Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/saGqcslle0DmFrw3PhPPk7Ip6z8.cer
File: saGqcslle0DmFrw3PhPPk7Ip6z8.cer (raw, json)
Hash identifier: CKDygfDnknXIWmBim3zl70MdN8pErwW5rJyxzE7MJvg=
Subject key identifier: B1:A1:AA:72:C9:65:7B:40:E6:16:BC:37:3E:13:CF:93:B2:29:EB:3F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3613
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 03 Sep 2025 00:02:20 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328676
IP: 102.207.204.0/22
IP: 102.214.44.0/23
IP: 102.223.7.0/24
IP: 2c0f:31c0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 05:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13843 (0x3613)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Sep 3 00:02:20 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F366372CAF, serialNumber=B1A1AA72C9657B40E616BC373E13CF93B229EB3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7f:56:d6:62:7c:0d:8c:71:c4:4b:2d:af:5e:
9b:7b:a3:ad:c3:a5:f1:1e:9a:ab:67:9d:5e:6e:2f:
e4:4e:0f:01:ab:34:fb:4a:e0:f9:04:2f:70:fc:eb:
36:55:f9:bb:af:25:7e:4f:4e:02:da:47:87:9b:c4:
a9:23:a7:69:9a:d9:d8:80:d4:44:12:ca:f2:31:9c:
46:46:f0:ec:a3:36:4e:49:54:5b:65:83:84:69:c7:
cb:f1:1c:1f:77:31:40:28:6a:8c:cf:b6:70:19:88:
d7:11:5e:0b:9d:f0:17:09:6a:30:f6:f8:b9:b6:f3:
cc:de:29:f7:43:5f:e1:5e:34:85:12:5e:d0:e6:62:
5d:cc:86:59:0f:81:7c:e4:ac:04:40:e6:c2:6a:15:
a6:ab:a5:bf:bc:21:c7:0a:f0:d7:02:1a:94:88:5b:
43:5d:37:cb:fb:a7:c6:ec:00:e5:64:27:67:fa:c7:
ab:32:f4:11:c5:85:98:b8:72:6e:f5:0d:7c:95:8c:
36:69:48:f5:b7:16:95:42:50:06:5c:4d:6c:e9:d6:
e7:aa:68:fc:f8:ee:ec:d1:74:ce:03:bf:14:ae:6f:
cc:19:26:17:80:46:e9:07:b2:ed:8f:37:0f:e0:22:
3c:27:ba:c0:b4:7c:c0:fe:0b:05:e8:50:f7:33:65:
87:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A1:AA:72:C9:65:7B:40:E6:16:BC:37:3E:13:CF:93:B2:29:EB:3F
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366372C/5F217C34657F11ED964AEF85F1222468/saGqcslle0DmFrw3PhPPk7Ip6z8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328676
sbgp-ipAddrBlock: critical
IPv4:
102.207.204.0/22
102.214.44.0/23
102.223.7.0/24
IPv6:
2c0f:31c0::/32
Signature Algorithm: sha256WithRSAEncryption
4f:79:30:62:96:2d:78:86:55:f5:20:e3:cf:7c:3c:08:ce:d5:
84:6f:8d:7b:f1:15:14:3e:6e:fc:1d:e1:07:24:93:96:27:de:
e4:75:c7:51:ec:19:a6:af:8c:c8:65:56:7d:b7:e0:10:ab:41:
f6:63:57:b3:06:ea:84:d9:59:f9:7f:4a:22:a7:08:dd:2c:4e:
3c:5c:0f:26:46:9b:30:79:e7:4e:a1:2f:6d:c0:55:d5:db:2a:
d9:14:5e:7d:75:d3:bb:ca:f0:eb:ef:a2:40:a2:c2:f7:c9:db:
7b:81:bc:eb:4d:73:97:8c:9f:8d:6e:7d:f5:80:ae:b8:23:bc:
98:20:87:97:a2:44:9d:6a:17:8f:4b:f4:58:1b:b5:b7:58:c9:
dd:4c:cb:15:5b:6c:75:e8:2c:32:bc:9f:c0:9a:73:e6:84:ff:
e4:fb:ea:39:0e:74:99:f8:14:49:cb:ab:2a:33:db:41:9b:15:
17:1e:5d:86:a7:b9:f7:70:cf:dd:7a:21:23:ae:b5:37:ef:a0:
f1:f2:d5:f1:90:f7:4a:95:83:d2:bb:a1:3a:3a:fc:46:93:20:
b0:b3:dc:14:fa:dd:60:96:ff:50:81:8b:5b:70:a3:42:63:fa:
24:41:14:99:e0:15:b6:fd:6a:0d:d6:65:6a:d0:03:60:55:42:
30:56:bc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:43:03 2025 by rpki-client