Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/tqq1AixPm4Kp_ukaPUxdheRtiR8.cer
File: tqq1AixPm4Kp_ukaPUxdheRtiR8.cer (raw, json)
Hash identifier: 1GVFksN2H9DZ6TRfeMoqQWftLCXaiOz2vsjS4AyzyWc=
Subject key identifier: B6:AA:B5:02:2C:4F:9B:82:A9:FE:E9:1A:3D:4C:5D:85:E4:6D:89:1F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2E51
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:30:04 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 25695
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11857 (0x2e51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:30:04 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3644FCCAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c2:02:f6:26:93:ac:b2:44:4f:02:80:9f:75:
6a:09:40:1f:3f:42:6d:29:c4:1d:d5:1e:6f:c7:9b:
5c:9f:3c:41:cf:d3:33:40:5c:62:d3:ee:51:24:bc:
5f:56:50:0f:e1:22:cc:29:32:2a:1b:e4:59:2c:1c:
14:f8:9f:ff:9c:94:4a:48:15:31:3d:68:1a:ed:a0:
84:43:5a:77:00:a7:29:e4:c4:9d:1d:45:1b:18:83:
16:df:6c:94:e2:c7:41:13:a6:6a:03:7a:36:46:b3:
97:65:74:05:26:5e:81:04:de:99:ce:32:fd:2d:1d:
af:82:92:05:4d:79:73:c4:f1:33:cb:06:0a:fc:ca:
c3:d4:d9:54:13:9a:d7:e6:cf:0b:aa:2b:0a:42:f5:
ce:6a:17:f0:0b:71:d3:13:91:ae:f3:89:2b:29:f4:
ee:d6:0d:ba:d3:ac:d7:5c:36:47:44:bf:1e:f3:1c:
1a:bf:9a:18:e3:6e:47:5a:c6:5e:b3:50:58:0a:66:
c3:85:b6:14:a7:d9:c4:77:99:52:19:35:fb:42:b2:
ef:e2:c2:3d:cd:78:c2:cc:da:8c:d5:0f:e6:a2:11:
a3:77:df:f7:07:e5:fa:5f:8b:55:96:65:f9:65:f8:
fd:48:4d:aa:e9:cd:e9:24:42:a6:43:e5:ef:2a:5d:
c2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AA:B5:02:2C:4F:9B:82:A9:FE:E9:1A:3D:4C:5D:85:E4:6D:89:1F
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25695
Signature Algorithm: sha256WithRSAEncryption
01:46:17:74:36:e3:1f:1f:22:ce:67:94:f7:14:ca:bd:93:cd:
9a:23:b0:b6:45:78:4b:a4:37:e5:c4:1e:95:ba:0f:09:64:a6:
e9:bd:0a:a4:2f:39:48:e1:34:0f:61:9c:a3:27:92:27:8a:f9:
c8:a4:e6:ab:1c:05:13:56:c5:4c:bb:4f:5d:8a:57:a3:a5:12:
d3:ca:b9:c5:b4:6d:41:7f:44:28:a3:cc:cc:5e:ae:54:80:18:
69:49:75:0d:c0:fa:99:10:3a:f7:dc:2c:e8:f5:95:45:47:5e:
1d:72:6a:fc:c5:ea:c6:ed:9d:1f:92:13:2e:6e:70:5d:ce:b6:
72:d1:08:d9:c1:40:2d:89:b1:bc:a5:ed:96:f2:e9:3e:99:09:
8e:3a:52:49:e9:15:29:18:53:e5:3c:e9:ed:ba:85:a7:3a:db:
c1:a5:c4:d9:4b:35:64:df:13:c6:1d:a6:3d:a1:58:83:bf:89:
3c:91:86:64:03:94:80:36:5c:0b:52:4f:d8:fd:ab:44:07:1e:
de:3c:8a:97:68:99:67:aa:69:88:cf:9b:2e:ea:df:05:30:58:
2c:34:82:ea:97:2b:02:81:38:a5:d3:51:f4:dc:37:59:37:b3:
55:98:83:e2:e5:bb:58:19:54:e2:91:63:47:eb:89:c2:31:c7:
b3:1e:56:b2
-----BEGIN CERTIFICATE-----
MIIF9DCCBNygAwIBAgICLlEwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMTMwMDRaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjQ0RkNDQUYxMTAvBgNVBAUTKEI2QUFCNTAyMkM0RjlCODJBOUZFRTkx
QTNENEM1RDg1RTQ2RDg5MUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQClwgL2JpOsskRPAoCfdWoJQB8/Qm0pxB3VHm/Hm1yfPEHP0zNAXGLT7lEkvF9W
UA/hIswpMiob5FksHBT4n/+clEpIFTE9aBrtoIRDWncApynkxJ0dRRsYgxbfbJTi
x0ETpmoDejZGs5dldAUmXoEE3pnOMv0tHa+CkgVNeXPE8TPLBgr8ysPU2VQTmtfm
zwuqKwpC9c5qF/ALcdMTka7ziSsp9O7WDbrTrNdcNkdEvx7zHBq/mhjjbkdaxl6z
UFgKZsOFthSn2cR3mVIZNftCsu/iwj3NeMLM2ozVD+aiEaN33/cH5fpfi1WWZfll
+P1ITarpzekkQqZD5e8qXcL7AgMBAAGjggLpMIIC5TAdBgNVHQ4EFgQUtqq1AixP
m4Kp/ukaPUxdheRtiR8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0NEZDQy9CMTQwQTRGQ0QxMkEx
MUVDOTJCMzg1RUFGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDRGQ0MvQjE0MEE0RkNEMTJBMTFFQzkyQjM4NUVBRjEyMjI0NjgvdHFxMUFp
eFBtNEtwX3VrYVBVeGRoZVJ0aVI4Lm1mdDAZBggrBgEFBQcBCAEB/wQKMAigBjAE
AgJkXzANBgkqhkiG9w0BAQsFAAOCAQEAAUYXdDbjHx8izmeU9xTKvZPNmiOwtkV4
S6Q35cQelboPCWSm6b0KpC85SOE0D2GcoyeSJ4r5yKTmqxwFE1bFTLtPXYpXo6US
08q5xbRtQX9EKKPMzF6uVIAYaUl1DcD6mRA699ws6PWVRUdeHXJq/MXqxu2dH5IT
Lm5wXc62ctEI2cFALYmxvKXtlvLpPpkJjjpSSekVKRhT5Tzp7bqFpzrbwaXE2Us1
ZN8Txh2mPaFYg7+JPJGGZAOUgDZcC1JP2P2rRAce3jyKl2iZZ6ppiM+bLurfBTBY
LDSC6pcrAoE4pdNR9Nw3WTezVZiD4uW7WBlU4pFjR+uJwjHHsx5Wsg==
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:32:45 2025 by rpki-client