Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
File: qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer (raw, json)
Hash identifier: OWhlhImIJGyPmv6H4HhIGQxJfxDTYMWQE4R+jm5GkYI=
Subject key identifier: A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2E88
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:41:52 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328799
IP: 154.70.200.0/21
IP: 2c0f:5400::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11912 (0x2e88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:41:52 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36493E2AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:02:43:a3:46:c2:07:b5:a2:37:68:9a:ff:e6:
23:fc:af:97:5e:6d:91:28:7c:58:d1:c8:77:35:ac:
ef:cf:54:bf:c1:89:66:ec:3c:d6:92:df:4a:90:a3:
7f:96:e8:33:55:de:15:8e:d0:47:b2:e9:85:53:4b:
35:8a:8a:66:19:f6:af:14:7e:17:8d:57:47:61:27:
ee:30:d0:38:f4:72:7b:8d:0c:e1:02:95:42:eb:78:
52:f8:09:0c:ec:a9:cc:2f:d8:71:4c:25:03:14:bf:
c8:e7:80:17:87:10:60:81:74:44:f1:55:cb:8e:9d:
69:40:49:65:c7:0a:e4:cb:4c:1e:1f:1e:c8:8a:68:
bd:7d:88:26:4a:7e:bd:3e:64:4d:14:62:f2:1d:1c:
3f:90:7f:3f:ef:02:28:9f:be:44:e4:27:21:c5:80:
d9:55:e4:ed:22:2c:07:af:c1:7e:66:63:95:4f:c5:
85:c0:b8:2e:4a:75:7f:a0:d6:1c:d0:4c:f2:8f:02:
e9:f4:78:23:82:3c:1f:d8:4a:33:d9:15:5b:a5:a1:
c1:b7:72:86:c0:12:60:6b:ca:15:27:cb:c4:55:2a:
35:4d:36:3d:0e:d6:4f:49:3b:a8:e9:91:1f:3d:6e:
d3:5a:c2:fd:9f:77:18:b7:89:56:78:7c:cb:5e:d4:
6b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328799
sbgp-ipAddrBlock: critical
IPv4:
154.70.200.0/21
IPv6:
2c0f:5400::/32
Signature Algorithm: sha256WithRSAEncryption
a8:89:bd:a3:13:80:22:5a:6e:05:25:e2:a3:f0:ca:55:49:ab:
c0:5f:e2:40:fd:a3:de:9c:cb:c6:e0:2f:cd:a1:f4:5c:b2:a3:
00:3e:2a:8b:54:fd:59:d6:6e:5e:a4:52:ae:22:c1:f9:6e:7f:
b1:4b:f4:fd:e3:c0:81:be:6c:b3:ab:54:b9:c6:14:f8:0c:b8:
16:45:36:6c:df:d8:69:73:99:b3:01:de:87:9a:dd:1e:75:ee:
d8:31:bb:43:61:c0:20:02:09:4e:a6:59:13:64:8d:ab:c4:74:
09:7d:f2:e2:e3:e9:97:a3:2f:6c:c1:71:8d:98:ae:98:76:01:
f9:2b:e3:53:71:b0:c0:18:a1:7d:84:00:69:d0:bc:ad:32:17:
70:ae:66:79:30:e2:5e:1e:47:71:5e:1b:b4:91:59:d0:e1:69:
ef:3c:f3:dd:be:1f:56:26:2a:e5:5d:3c:2b:5a:01:c2:4e:bf:
ed:ec:6e:5c:c8:71:10:fc:ec:20:4d:80:b6:21:a3:7c:2f:da:
8b:99:4b:29:e6:c0:b7:d2:31:1d:3d:64:37:ea:c2:a1:78:92:
9d:83:23:be:41:0a:c5:79:be:61:bb:25:27:79:54:84:8a:30:
d3:03:74:b0:0b:07:fa:89:14:ae:f5:48:38:37:79:e9:63:e2:
57:7d:ba:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:31:51 2025 by rpki-client