Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer
File: u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer (raw, json)
Hash identifier: xjKrRw4zyXKf65fGGQxDgizGF+1YQ5YJDQRZ0Tilhoc=
Subject key identifier: BB:9A:F1:B8:6F:31:AC:F2:77:AB:3A:06:D1:8E:79:EF:5C:8B:AD:79
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2F91
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:35:08 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37578
AS: 37704
AS: 37770
AS: 37786
AS: 37789
AS: 328100
IP: 196.6.220.0/24
IP: 196.49.22.0/24
IP: 196.60.2.0/24
IP: 196.60.36.0/24
IP: 196.60.68.0/24
IP: 196.60.80.0/24
IP: 196.223.21.0/24
IP: 2001:43f8:60::/48
IP: 2001:43f8:c0::/47
IP: 2001:43f8:7b0::/48
IP: 2001:43f8:c40::/48
IP: 2001:43fc:4000::/48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12177 (0x2f91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:35:08 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36E084CAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:f3:f8:fc:c0:11:7c:14:a0:53:c5:68:82:
60:ee:b5:96:ff:82:27:ff:36:57:e6:45:d3:58:35:
12:a9:82:ed:d1:56:dc:bf:97:37:19:69:0e:c3:ff:
b0:62:eb:1d:f9:1d:31:44:df:7f:06:33:60:b5:5c:
bb:96:dc:8c:44:f4:12:ea:45:af:6a:df:6d:84:56:
6f:55:b1:2f:b8:43:e8:1c:52:ec:1c:ce:3d:5b:a8:
81:b9:30:2c:4a:8a:56:af:05:e0:ea:cf:48:4d:c1:
18:f5:30:e6:7b:8d:71:a5:8c:35:6a:31:bd:7a:bd:
99:90:d0:b6:d7:1f:59:59:1b:ed:56:f3:f0:ef:26:
7c:8a:80:2f:17:37:77:b7:fa:ba:81:4c:7b:32:ff:
a6:08:a5:fb:44:2e:a7:35:e9:8a:2e:59:fe:ee:1d:
75:ee:73:5b:63:9e:93:70:5e:67:bb:75:ca:9a:27:
dc:2f:87:39:16:28:af:e3:ae:81:37:fe:8a:11:83:
8e:84:5c:74:33:a0:9c:db:d7:22:94:e3:10:13:ac:
53:16:d5:de:46:0a:db:4f:bc:71:6a:4a:08:48:ae:
ca:9c:50:fe:11:30:b7:0e:c6:d7:a2:b8:2e:4b:88:
9a:e5:fa:74:57:6d:d7:b3:75:0a:70:77:58:91:cb:
a6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9A:F1:B8:6F:31:AC:F2:77:AB:3A:06:D1:8E:79:EF:5C:8B:AD:79
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37578
37704
37770
37786
37789
328100
sbgp-ipAddrBlock: critical
IPv4:
196.6.220.0/24
196.49.22.0/24
196.60.2.0/24
196.60.36.0/24
196.60.68.0/24
196.60.80.0/24
196.223.21.0/24
IPv6:
2001:43f8:60::/48
2001:43f8:c0::/47
2001:43f8:7b0::/48
2001:43f8:c40::/48
2001:43fc:4000::/48
Signature Algorithm: sha256WithRSAEncryption
4a:32:1a:85:ad:49:1a:75:c3:78:a5:2b:e9:f6:4f:23:15:ca:
3f:c9:05:e2:07:a0:33:f3:b7:3c:ac:f7:3e:cf:f1:10:e5:51:
d4:e0:d7:b1:72:63:45:db:5c:05:50:6a:26:ae:ce:8b:bf:2a:
d7:d2:50:40:2f:9a:aa:2e:26:c2:c8:14:a8:2c:7c:51:08:33:
21:69:97:fd:35:ff:7e:e4:e0:98:6c:22:a8:31:c6:75:45:fb:
55:6c:6f:92:91:06:a5:19:7e:34:17:1d:1f:ff:fb:3d:a4:a2:
78:23:34:9d:a2:04:fe:e0:50:fa:1a:02:b2:75:3f:61:ef:5c:
24:44:bd:80:23:83:3a:6d:34:ee:7f:fa:c0:c0:70:d6:ae:33:
0b:cb:79:cc:e0:8a:d2:fa:58:ec:b7:5b:ce:01:93:e9:71:5b:
f5:de:f4:e2:81:76:c1:58:bd:84:73:88:02:e4:ee:a3:e8:12:
05:6b:e9:ec:e5:1c:0a:9b:d4:40:2f:24:a0:d8:3f:dd:63:4d:
85:6c:f5:84:0b:ec:42:8c:a5:25:56:e6:db:cf:15:f1:8c:65:
08:cb:06:d9:84:7f:7f:31:00:de:82:49:c9:72:0d:7f:33:30:
d0:dc:7b:7a:c0:ae:39:88:ef:4e:fd:bf:cf:0f:54:b2:2e:41:
89:9f:9c:53
-----BEGIN CERTIFICATE-----
MIIGiDCCBXCgAwIBAgICL5EwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMjM1MDhaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkUwODRDQUYxMTAvBgNVBAUTKEJCOUFGMUI4NkYzMUFDRjI3N0FCM0Ew
NkQxOEU3OUVGNUM4QkFENzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBUvP4/MARfBSgU8VogmDutZb/gif/NlfmRdNYNRKpgu3RVty/lzcZaQ7D/7Bi
6x35HTFE338GM2C1XLuW3IxE9BLqRa9q322EVm9VsS+4Q+gcUuwczj1bqIG5MCxK
ilavBeDqz0hNwRj1MOZ7jXGljDVqMb16vZmQ0LbXH1lZG+1W8/DvJnyKgC8XN3e3
+rqBTHsy/6YIpftELqc16YouWf7uHXXuc1tjnpNwXme7dcqaJ9wvhzkWKK/jroE3
/ooRg46EXHQzoJzb1yKU4xATrFMW1d5GCttPvHFqSghIrsqcUP4RMLcOxteiuC5L
iJrl+nRXbdezdQpwd1iRy6arAgMBAAGjggN9MIIDeTAdBgNVHQ4EFgQUu5rxuG8x
rPJ3qzoG0Y5571yLrXkwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFMDg0Qy82QTlEQUU0MjBGNUMx
MUVBOTE1RDUzNDFGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RTA4NEMvNkE5REFFNDIwRjVDMTFFQTkxNUQ1MzQxRjhBRUEyMjgvdTVyeHVH
OHhyUEozcXpvRzBZNTU3MXlMclhrLm1mdDAzBggrBgEFBQcBCAEB/wQkMCKgIDAe
AgMAksoCAwCTSAIDAJOKAgMAk5oCAwCTnQIDBQGkMHgGCCsGAQUFBwEHAQH/BGkw
ZzAwBAIAATAqAwQAxAbcAwQAxDEWAwQAxDwCAwQAxDwkAwQAxDxEAwQAxDxQAwQA
xN8VMDMEAgACMC0DBwAgAUP4AGADBwEgAUP4AMADBwAgAUP4B7ADBwAgAUP4DEAD
BwAgAUP8QAAwDQYJKoZIhvcNAQELBQADggEBAEoyGoWtSRp1w3ilK+n2TyMVyj/J
BeIHoDPztzys9z7P8RDlUdTg17FyY0XbXAVQaiauzou/KtfSUEAvmqouJsLIFKgs
fFEIMyFpl/01/37k4JhsIqgxxnVF+1Vsb5KRBqUZfjQXHR//+z2kongjNJ2iBP7g
UPoaArJ1P2HvXCREvYAjgzptNO5/+sDAcNauMwvLeczgitL6WOy3W84Bk+lxW/Xe
9OKBdsFYvYRziALk7qPoEgVr6ezlHAqb1EAvJKDYP91jTYVs9YQL7EKMpSVW5tvP
FfGMZQjLBtmEf38xAN6CSclyDX8zMNDce3rArjmI7079v88PVLIuQYmfnFM=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:43:55 2025 by rpki-client