac:b5:48:ed:a4:07:
63:da:2f:ab:2e:86:38:2d:93:41:9c:25:41:2d:12:c8:86:28:
b4:e8:a5:c4:ae:a2:e8:e2:97:b1:b7:b2:c3:3d:6c:a2:80:17:
76:5d:49:5a:58:a1:2a:01:0e:77:96:4e:e6:49:c4:ad:d2:99:
43:f9:c9:69:c5:31:79:69:99:b3:cb:7f:ad:c5:03:f3:58:96:
26:8d:8d:c6:26:e0:7a:51:9c:65:99:68:ad:3e:07:3c:c1:63:
90:82:93:c8:63:be:47:60:48:50:d3:2f:91:a8:ea:9a:e6:fa:
59:7a:41:6b:b5:bb:69:97:d3:70:a6:a4:1b:d6:cd:86:64:a1:
de:de:9e:c5:46:c1:83:b6:f1:5f:ce:5e:e7:e8:6b:a2:39:d9:
84:42:3d:c6:d9:6f:ac:7b:e6:84:ed:d3:28:4b:43:2f:d0:fc:
9d:2f:45:df:55:1f:6f:22:a1:64:54:c5:8c:b3:c1:b9:00:b4:
24:e4:67:44:00:81:72:b1:1f:58:c8:ab:d6:90:4c:3b:83:31:
37:76:dc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:31:51 2025 by rpki-client