Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/wI8-3FkViULC3znxQl5uuCFovj4.cer
File: wI8-3FkViULC3znxQl5uuCFovj4.cer (raw, json)
Hash identifier: aITZ+ZVIFbL9tkJnsISHyKggvbG98EJNm/8Myo06Zjc=
Subject key identifier: C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3299
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:17:51 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 327901
IP: 102.141.128.0/18
IP: 102.215.100.0/22
IP: 102.216.196.0/22
IP: 102.217.108.0/22
IP: 102.217.200.0/22
IP: 102.217.224.0/22
IP: 102.218.240.0/22
IP: 102.219.116.0/22
IP: 102.220.148.0/22
IP: 102.221.120.0/22
IP: 102.222.168.0/22
IP: 196.201.232.0/21
IP: 2c0f:f0e8::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12953 (0x3299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 05:17:51 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36C65C6AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:63:b8:0b:a2:6e:da:65:f5:6e:65:dd:bd:d0:
3d:f9:cc:c1:4c:6d:e3:99:71:3f:b9:d2:ab:f4:19:
da:cc:60:64:f9:67:bb:82:cd:92:7d:83:6a:ba:b1:
d2:4a:6a:03:61:ae:ef:d6:1c:d8:5e:58:cb:c3:bd:
73:61:82:5a:19:4c:ea:0c:99:13:d8:3a:c6:82:55:
01:77:bf:dc:5a:c3:dd:06:2e:74:b7:85:0b:84:52:
a1:40:81:76:a7:0f:6c:41:56:d6:3c:60:a7:f6:eb:
ff:10:50:4b:fa:4b:a0:e8:ad:7d:b5:3b:21:9a:be:
be:35:c4:40:62:a8:ef:0e:b4:82:27:f9:50:06:55:
b9:80:20:15:d2:c6:c4:48:ae:8a:6e:22:23:be:c5:
47:94:a5:45:3d:df:58:61:45:72:42:ae:ab:d8:24:
73:10:f0:cf:5f:c8:8d:b6:78:76:65:b9:e3:81:bd:
08:e0:f3:db:78:3f:ba:5f:0d:ca:ed:b4:e6:85:45:
da:db:0e:73:f0:01:f1:52:4b:02:50:8c:e7:d0:2d:
be:1f:c4:0e:6c:8e:00:32:09:11:81:ce:ce:07:b9:
9e:c9:09:cd:10:5d:31:bf:df:a0:d6:7c:b8:b1:bd:
f0:42:19:a3:5f:80:5c:97:f4:2f:14:e4:68:48:eb:
e9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8F:3E:DC:59:15:89:42:C2:DF:39:F1:42:5E:6E:B8:21:68:BE:3E
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C65C6/0338D9B4CF5B11EBB2E7A516F8AEA228/wI8-3FkViULC3znxQl5uuCFovj4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327901
sbgp-ipAddrBlock: critical
IPv4:
102.141.128.0/18
102.215.100.0/22
102.216.196.0/22
102.217.108.0/22
102.217.200.0/22
102.217.224.0/22
102.218.240.0/22
102.219.116.0/22
102.220.148.0/22
102.221.120.0/22
102.222.168.0/22
196.201.232.0/21
IPv6:
2c0f:f0e8::/32
Signature Algorithm: sha256WithRSAEncryption
bd:2c:42:27:24:78:cc:18:68:90:a7:e0:f3:3a:00:eb:4a:66:
47:aa:84:89:6c:37:1c:3a:bc:22:0c:cd:60:24:89:22:de:f0:
09:bb:1e:e1:ef:18:77:19:82:4e:c8:6a:94:35:2c:ed:2d:80:
75:ac:7f:73:74:21:d2:73:c9:01:5e:b7:f2:43:3f:1d:41:46:
b2:5e:54:8c:3a:02:8c:90:d8:88:39:b4:b9:de:44:d1:78:aa:
35:b4:e6:af:1d:05:7d:f0:07:cb:42:b7:cc:5e:dc:22:ff:fa:
f6:19:39:79:ff:ce:26:58:7f:71:0c:bd:ec:49:d2:01:19:22:
96:fe:cf:65:56:a9:16:1c:28:18:45:93:ef:3c:d0:f6:53:2d:
0c:f2:a5:9f:19:3c:19:53:06:95:13:72:61:96:7d:a0:98:1c:
43:02:7d:26:db:af:8a:43:1c:a6:d2:ba:fe:90:cf:a4:6c:50:
a0:5d:d3:2b:fb:64:cd:10:04:c3:17:aa:7d:b1:79:72:f2:cd:
9c:ec:b1:68:ff:79:dd:f1:34:94:d1:d7:69:09:a1:1a:66:d9:
9d:8b:fa:91:5b:76:bc:bc:b6:9d:41:36:2a:56:b0:95:c1:de:
5a:eb:3e:2c:0e:9e:34:49:2d:58:7e:fc:fc:27:1d:d5:0f:16:
a8:5b:d0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:47:02 2025 by rpki-client