Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
File: lacnic-to-afrinic.cer (raw, json)
Hash identifier: MKScee8ssVr51K/OTtyyeiSDwz3svtf9jpqq6/x8uvQ=
Subject key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Certificate issuer: /CN=AfriNIC-Root-Certificate
Certificate serial: 62
Authority info access: rsync://rpki.afrinic.net/repository/AfriNIC.cer
Manifest: rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
caRepository: rsync://rpki.afrinic.net/repository/lacnic/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 21 Apr 2026 06:25:25 +0000
Certificate not after: Mon 21 Apr 2031 00:00:00 +0000
Subordinate resources: IP: 200.16.8.0/21
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 28 May 2026 06:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AfriNIC-Root-Certificate
Validity
Not Before: Apr 21 06:25:25 2026 GMT
Not After : Apr 21 00:00:00 2031 GMT
Subject: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ca:1d:2d:54:5b:db:4a:34:8e:3f:83:f8:53:
d6:1e:b3:bb:f9:d4:bf:d7:d2:d2:6a:70:27:30:d3:
b3:d3:7a:d7:55:8b:93:bc:4a:36:06:12:09:7f:2e:
ea:96:90:70:4b:3d:8e:7b:9f:42:b8:f1:aa:08:21:
13:dc:1d:87:e1:1e:a9:e4:68:75:35:b3:db:6e:ea:
99:8e:36:9b:a0:ed:32:b4:10:54:ae:c6:94:77:f3:
47:a6:73:d2:de:cf:d0:92:a4:5a:ad:84:89:61:7e:
da:f0:f9:16:4f:8d:69:f9:27:22:e3:c1:b5:30:08:
64:6e:9f:ab:e2:44:45:dc:43:39:ac:69:69:70:b6:
64:b5:f1:82:ea:5a:de:c7:cc:df:c3:54:8e:7f:c5:
22:f9:90:da:fb:6c:3f:e5:d6:b7:9f:0e:60:25:77:
33:14:79:fa:ad:a5:40:35:96:65:38:db:56:35:3a:
78:a7:d8:3d:cf:b5:ea:1c:30:eb:13:da:94:d5:60:
9d:d6:5a:16:72:4d:d1:3d:6e:2b:f9:7a:6d:b1:60:
14:88:40:e7:7c:38:a2:89:26:fb:8a:b9:82:3b:f6:
9b:02:db:fd:c2:16:bf:80:31:d9:fa:83:e0:01:f4:
30:90:79:6d:9b:12:05:5a:1d:7b:70:1d:67:a8:96:
9e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
X509v3 Authority Key Identifier:
keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/lacnic/
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
200.16.8.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:47:ee:71:64:31:21:ac:71:d1:32:8a:ed:e6:e9:e3:29:79:
d8:ab:be:cd:51:58:a9:92:31:4b:2d:88:f2:06:77:e5:28:ee:
22:f2:18:de:97:54:62:1e:ef:e0:88:f3:da:77:13:b1:41:83:
8c:28:47:59:28:c4:0f:20:cc:66:e0:e6:36:02:65:38:cc:67:
79:f9:fc:00:78:41:06:88:05:91:24:d8:75:2e:ac:7f:d6:8c:
ab:13:ac:b0:b2:dd:9e:bc:f6:52:7e:2a:fe:48:09:e8:e7:a1:
f4:94:a4:30:52:c0:d8:04:82:39:9b:44:22:23:62:a9:91:fa:
27:2d:0d:b5:1e:82:e7:b9:b6:c5:ff:ca:d5:9a:09:3b:c9:42:
fc:b1:c7:14:81:e4:75:10:75:9c:e9:4d:0f:94:9c:f7:fc:a7:
cf:9c:34:e3:29:bd:59:39:9f:47:25:d9:33:ca:13:54:2a:e3:
72:b1:a5:f0:ee:f1:cd:f2:19:0c:19:2d:61:70:56:60:84:e5:
bf:10:42:29:55:b8:2f:7f:1d:ef:18:8d:fe:4f:3d:64:f5:5a:
4d:87:ba:6b:f9:4d:8f:17:cb:60:31:c4:d5:8e:4b:1b:4d:c6:
1a:a8:55:f1:7b:fa:c7:43:76:c2:e1:10:24:42:66:b6:81:af:
4e:29:12:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:10:37 2026 by rpki-client