Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
File: Bal449VH9Vk-SwMZcDhZhpRQWMY.cer (raw, json)
Hash identifier: aVJV0xkDQCT8kb55xYodBa0RK9l5HwhTbbQ6beT8t5Y=
Subject key identifier: 05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 354C
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 18 Jun 2025 11:43:21 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328716
IP: 102.222.120.0/22
IP: 2c0f:e948::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13644 (0x354c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jun 18 11:43:21 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F363235DAF, serialNumber=05A978E3D547F5593E4B031970385986945058C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:e3:32:83:a2:3d:4c:f0:c5:ab:ee:c2:f6:
0a:d1:5b:18:06:71:0c:32:79:ea:e5:f6:a9:47:2c:
14:18:b5:5b:41:71:ad:3e:ed:88:9e:31:07:2d:1e:
9b:a6:cf:d7:7b:80:45:57:8b:c9:13:6d:af:86:4f:
bd:91:53:40:9e:13:d8:5a:20:7f:13:e9:f4:84:f2:
11:9c:a4:24:1b:b4:ef:90:f4:ec:98:f9:12:6e:5c:
5f:42:ee:c6:f8:b5:d0:ad:77:76:97:2c:4d:3a:62:
d0:02:6f:0e:28:0b:64:2f:2e:d9:7e:53:19:a9:5e:
58:7e:ed:85:a9:64:73:ff:e9:62:02:d2:83:0d:19:
b2:18:16:17:44:a2:01:00:06:c3:7b:a6:ae:5c:67:
10:6c:b2:52:ae:8e:e3:5e:8c:e2:da:21:4d:2c:f7:
1d:c8:7e:02:40:78:e3:e1:21:78:98:57:6f:a9:76:
4e:d4:7c:5f:fe:0b:44:68:47:13:b3:0a:5c:17:52:
ec:b1:4b:c5:1d:81:82:4e:c8:e2:67:c0:8b:c9:97:
a9:f5:d3:94:a3:ec:0e:13:fa:69:dd:02:21:3f:f3:
ca:ad:01:74:16:7f:9d:7a:ee:d6:12:24:05:80:6a:
99:0d:73:78:05:af:e7:63:ee:b2:73:d8:c7:e2:fd:
78:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328716
sbgp-ipAddrBlock: critical
IPv4:
102.222.120.0/22
IPv6:
2c0f:e948::/32
Signature Algorithm: sha256WithRSAEncryption
c1:27:4c:82:2a:cd:66:f5:05:1b:ef:89:68:65:0a:b7:74:b8:
91:4b:6c:3d:69:09:76:f5:d5:ec:54:a7:84:fd:3f:9a:b7:e9:
ec:24:2f:47:f4:1d:f8:fe:b8:74:22:18:64:aa:a8:db:c6:f0:
ed:80:0f:8d:e6:f6:04:70:a2:bf:03:e2:39:90:93:15:81:33:
da:67:c7:60:91:54:20:4e:08:7e:9b:db:a5:cb:73:46:97:5d:
3a:6b:a9:86:f8:8c:d2:78:da:5e:80:90:89:c5:53:f7:3b:6c:
4b:45:0d:b1:41:60:c1:43:ca:03:cb:1d:df:ed:57:26:dc:d0:
81:87:96:ea:a4:07:04:f5:10:ea:b3:e9:ba:40:10:cb:c4:be:
d4:d0:2a:15:f9:42:4d:b0:e2:77:a0:26:60:79:cc:28:26:18:
8d:7e:92:02:c9:e9:9f:22:f4:e3:16:c8:68:10:27:e5:1a:e5:
57:ac:07:57:cb:06:c0:02:c4:1b:11:72:f9:7f:3a:74:d9:c1:
c3:f4:52:07:b6:09:0d:ab:8b:15:76:dd:1e:fb:cf:6e:7b:65:
48:0c:86:e4:9c:18:ab:55:28:2e:fb:d7:17:c9:0c:0e:fa:73:
aa:e9:4e:d6:18:14:bf:e2:fb:ff:b9:e6:96:69:71:7e:bc:29:
dc:4f:1e:d6
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICNUwwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTA2MTgxMTQzMjFaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjMyMzVEQUYxMTAvBgNVBAUTKDA1QTk3OEUzRDU0N0Y1NTkzRTRCMDMx
OTcwMzg1OTg2OTQ1MDU4QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+IeMyg6I9TPDFq+7C9grRWxgGcQwyeerl9qlHLBQYtVtBca0+7YieMQctHpum
z9d7gEVXi8kTba+GT72RU0CeE9haIH8T6fSE8hGcpCQbtO+Q9OyY+RJuXF9C7sb4
tdCtd3aXLE06YtACbw4oC2QvLtl+UxmpXlh+7YWpZHP/6WIC0oMNGbIYFhdEogEA
BsN7pq5cZxBsslKujuNejOLaIU0s9x3IfgJAeOPhIXiYV2+pdk7UfF/+C0RoRxOz
ClwXUuyxS8UdgYJOyOJnwIvJl6n105Sj7A4T+mndAiE/88qtAXQWf5167tYSJAWA
apkNc3gFr+dj7rJz2Mfi/XivAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUBal449VH
9Vk+SwMZcDhZhpRQWMYwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYzMjM1RC82NzdDRkRFQzRDMzkx
MUYwODNFQzMzOTdEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MzIzNUQvNjc3Q0ZERUM0QzM5MTFGMDgzRUMzMzk3REFFNEVDOUMvQmFsNDQ5
Vkg5VmstU3dNWmNEaFpocFJRV01ZLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBAwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm3ngwDQQCAAIwBwMF
ACwP6UgwDQYJKoZIhvcNAQELBQADggEBAMEnTIIqzWb1BRvviWhlCrd0uJFLbD1p
CXb11exUp4T9P5q36ewkL0f0Hfj+uHQiGGSqqNvG8O2AD43m9gRwor8D4jmQkxWB
M9pnx2CRVCBOCH6b26XLc0aXXTprqYb4jNJ42l6AkInFU/c7bEtFDbFBYMFDygPL
Hd/tVybc0IGHluqkBwT1EOqz6bpAEMvEvtTQKhX5Qk2w4negJmB5zCgmGI1+kgLJ
6Z8i9OMWyGgQJ+Ua5VesB1fLBsACxBsRcvl/OnTZwcP0Uge2CQ2rixV23R77z257
ZUgMhuScGKtVKC771xfJDA76c6rpTtYYFL/i+/+55pZpcX68KdxPHtY=
-----END CERTIFICATE-----
Generated at Tue Jul 1 21:16:24 2025 by rpki-client