
Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
File: xj3vPkSJRRRCc6POcAST0qDFrZo.cer (raw, json)
Hash identifier: dcQqOQzuJeeGTEELbjRHRrNgvhdcUnRVOl1HIOKUX7o=
Subject key identifier: C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2E2E
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:22:59 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37629
IP: 154.65.4.0/22
IP: 196.1.176.0/20
IP: 2c0f:f128::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11822 (0x2e2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:22:59 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3640DFDAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:36:2e:1b:a7:87:95:96:7d:c3:25:b5:90:
12:48:0c:44:e9:91:29:3d:b8:15:a8:15:f4:87:dc:
fe:4a:7c:e1:52:a5:35:83:84:a9:5b:e1:46:44:46:
ae:4f:81:07:de:49:fc:17:cb:b4:da:a4:e5:e6:82:
65:22:48:46:e7:73:d1:e6:79:fe:9f:23:65:96:c8:
34:d9:a9:cf:8a:8d:d0:f9:a1:57:f1:6d:42:f7:e2:
39:22:73:dd:ec:2f:0b:a6:f7:55:8f:8c:af:ca:d6:
6e:7b:57:b1:9f:f5:c7:0e:39:30:2f:1e:8c:43:81:
8b:4c:de:f0:80:80:c8:da:d9:be:62:6c:e2:31:2b:
10:5a:2b:65:6f:87:7a:b4:d0:e4:15:e8:4d:54:6e:
dc:02:6c:de:31:46:5e:83:1b:dc:b4:49:14:d6:c2:
9e:db:50:cf:37:f8:1e:8c:ed:16:f5:50:28:f4:4e:
d7:88:ff:1f:57:30:b8:c5:5a:8a:e4:c5:3e:f6:09:
12:d3:e8:71:72:d9:6f:fd:e2:00:6e:dc:b1:4c:22:
29:f5:49:2a:8c:47:22:30:ff:ef:7d:3f:07:20:26:
24:4f:dd:cb:21:1d:c3:f3:1b:95:1b:87:32:35:ac:
a6:03:3a:56:26:df:66:46:61:75:42:7f:eb:a8:f0:
47:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37629
sbgp-ipAddrBlock: critical
IPv4:
154.65.4.0/22
196.1.176.0/20
IPv6:
2c0f:f128::/32
Signature Algorithm: sha256WithRSAEncryption
4b:33:1e:e8:7a:3a:69:ef:c2:4e:63:30:4c:b2:9a:02:cd:f2:
9d:74:3d:38:02:24:f7:c0:e6:d7:83:73:96:d6:93:73:45:b9:
ac:37:ec:6b:36:c7:a6:8b:22:aa:9c:3b:bd:91:fc:fd:50:28:
81:ed:51:78:0a:c8:71:2d:5e:42:61:06:b9:cc:c7:ee:09:57:
5a:0c:8d:6a:b7:9e:b8:d7:9d:c0:89:31:c1:66:50:b0:90:2b:
10:db:fc:b0:5b:d6:9d:8a:a3:ec:25:81:9d:df:e7:d5:d6:a7:
6a:5b:be:70:51:bb:f1:dd:ef:55:c3:8c:7e:dc:cb:16:19:35:
97:ab:06:02:21:56:5c:03:30:e9:7d:63:b3:1b:8e:50:e5:7f:
d5:fa:9f:95:6c:86:5e:47:72:f0:8a:d4:e5:f3:33:0c:b3:f9:
cd:a3:71:ef:83:24:c2:c4:92:29:94:0a:15:6c:35:5b:12:2f:
79:fc:06:b2:b5:ac:98:07:ea:9a:0c:60:fa:08:07:ed:c1:5b:
5d:b6:95:04:7f:72:13:f5:17:83:19:38:91:ab:4a:9d:c2:38:
1a:0d:15:e8:a4:3f:a3:6d:c1:23:82:7a:ec:95:f2:92:11:63:
91:8e:89:47:f0:84:e6:bb:2f:7a:8d:0d:88:45:f6:3f:d6:d2:
1a:b8:f8:e6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:44:56 2025 by rpki-client