Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/yFh1TID6yDlgC6mAc_zwo3zMrOs.cer
File: yFh1TID6yDlgC6mAc_zwo3zMrOs.cer (raw, json)
Hash identifier: Cx76rgVZ0Ecl6imvyaZom43fVOilNO+SPfMGv/q4tRM=
Subject key identifier: C8:58:75:4C:80:FA:C8:39:60:0B:A9:80:73:FC:F0:A3:7C:CC:AC:EB
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 346A
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 11 Mar 2025 06:27:49 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 327802
IP: 154.73.160.0/21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13418 (0x346a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Mar 11 06:27:49 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36E567DAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:f5:61:f0:58:b7:49:5d:7a:51:30:b0:4a:
65:dc:3e:19:84:b3:c3:96:16:22:3f:d6:40:64:97:
87:4f:60:5a:81:12:eb:14:8c:2e:d5:cf:09:82:3e:
e4:c3:fe:88:dd:58:65:e3:cc:a2:d4:70:8c:fb:4c:
81:b2:0e:5a:e9:1e:53:05:42:9a:38:82:49:39:70:
0e:9f:c7:7a:62:c6:56:ca:26:31:80:62:0b:12:45:
1b:43:2c:8f:a1:d2:af:e6:7e:2e:8b:34:6d:bd:8f:
da:ca:74:70:4a:d5:9a:d4:ff:d7:16:b9:cf:0d:80:
5d:1f:b7:df:92:47:73:16:ba:28:de:a1:e2:cc:cc:
a3:72:dc:26:7a:e8:d7:02:04:7d:23:58:df:1e:25:
01:e0:9f:74:70:f8:bd:46:c1:81:8c:71:2b:65:f2:
12:eb:87:08:f0:e2:d6:9b:86:b8:e8:b5:2b:d8:5e:
f4:98:24:b4:e2:4f:02:8d:b3:19:7a:26:65:39:74:
fe:58:c1:dc:a8:e7:7a:1a:6d:45:a9:f1:75:8a:73:
94:14:7f:72:75:88:01:70:88:35:bf:c7:85:8f:e1:
03:fc:d0:3d:5e:50:ba:d0:67:5e:7e:b3:81:bb:18:
b2:3e:b8:b1:1f:89:01:c7:f3:87:53:15:cf:39:5e:
7a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:58:75:4C:80:FA:C8:39:60:0B:A9:80:73:FC:F0:A3:7C:CC:AC:EB
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E567D/F0977E4AFE4111EFA78DF3BD762E951A/yFh1TID6yDlgC6mAc_zwo3zMrOs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327802
sbgp-ipAddrBlock: critical
IPv4:
154.73.160.0/21
Signature Algorithm: sha256WithRSAEncryption
58:c5:39:f2:ce:2d:2f:63:20:df:a8:30:f8:d2:37:a5:96:52:
0d:d3:a4:b5:4b:8a:a6:4a:e5:b9:a9:7b:0b:4c:d4:59:3a:ed:
fc:11:02:76:d4:a1:dc:77:3d:cb:9a:08:37:fd:a8:86:1e:33:
f6:df:17:9e:16:56:09:af:81:30:45:fd:63:34:d6:77:43:03:
fd:84:f5:d1:7f:a8:7f:c4:67:b4:1e:a3:e8:74:b2:e8:67:d7:
4e:3d:26:3e:b2:54:30:7e:d1:94:40:43:b3:59:b5:aa:84:19:
12:e6:a7:30:c7:aa:b4:74:03:66:ab:5a:6f:7a:85:63:36:a9:
a0:e6:bf:95:f9:f6:89:d3:b5:c0:2f:d6:0b:b7:4d:f2:59:4f:
70:a7:c3:f0:17:6d:18:26:0c:ff:d9:6d:0f:ec:f6:c0:e0:e3:
71:4e:ce:f0:f1:8c:c8:a7:1b:27:35:80:54:da:a3:0f:35:44:
41:da:42:79:88:3d:09:13:82:9b:fc:74:1f:12:e2:0f:47:04:
18:c2:98:40:5f:c6:1f:4d:ae:44:0c:74:0e:c4:e2:d6:48:70:
78:e5:98:d5:48:fc:d7:34:da:86:e4:29:2f:ae:ec:6b:8c:3e:
bd:f1:01:24:c3:71:f6:68:33:a1:8a:04:2d:45:7f:72:ec:95:
0f:81:9a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:52:20 2025 by rpki-client