Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/r8DBa4BaS7Ouc-3CTFODgPwOmkk.cer
File: r8DBa4BaS7Ouc-3CTFODgPwOmkk.cer (raw, json)
Hash identifier: HdWQDHFcLFYdbIcuD0QGdXEJYt9zMXuCy6PfQk3B/Qw=
Subject key identifier: AF:C0:C1:6B:80:5A:4B:B3:AE:73:ED:C2:4C:53:83:80:FC:0E:9A:49
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 33A0
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 06:18:14 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329435
IP: 102.209.0.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13216 (0x33a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 06:18:14 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36F8BC2AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d8:05:28:33:81:78:37:92:23:54:9b:bd:45:
fc:3f:5f:45:96:e0:46:5e:38:d2:20:65:e7:e1:17:
9d:df:59:3f:47:e0:0e:47:5b:1d:c7:cd:11:f2:24:
34:07:c8:45:50:da:0d:52:c2:a0:71:0c:30:e5:e6:
1a:71:b0:39:b3:db:df:9e:1c:4f:50:19:04:04:b2:
4d:e5:fe:ab:7a:c5:7a:1f:98:98:c5:ba:0b:04:b3:
cc:88:3b:6b:12:b1:47:8b:bd:9d:a3:24:90:36:5b:
11:32:02:53:da:3a:40:5d:f6:01:dd:96:3e:c3:bb:
f8:67:97:c5:14:7a:2f:6d:29:12:64:62:ee:f0:ee:
dc:8e:23:26:4c:ab:45:dd:61:37:54:14:2f:0f:b5:
ea:77:fc:ff:f5:79:17:44:58:1f:00:5b:67:13:53:
e0:34:96:61:a3:b6:87:11:7b:7b:9e:2d:e7:65:3c:
38:19:da:eb:33:22:5c:6d:31:f0:a5:50:50:d7:d2:
52:67:88:f0:7a:1f:bc:57:25:b8:98:99:07:b3:e8:
c6:2c:22:53:71:15:72:43:71:8b:05:33:a6:25:a0:
29:52:3d:2b:63:10:67:b8:a8:68:02:da:5f:63:8a:
55:c3:9a:1c:60:13:51:2e:5a:ac:cb:cd:aa:a1:2f:
12:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C0:C1:6B:80:5A:4B:B3:AE:73:ED:C2:4C:53:83:80:FC:0E:9A:49
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329435
sbgp-ipAddrBlock: critical
IPv4:
102.209.0.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:1e:b6:d0:aa:b4:46:f5:86:ce:16:95:f2:8a:5b:81:4c:10:
db:6a:3e:48:8f:02:c9:ac:08:17:b4:e8:42:9d:3b:bb:c9:49:
91:71:03:89:37:1d:9e:06:ed:73:c3:c4:61:19:c9:ec:3f:b2:
2f:04:53:73:18:af:c5:bc:60:e6:4f:06:f7:ef:d6:73:20:aa:
56:cd:20:d0:76:61:4d:fc:08:f9:61:2e:8e:0e:49:42:1e:2a:
94:12:b6:f1:26:80:8b:ff:cf:d0:90:e6:94:fc:67:49:60:f0:
37:14:52:ea:d6:2a:aa:5e:20:20:b7:85:b5:61:40:2d:7e:48:
92:c1:36:b0:03:48:c2:9c:74:25:f8:c4:7e:2a:36:c6:a1:38:
13:e8:12:bf:e3:98:86:3b:82:3e:5f:b5:48:2e:a6:46:80:3c:
24:ce:2c:8b:b2:c5:23:94:34:bb:9c:d9:35:9c:37:cd:d0:2f:
82:ce:b9:18:95:04:6e:45:60:80:62:b0:13:0e:82:32:2e:0d:
89:51:c4:65:26:6e:18:2d:e1:fe:d1:60:90:81:60:93:73:d3:
93:85:4a:09:9e:2f:bc:c8:a5:a8:97:99:91:c3:29:be:7a:df:
7b:a1:aa:36:89:5b:0d:f0:91:33:5f:16:15:1f:a1:8d:6c:96:
2b:f3:27:29
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICM6AwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwNjE4MTRaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkY4QkMyQUYxMTAvBgNVBAUTKEFGQzBDMTZCODA1QTRCQjNBRTczRURD
MjRDNTM4MzgwRkMwRTlBNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDn2AUoM4F4N5IjVJu9Rfw/X0WW4EZeONIgZefhF53fWT9H4A5HWx3HzRHyJDQH
yEVQ2g1SwqBxDDDl5hpxsDmz29+eHE9QGQQEsk3l/qt6xXofmJjFugsEs8yIO2sS
sUeLvZ2jJJA2WxEyAlPaOkBd9gHdlj7Du/hnl8UUei9tKRJkYu7w7tyOIyZMq0Xd
YTdUFC8Ptep3/P/1eRdEWB8AW2cTU+A0lmGjtocRe3ueLedlPDgZ2uszIlxtMfCl
UFDX0lJniPB6H7xXJbiYmQez6MYsIlNxFXJDcYsFM6YloClSPStjEGe4qGgC2l9j
ilXDmhxgE1EuWqzLzaqhLxIHAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUr8DBa4Ba
S7Ouc+3CTFODgPwOmkkwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGOEJDMi8xMkIzMTc5MjM5RTgx
MUVGQUZCNzVGOTU3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjhCQzIvMTJCMzE3OTIzOUU4MTFFRkFGQjc1Rjk1NzYyRTk1MUEvcjhEQmE0
QmFTN091Yy0zQ1RGT0RnUHdPbWtrLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBtswHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm0QAwDQYJKoZIhvcN
AQELBQADggEBAE8ettCqtEb1hs4WlfKKW4FMENtqPkiPAsmsCBe06EKdO7vJSZFx
A4k3HZ4G7XPDxGEZyew/si8EU3MYr8W8YOZPBvfv1nMgqlbNINB2YU38CPlhLo4O
SUIeKpQStvEmgIv/z9CQ5pT8Z0lg8DcUUurWKqpeICC3hbVhQC1+SJLBNrADSMKc
dCX4xH4qNsahOBPoEr/jmIY7gj5ftUgupkaAPCTOLIuyxSOUNLuc2TWcN83QL4LO
uRiVBG5FYIBisBMOgjIuDYlRxGUmbhgt4f7RYJCBYJNz05OFSgmeL7zIpaiXmZHD
Kb5633uhqjaJWw3wkTNfFhUfoY1slivzJyk=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:29:49 2025 by rpki-client