Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.cer
File: ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.cer (raw, json)
Hash identifier: 6jqec0ZyCLyb1jcmm0CgWPO1e8mhZmi7PLGQxFbu180=
Subject key identifier: BA:2F:59:24:43:87:29:C5:C7:BA:80:80:73:76:1C:EC:34:7E:3C:BA
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 352F
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 03 Jun 2025 00:05:24 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329325
IP: 102.206.48.0/22
IP: 102.211.56.0/22
IP: 2c0f:6c0::/28
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 07:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13615 (0x352f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jun 3 00:05:24 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36DE5F0AF, serialNumber=BA2F5924438729C5C7BA808073761CEC347E3CBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d0:c3:b4:9e:46:c0:f0:23:52:e1:0c:27:6f:
2e:99:db:2c:b6:c2:9d:63:e9:c5:d9:1e:ac:e2:0b:
7d:83:0f:7c:e4:7b:86:c8:a6:7d:fa:e6:10:36:4a:
cf:61:50:56:22:10:dc:58:9c:71:ce:32:ce:58:d1:
1a:2b:16:3e:b2:d2:59:18:41:e6:f3:90:81:f5:e4:
c5:e0:7b:dc:08:26:03:48:ce:12:30:eb:17:90:5c:
11:ad:a5:c2:29:9f:e9:bd:5d:a8:ca:31:79:55:05:
81:b5:00:be:9b:7e:73:9e:00:1a:ea:72:45:90:56:
4e:34:9b:2f:11:60:89:5d:ba:e1:7b:00:78:ff:f6:
ea:5a:64:af:c6:05:9a:d1:1d:c1:df:e7:12:9f:42:
6c:bf:be:d1:58:7f:ec:9c:79:98:66:99:30:ec:51:
3e:7a:27:40:35:d7:72:4f:42:e2:2e:26:c2:2b:b7:
bb:3b:4e:d9:6f:1e:6c:91:7e:7f:f8:e0:ed:d8:03:
a4:9c:ee:5e:40:1b:a0:12:51:1b:ee:36:6c:91:29:
0f:0e:b2:34:07:cc:3d:cc:9e:71:06:d8:52:91:65:
fa:21:2d:f6:3b:b5:8b:ad:4b:a1:a4:dd:2c:9d:36:
d6:20:43:d7:1c:4d:53:92:14:af:c5:b0:b7:28:26:
7b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2F:59:24:43:87:29:C5:C7:BA:80:80:73:76:1C:EC:34:7E:3C:BA
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329325
sbgp-ipAddrBlock: critical
IPv4:
102.206.48.0/22
102.211.56.0/22
IPv6:
2c0f:6c0::/28
Signature Algorithm: sha256WithRSAEncryption
ae:65:87:7e:de:12:4a:3e:b1:9f:a9:35:6a:27:d9:af:43:fc:
5f:24:34:ef:44:f9:77:ec:1a:25:48:76:0b:a2:b6:7b:ea:02:
e5:3e:a9:3d:eb:12:0f:1c:da:80:ab:6c:65:e7:54:3b:b5:5c:
cf:e2:45:14:b6:6a:28:6b:a5:e3:4e:bd:00:44:52:ce:1e:26:
d8:2a:f3:ac:bb:cb:59:7e:db:e7:7c:65:23:73:24:fe:fe:a1:
4f:ac:1c:47:e7:ef:1f:50:bc:02:52:33:67:e6:d6:ab:1a:f7:
18:42:a2:f2:05:a0:e0:28:42:4a:68:1b:96:c5:33:9c:c2:bd:
ba:15:4f:f9:f8:eb:bd:95:84:74:d8:a3:b8:e4:2b:d6:5a:ef:
f0:d4:75:fc:37:ec:6e:26:1c:64:9d:93:e4:4a:3b:e2:f6:c9:
f5:8c:4d:88:bb:47:0b:9d:45:86:1e:1c:cf:d3:f7:a1:8b:28:
99:c3:76:98:07:ba:f4:03:f9:5c:d8:74:0a:c2:72:a1:36:f1:
9c:19:97:64:fd:97:d6:57:01:78:03:a0:92:3e:2d:1e:2a:70:
4e:dd:5f:a6:88:63:93:33:26:84:e9:8a:e2:84:02:71:43:3b:
27:d7:48:41:98:23:8e:dc:d7:7a:e9:e7:2d:15:6c:d3:c8:30:
b2:37:c9:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:07:48 2025 by rpki-client