Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
File: x2kBfEr3fF65-LyEaI2IawFQMjo.cer (raw, json)
Hash identifier: jXVdAKkGg4jbHx67flb5Ka7tfqj4Yuy9Ue9e6acL3R8=
Subject key identifier: C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 33FA
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 16 Jan 2025 09:43:27 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329174
IP: 102.206.204.0/22
IP: 102.213.241.0/24
IP: 2c0f:2d80::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13306 (0x33fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 16 09:43:27 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F369E4C8AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:55:03:1b:fa:e7:c4:04:d2:61:ea:23:f6:17:
ea:67:80:e6:67:a5:2f:93:13:f7:c4:57:2d:59:14:
b8:3a:2a:4c:46:53:1c:e8:ae:a0:64:93:e5:ed:32:
13:6c:4b:3d:12:03:6e:bb:50:1d:c7:cf:d0:13:4d:
67:2d:c3:ab:f1:11:4d:13:77:9d:67:f1:88:49:0e:
be:e4:42:9c:d9:28:88:02:7b:81:39:dc:8f:63:42:
21:98:a1:3d:6e:0a:0c:50:22:84:72:68:8f:ab:fa:
be:48:35:9e:b6:da:24:3e:de:2e:79:18:8a:d3:95:
10:62:00:43:d8:07:27:90:1c:7a:51:9e:46:2d:12:
96:38:68:13:a7:a3:28:40:da:76:a7:89:6a:ad:18:
60:6a:53:51:a7:bb:ae:f5:bf:08:40:da:a4:6b:4d:
9c:ef:00:43:04:e5:40:a2:3f:36:34:d6:ab:02:a4:
b2:26:a0:58:7b:ad:b5:dc:de:3e:9c:7c:c5:e3:59:
ca:a8:9a:c7:c3:08:a6:cb:72:ca:db:b9:ec:ec:e6:
8f:d1:b4:ca:0b:cf:91:99:e6:61:c2:9a:e3:11:cd:
38:40:df:03:bf:85:07:05:59:76:16:99:59:6a:ef:
fc:b9:df:dd:a0:5b:e6:5d:46:e5:06:d8:29:92:58:
41:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329174
sbgp-ipAddrBlock: critical
IPv4:
102.206.204.0/22
102.213.241.0/24
IPv6:
2c0f:2d80::/32
Signature Algorithm: sha256WithRSAEncryption
b2:ee:3b:48:d9:3a:d7:cb:ad:ba:e5:07:3f:2b:71:8d:af:60:
19:fd:16:12:80:36:4e:2c:78:db:a5:b2:99:a2:45:4e:1e:14:
69:d5:ff:60:82:9b:26:e0:c8:c5:43:f0:48:48:04:34:ac:df:
22:59:6c:e9:6f:4e:d6:cd:94:29:1c:93:af:dc:7c:ff:e0:ac:
62:04:47:8e:71:fc:bf:54:70:d7:0f:b8:57:49:57:62:91:42:
b4:1d:dc:96:2e:98:3e:b1:c9:b7:38:31:e7:32:26:55:91:75:
b7:c0:e3:f2:3e:32:4d:6b:30:2b:a8:6e:87:e0:0d:e8:20:53:
51:95:21:19:44:85:11:b6:74:1a:61:e4:dd:13:e3:55:52:46:
42:7c:9e:ce:70:68:bb:27:d3:ce:52:7f:1c:90:40:1d:fe:f8:
80:f4:43:28:04:cf:a0:49:73:bc:40:77:e6:3a:3b:3a:2b:08:
ec:b5:51:08:ce:af:65:0e:d7:7f:53:f8:3d:5f:e6:2d:95:c8:
30:b1:7b:1f:02:d7:ae:f9:f2:da:c6:c9:3f:11:4a:0a:fb:34:
24:f4:44:89:e1:11:2e:0c:19:ed:45:da:a3:65:e5:63:48:4d:
78:35:2a:22:db:e1:a8:44:9a:3b:e8:cb:9c:6e:d9:a3:22:13:
ec:54:f6:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:35:29 2025 by rpki-client