Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
File: tBCb7cR3hyfiTpo3fMYXvAfApzU.cer (raw, json)
Hash identifier: IzsjC7mln/WTZjQ1llNA9MG3nMdJusEiZc7471FGyg4=
Subject key identifier: B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3139
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:01:56 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328792
IP: 102.221.52.0/22
IP: 2c0f:5600::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12601 (0x3139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:01:56 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3697B99AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:7c:c2:74:ae:d4:e0:28:09:c8:0e:c3:37:
85:c8:56:1a:74:98:68:3a:73:63:03:cd:30:73:d1:
d4:aa:19:02:a6:b5:bf:a8:4e:fd:70:f3:ca:2d:42:
66:2a:e3:f8:93:1e:a8:2e:8d:d9:d7:71:dc:47:d5:
6c:76:9e:bb:84:07:6c:87:c0:fe:7f:cb:eb:49:9e:
e7:25:31:ad:0c:7a:c6:84:c2:1e:09:5d:d6:10:fe:
a5:fd:cd:44:dd:3b:e6:13:22:d1:51:d4:a2:7c:f7:
44:18:59:d7:77:76:1e:99:4d:02:33:f2:8e:2b:9e:
ae:fa:1b:28:c8:c5:7d:8f:28:ae:3b:1b:f0:64:da:
ea:f0:33:e8:6f:72:49:a9:c7:03:5a:64:2f:39:01:
83:01:ca:92:02:4b:39:f8:c7:ad:60:ba:2a:59:7f:
17:1b:1c:1b:c5:7d:53:de:50:b5:09:70:03:ec:64:
9f:16:de:31:9d:bd:1b:3b:cd:aa:63:ae:65:09:08:
8f:83:7e:e2:aa:bd:52:86:0c:09:4a:8a:fa:09:92:
5b:50:53:39:e5:b7:4f:fa:b6:cb:a9:71:b8:24:4d:
c7:04:ad:fd:0a:a5:53:58:28:c3:de:19:72:c1:a8:
7c:84:fb:da:1f:00:5b:9f:58:50:1b:22:58:51:57:
7f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328792
sbgp-ipAddrBlock: critical
IPv4:
102.221.52.0/22
IPv6:
2c0f:5600::/32
Signature Algorithm: sha256WithRSAEncryption
55:38:7d:46:29:d2:b1:4f:e2:55:b4:8e:32:24:08:e3:b9:f3:
dc:52:9b:9f:ec:7b:44:41:26:88:0f:b7:03:f7:59:1a:42:d6:
8a:73:c9:1b:36:e7:25:03:8e:1e:9e:95:91:70:a6:73:fb:16:
2e:74:42:ef:c3:87:87:20:1b:76:76:b5:b3:63:5a:07:81:5d:
10:1b:3f:fc:c7:2b:ca:e1:db:52:c4:c7:30:41:1f:4b:80:cf:
52:b3:64:b6:ff:42:93:be:8c:29:68:bb:e0:bd:31:f7:3e:4a:
d9:ef:32:38:3f:6c:b4:d4:0c:83:bb:12:59:1d:0a:f5:24:51:
2a:37:50:c4:4e:6a:82:2c:08:75:16:f1:dc:74:09:38:c1:5a:
0c:41:33:3a:d7:b4:bd:18:aa:05:71:43:43:b5:d9:1e:b8:30:
83:59:1e:86:be:91:ef:b8:6a:e2:9a:47:b9:eb:3b:38:bb:bf:
49:8b:4e:9b:69:84:8c:af:32:53:7b:2e:03:6d:cd:4f:ab:83:
08:bd:c7:1b:01:96:d5:f9:5e:1d:29:de:42:3d:0b:2a:ba:06:
12:e4:80:e7:14:2c:2e:53:73:de:4c:3f:60:7e:5e:a8:32:a7:
ab:a6:fd:52:72:27:35:bd:17:81:9f:b3:ba:1f:59:96:0a:d6:
14:9f:1c:99
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICMTkwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwNDAxNTZaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjk3Qjk5QUYxMTAvBgNVBAUTKEI0MTA5QkVEQzQ3Nzg3MjdFMjRFOUEz
NzdDQzYxN0JDMDdDMEE3MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDFXXzCdK7U4CgJyA7DN4XIVhp0mGg6c2MDzTBz0dSqGQKmtb+oTv1w88otQmYq
4/iTHqgujdnXcdxH1Wx2nruEB2yHwP5/y+tJnuclMa0MesaEwh4JXdYQ/qX9zUTd
O+YTItFR1KJ890QYWdd3dh6ZTQIz8o4rnq76GyjIxX2PKK47G/Bk2urwM+hvckmp
xwNaZC85AYMBypICSzn4x61guipZfxcbHBvFfVPeULUJcAPsZJ8W3jGdvRs7zapj
rmUJCI+DfuKqvVKGDAlKivoJkltQUznlt0/6tsupcbgkTccErf0KpVNYKMPeGXLB
qHyE+9ofAFufWFAbIlhRV39DAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUtBCb7cR3
hyfiTpo3fMYXvAfApzUwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY5N0I5OS8xMUZFMzYwMDM3NjAx
MUVFQTI4QTIxMkM0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTdCOTkvMTFGRTM2MDAzNzYwMTFFRUEyOEEyMTJDNEFEOUU2RkMvdEJDYjdj
UjNoeWZpVHBvM2ZNWVh2QWZBcHpVLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBFgwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm3TQwDQQCAAIwBwMF
ACwPVgAwDQYJKoZIhvcNAQELBQADggEBAFU4fUYp0rFP4lW0jjIkCOO589xSm5/s
e0RBJogPtwP3WRpC1opzyRs25yUDjh6elZFwpnP7Fi50Qu/Dh4cgG3Z2tbNjWgeB
XRAbP/zHK8rh21LExzBBH0uAz1KzZLb/QpO+jClou+C9Mfc+StnvMjg/bLTUDIO7
ElkdCvUkUSo3UMROaoIsCHUW8dx0CTjBWgxBMzrXtL0YqgVxQ0O12R64MINZHoa+
ke+4auKaR7nrOzi7v0mLTptphIyvMlN7LgNtzU+rgwi9xxsBltX5Xh0p3kI9Cyq6
BhLkgOcULC5Tc95MP2B+Xqgyp6um/VJyJzW9F4Gfs7ofWZYK1hSfHJk=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:37:35 2025 by rpki-client