Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/4co12ODZvFHAlvkK_gIBb5OmeaA.cer
File: 4co12ODZvFHAlvkK_gIBb5OmeaA.cer (raw, json)
Hash identifier: J2Er+aQDtYeMycp2CokuNwdglcyQgqCpzwwYJWlpwz8=
Subject key identifier: E1:CA:35:D8:E0:D9:BC:51:C0:96:F9:0A:FE:02:01:6F:93:A6:79:A0
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 355A
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E6DE6/F3F2DC9C50E411F0A509427ADAE4EC9C/4co12ODZvFHAlvkK_gIBb5OmeaA.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E6DE6/F3F2DC9C50E411F0A509427ADAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 24 Jun 2025 10:21:26 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37661
IP: 154.68.192.0/18
IP: 2c0f:f638::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13658 (0x355a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jun 24 10:21:26 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36E6DE6AF, serialNumber=E1CA35D8E0D9BC51C096F90AFE02016F93A679A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:94:47:07:2a:b6:9c:e6:a1:8a:51:49:21:ed:
59:fe:6c:5b:db:81:c3:36:43:07:a4:e2:63:b0:ef:
72:ed:50:66:16:8c:21:29:07:97:30:3b:3b:e1:f5:
ec:1e:59:66:4b:f9:b6:c6:07:23:ac:43:87:88:81:
a6:45:08:13:84:95:47:db:ff:5a:05:e7:3c:72:46:
ca:bb:54:de:fc:ec:e7:c6:78:fc:e9:e0:62:c7:d4:
38:f6:3d:8c:f4:da:49:a6:34:b6:3e:85:fa:62:b8:
f1:d5:d5:0c:72:c1:7f:23:39:79:07:76:80:63:42:
96:32:d9:48:92:0c:cb:e1:19:a4:b6:fd:15:85:4c:
d0:08:c2:b7:f0:57:14:93:41:fe:1d:12:7f:ec:6c:
12:25:13:0c:2d:f6:15:a5:01:d3:63:a6:27:d0:2a:
91:64:3d:22:85:cc:2a:5c:7c:3a:c3:d2:13:f9:3d:
7c:26:f3:f3:0e:d0:0b:3c:25:87:11:cc:61:d9:62:
54:7e:9c:64:67:a6:8f:69:2c:4f:de:d4:e5:0c:73:
74:40:d5:88:43:79:89:59:cb:0f:6d:2f:7a:23:a8:
ad:78:03:11:79:8e:01:ec:78:50:00:31:56:45:16:
e3:87:79:ec:ac:e2:28:f2:38:ea:84:b2:05:04:68:
1e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CA:35:D8:E0:D9:BC:51:C0:96:F9:0A:FE:02:01:6F:93:A6:79:A0
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6DE6/F3F2DC9C50E411F0A509427ADAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6DE6/F3F2DC9C50E411F0A509427ADAE4EC9C/4co12ODZvFHAlvkK_gIBb5OmeaA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37661
sbgp-ipAddrBlock: critical
IPv4:
154.68.192.0/18
IPv6:
2c0f:f638::/32
Signature Algorithm: sha256WithRSAEncryption
c4:a8:a7:9d:f0:3b:06:57:3a:81:9e:64:7b:39:ad:0d:da:bb:
f2:9b:48:5f:ee:d6:3d:d9:bb:a5:58:18:ca:3d:c3:b5:d9:6f:
82:f0:1a:f2:61:7e:b1:dd:8f:88:d8:5b:5d:e5:63:e7:2d:81:
d0:9a:50:be:7a:f6:8d:3f:29:cd:8a:df:aa:b2:82:79:bd:d8:
34:57:ff:63:36:76:1c:8e:0f:43:03:24:f6:91:6b:36:f3:51:
8d:f1:a2:23:bb:15:53:bc:1e:6a:8f:71:df:3d:be:2a:49:12:
f0:19:2b:1f:1f:1e:b5:f6:96:f4:5b:97:d2:f8:fb:ae:4b:93:
e3:46:2e:33:74:d8:9e:13:e8:5b:5f:57:25:ea:c6:1e:ec:ad:
62:bb:6c:60:59:f3:fa:88:4d:4c:0e:54:9e:f1:fa:be:64:9d:
36:54:5c:db:9e:a1:aa:aa:a1:ea:6d:d8:77:ea:a4:d1:c2:e0:
bc:4f:e5:c1:db:a4:e5:3b:6f:42:48:0b:d9:dc:26:04:20:52:
40:73:15:33:11:65:a7:3a:71:0d:b8:79:9b:40:6a:95:b7:08:
09:29:27:e1:74:ce:94:aa:de:83:88:54:fe:ff:e3:11:04:b4:
37:a1:ed:71:2e:21:ea:2e:f6:78:d6:f2:cd:f2:68:b5:b7:5d:
b2:d7:04:64
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICNVowDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTA2MjQxMDIxMjZaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkU2REU2QUYxMTAvBgNVBAUTKEUxQ0EzNUQ4RTBEOUJDNTFDMDk2Rjkw
QUZFMDIwMTZGOTNBNjc5QTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDWlEcHKrac5qGKUUkh7Vn+bFvbgcM2Qwek4mOw73LtUGYWjCEpB5cwOzvh9ewe
WWZL+bbGByOsQ4eIgaZFCBOElUfb/1oF5zxyRsq7VN787OfGePzp4GLH1Dj2PYz0
2kmmNLY+hfpiuPHV1QxywX8jOXkHdoBjQpYy2UiSDMvhGaS2/RWFTNAIwrfwVxST
Qf4dEn/sbBIlEwwt9hWlAdNjpifQKpFkPSKFzCpcfDrD0hP5PXwm8/MO0As8JYcR
zGHZYlR+nGRnpo9pLE/e1OUMc3RA1YhDeYlZyw9tL3ojqK14AxF5jgHseFAAMVZF
FuOHeeys4ijyOOqEsgUEaB6RAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQU4co12ODZ
vFHAlvkK/gIBb5OmeaAwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFNkRFNi9GM0YyREM5QzUwRTQx
MUYwQTUwOTQyN0FEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RTZERTYvRjNGMkRDOUM1MEU0MTFGMEE1MDk0MjdBREFFNEVDOUMvNGNvMTJP
RFp2RkhBbHZrS19nSUJiNU9tZWFBLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAkx0wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAaaRMAwDQQCAAIwBwMF
ACwP9jgwDQYJKoZIhvcNAQELBQADggEBAMSop53wOwZXOoGeZHs5rQ3au/KbSF/u
1j3Zu6VYGMo9w7XZb4LwGvJhfrHdj4jYW13lY+ctgdCaUL569o0/Kc2K36qygnm9
2DRX/2M2dhyOD0MDJPaRazbzUY3xoiO7FVO8HmqPcd89vipJEvAZKx8fHrX2lvRb
l9L4+65Lk+NGLjN02J4T6FtfVyXqxh7srWK7bGBZ8/qITUwOVJ7x+r5knTZUXNue
oaqqoept2HfqpNHC4LxP5cHbpOU7b0JIC9ncJgQgUkBzFTMRZac6cQ24eZtAapW3
CAkpJ+F0zpSq3oOIVP7/4xEEtDeh7XEuIeou9njW8s3yaLW3XbLXBGQ=
-----END CERTIFICATE-----
Generated at Tue Jul 1 17:17:29 2025 by rpki-client