Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
File: ycEp-8PIJzpGKVWpUo4KrC8umCw.cer (raw, json)
Hash identifier: KldFrKGzPehneJRqcZ+BR+YbBSsIhUfPW63nXyarFWc=
Subject key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 351A
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 29 May 2025 00:01:39 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329403
IP: 102.206.68.0/22
IP: 102.209.180.0/22
IP: 2c0f:2e40::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Jun 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13594 (0x351a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: May 29 00:01:39 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36337E5AF, serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:3e:2e:e9:02:91:97:83:e6:a4:eb:8a:ad:
39:2c:7f:d1:86:b2:29:33:62:6b:11:dd:09:5a:fd:
95:2c:6f:09:f7:a9:55:e5:27:a8:f1:f8:90:8e:7c:
aa:bb:87:6e:7c:a6:69:21:0b:75:b3:1c:b1:90:85:
62:2a:81:34:5b:e3:e4:6f:a0:2f:87:b6:9a:5a:90:
04:0b:81:8e:54:e8:d2:01:89:ea:3d:c2:da:55:ed:
cc:a6:e0:4d:7f:cc:76:f4:c1:29:92:0a:23:9a:76:
fa:9d:e2:c5:82:e7:3c:25:c4:f2:6c:22:fb:48:59:
d9:b8:cb:2b:27:ab:91:bc:67:ea:9e:06:4a:93:86:
3d:cc:cc:85:03:45:16:61:e7:a3:a1:e0:16:58:34:
2a:d5:b8:fa:98:b7:07:da:24:50:3c:e0:de:4e:c6:
a6:87:fa:71:2f:d4:3e:8f:e4:4b:3c:f6:48:14:87:
26:0c:57:33:8f:36:46:6d:27:50:2e:37:fd:19:1c:
98:bf:32:fb:51:ea:89:30:6a:79:90:66:c1:2f:4b:
53:fc:e1:2d:b7:3e:19:15:21:88:40:06:34:02:48:
47:f2:84:a3:18:ec:d0:c4:dc:de:b5:32:02:14:25:
c9:b8:86:a9:01:a5:a2:72:67:fe:14:ae:e7:44:9c:
68:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329403
sbgp-ipAddrBlock: critical
IPv4:
102.206.68.0/22
102.209.180.0/22
IPv6:
2c0f:2e40::/32
Signature Algorithm: sha256WithRSAEncryption
1e:5c:85:18:0c:7a:c3:0f:24:31:c7:b2:ff:2e:ab:d3:da:c3:
21:fb:d5:2b:5c:ec:b6:fb:a9:c0:28:9d:e3:97:a7:96:78:3f:
4a:33:92:5d:95:b0:22:8f:7a:a6:e0:84:48:c8:aa:b4:71:c6:
2e:b0:4e:4a:e2:bf:5f:01:88:4c:1c:69:1b:04:35:95:b1:7c:
ef:5a:b7:90:52:5d:2b:a5:e3:87:dc:c4:e6:a9:7a:02:23:ca:
ac:6b:7c:ea:71:87:5d:69:0d:fc:52:66:69:c3:34:ee:e7:fc:
fe:aa:8d:72:05:86:f8:25:32:36:83:4d:f0:50:c5:ef:c8:e5:
94:0d:eb:02:e4:61:6b:39:64:3e:45:33:ff:a1:2a:ea:8c:26:
31:c6:78:03:fc:16:d6:3e:3a:a0:65:4d:7e:89:8a:3c:04:3d:
00:5d:e0:74:f7:7a:71:30:39:9f:fa:ae:33:52:03:77:38:78:
bb:92:0c:d7:55:80:45:50:b7:e2:3d:1a:c4:f5:30:5e:d2:88:
90:d2:c9:87:af:ae:f4:00:b1:b2:15:f8:66:f4:c6:f9:e0:32:
1e:95:66:4e:a6:ff:48:c8:5f:57:48:bd:69:51:d1:65:46:d0:
bc:da:66:17:c1:84:66:ee:83:e7:17:60:e1:02:97:9a:1f:1b:
19:d3:5b:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 2 17:10:14 2025 by rpki-client