Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/9yRFv_XqgzUfLmYNTYEtjzSB7PM.cer
File: 9yRFv_XqgzUfLmYNTYEtjzSB7PM.cer (raw, json)
Hash identifier: 31hq+xwDASoRoFLaXIs1Ei3UL9umwVp8pn9/8rq+5wo=
Subject key identifier: F7:24:45:BF:F5:EA:83:35:1F:2E:66:0D:4D:81:2D:8F:34:81:EC:F3
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 34D5
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 May 2025 21:11:01 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328761
IP: 102.221.112.0/23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13525 (0x34d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: May 1 21:11:01 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36848BCAF, serialNumber=F72445BFF5EA83351F2E660D4D812D8F3481ECF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:01:07:be:f3:98:b8:bc:85:a1:15:78:d0:
58:94:3c:5c:f4:ee:ce:da:23:32:0d:02:e0:83:ac:
c9:8c:5d:8a:f5:24:3b:5e:2f:23:0d:ac:55:30:6a:
d3:11:ba:b7:b6:08:ca:10:be:eb:ed:04:7b:3b:ed:
08:07:33:97:3b:21:72:03:d9:46:ca:a3:59:51:d2:
c9:6a:cd:13:64:b1:5a:4c:8a:b9:f3:c7:61:97:b3:
cc:58:46:8b:4e:05:15:85:32:4f:35:55:94:c8:21:
88:6a:40:ab:71:d8:e4:33:41:54:14:42:1a:52:e6:
09:ae:d3:11:8c:fd:72:7d:95:4e:fd:d2:c8:fa:11:
58:72:be:59:da:e9:ca:86:72:39:9f:40:1b:66:db:
c3:bd:bc:63:6b:62:3b:a0:24:86:38:d9:86:c5:6d:
67:a5:f8:cc:cc:65:4d:17:d0:a5:35:44:8a:b6:dd:
86:e3:01:3d:ae:97:6f:fe:70:f2:a9:f8:21:90:b4:
1c:5c:11:68:f3:f9:a1:61:56:10:47:44:db:ec:59:
c9:4e:e9:a4:fa:c4:05:d4:0d:b3:da:31:bc:63:c6:
f6:e6:ca:7d:2d:37:91:c2:62:99:c0:db:3c:61:5d:
83:0e:16:24:ac:7c:b8:8c:bb:a9:79:f1:f1:f9:9d:
69:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:24:45:BF:F5:EA:83:35:1F:2E:66:0D:4D:81:2D:8F:34:81:EC:F3
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36848BC/C0FEE47C26D011F09019149EDAE4EC9C/9yRFv_XqgzUfLmYNTYEtjzSB7PM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328761
sbgp-ipAddrBlock: critical
IPv4:
102.221.112.0/23
Signature Algorithm: sha256WithRSAEncryption
19:d7:68:69:31:0f:4a:81:6b:8f:52:8e:35:06:53:32:b9:95:
8c:0c:e3:98:bb:c7:b0:92:a1:08:90:fa:35:e8:f0:4f:ad:45:
c5:38:3c:f9:9c:10:22:de:96:0d:d3:4c:9b:28:34:73:60:10:
b1:52:e4:0c:6c:87:d2:6a:8e:8f:10:2a:36:1f:8c:34:66:65:
5b:a8:79:0d:e1:5c:25:9e:43:69:06:58:48:84:0b:a6:c3:9b:
5e:b3:43:b2:6f:17:5a:b8:ab:88:4d:35:a9:18:ad:ab:4e:67:
93:f2:ca:ca:fd:9b:61:31:22:47:25:e8:76:45:ee:94:d5:59:
44:d4:59:46:7b:38:fd:01:06:c4:78:1b:ad:fb:3a:80:e7:c7:
b9:12:cc:b8:fe:9a:a7:fb:d5:9b:86:1e:8d:38:f8:45:cb:2b:
8d:46:5a:f2:38:32:a2:b1:d4:d3:5b:f6:88:d6:bd:56:58:bc:
e2:4d:03:4c:6e:dd:4b:3e:bd:2e:b7:b0:bc:4d:d7:80:88:0a:
b7:54:f5:03:0e:5c:5f:e5:d1:93:55:53:ba:43:9c:ea:29:ef:
e8:12:cf:b0:e4:db:1e:c1:4e:bc:7a:76:c6:5f:81:eb:61:83:
75:6c:f2:30:80:65:11:df:a7:11:cb:b6:ae:44:9d:fd:00:49:
28:b3:7f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:55:25 2025 by rpki-client