Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
File: wMDnGZy4QKJJjB47pWdvngwGKGg.cer (raw, json)
Hash identifier: RGiK9V7X6OTD39PwBx+c54mQdMw1w51Gsj1TwvxPkvw=
Subject key identifier: C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3407
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Fri 24 Jan 2025 00:01:43 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37114
AS: 37137
IP: 41.79.252.0/22
IP: 102.213.168.0/22
IP: 102.223.76.0/22
IP: 2c0f:7b80::/32
IP: 2c0f:fc80::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13319 (0x3407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 24 00:01:43 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3650F65AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ef:32:e0:aa:53:d2:82:3f:c6:61:d8:08:52:
15:96:6e:28:d0:96:63:12:cc:b8:89:00:23:24:76:
3f:61:df:ab:be:1c:19:27:cb:60:8d:78:3c:b5:97:
da:1e:2d:09:a2:0e:18:ec:17:ef:6a:ae:0d:ff:8b:
a7:73:73:8b:59:30:dc:ff:78:51:d6:9a:a0:8b:31:
86:96:7f:40:b5:9f:f2:b7:14:dc:dd:ba:c0:15:1b:
cc:17:48:3b:58:e8:a3:52:da:18:e4:5c:e8:fb:11:
56:70:42:54:b2:cb:31:39:ca:bd:06:e3:ef:96:75:
02:c0:3b:48:78:96:90:1f:77:cd:b7:b7:8b:1c:fd:
91:55:10:0b:d4:13:84:9d:58:43:92:46:bc:b7:22:
f7:8e:d6:77:d1:29:c8:dd:6d:13:b9:ef:90:8b:ca:
23:c5:4a:60:91:61:cd:68:d4:7e:4a:71:ba:44:65:
c1:37:7c:1b:28:64:43:42:f3:cd:76:08:9b:0a:1c:
e4:d4:8d:d1:b4:b6:56:de:e3:bf:61:7d:89:00:27:
b7:8d:b1:d9:86:ac:dd:f5:da:4d:e0:ff:7e:ff:dd:
8c:c0:33:8f:d9:55:e8:e6:50:71:62:12:9c:1c:c7:
85:3e:4f:3c:e9:aa:b3:7c:58:50:b3:61:09:7b:45:
8f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37114
37137
sbgp-ipAddrBlock: critical
IPv4:
41.79.252.0/22
102.213.168.0/22
102.223.76.0/22
IPv6:
2c0f:7b80::/32
2c0f:fc80::/32
Signature Algorithm: sha256WithRSAEncryption
55:18:f7:8c:b6:ed:70:eb:68:e5:2a:e4:5c:45:4a:14:f3:99:
bf:23:18:c9:f7:20:07:a9:ef:a6:5b:f8:fc:67:bb:66:c0:8d:
9c:c2:bd:15:6d:67:b1:1b:95:bb:4d:47:f4:e9:fb:3a:cb:b5:
6e:0e:d8:ec:fb:aa:1c:57:bd:67:1f:fc:24:79:de:dd:02:d6:
12:af:2e:61:54:35:cc:38:96:70:d6:1b:c6:81:5b:66:c1:46:
c8:79:0c:9f:af:e9:a2:5c:50:a9:79:d6:bb:78:6d:7e:05:86:
b6:78:61:73:c5:5e:ce:2b:b0:45:b7:85:d9:fc:76:6e:74:ac:
9f:21:ac:f6:90:e5:0c:a0:f0:d0:8d:fb:6d:0c:d0:22:c3:6c:
dc:c4:b2:a0:f7:6a:00:6a:09:df:c0:1e:71:f5:03:cd:95:4b:
d4:f9:dd:f9:45:b3:cf:d9:20:77:e1:34:f3:ef:f3:e3:95:5b:
ed:5d:54:00:b6:fe:00:83:5c:fc:3c:62:48:5c:fe:b3:6f:09:
9d:61:cc:17:2c:e2:41:f6:23:ee:20:d1:28:1b:e0:24:45:9f:
a5:be:34:70:d6:11:c5:1b:c8:db:01:dd:b3:69:a9:05:1a:c0:
0f:74:d3:78:f5:2c:ed:05:de:0b:82:c9:f0:b8:59:cd:47:bf:
e0:c2:c2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:39:28 2025 by rpki-client