
Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
File: JLXuZ0cVou7uiGTqX17kcyPPdmw.cer (raw, json)
Hash identifier: qKEFFnltGSeYCJ2V3QqtPEOrKMxrOFfldPgN238g3Do=
Subject key identifier: 24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 34D2
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 May 2025 00:02:47 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 2905
AS: 4178
AS: 4571
AS: 9129
AS: 11569
AS: 12091
AS: 16637
AS: 24788
AS: 28698
IP: 41.112.0.0/12
IP: 41.181.0.0/16
IP: 41.195.0.0/16
IP: 41.208.0.0/18
IP: 105.176.0.0/15
IP: 105.208.0.0/12
IP: 105.236.0.0/15
IP: 196.3.224.0/19
IP: 196.4.87.0 -- 196.4.93.255
IP: 196.7.0.0/16
IP: 196.11.239.0/24
IP: 196.13.228.0/22
IP: 196.22.64.0/18
IP: 196.30.0.0/15
IP: 196.41.160.0/19
IP: 196.44.0.0/19
IP: 196.47.0.0/18
IP: 197.64.0.0/12
IP: 2001:4218::/32
IP: 2001:4260::/32
IP: 2c0f:fb08::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 00:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13522 (0x34d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: May 1 00:02:47 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F367678FAF, serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e5:a5:30:fc:00:2c:15:bf:f7:c1:ca:9d:8f:
a9:b5:ae:b1:3b:24:42:39:80:ad:36:96:6c:a9:33:
6f:09:1e:39:4d:af:7f:d9:41:a0:74:cb:0e:c1:78:
72:59:7c:27:48:e4:de:48:4e:b8:e4:63:6f:0b:30:
39:18:cc:04:31:6f:a5:d2:bc:94:f0:2b:d6:c8:29:
00:7c:d5:3c:2b:09:74:74:7f:55:b3:99:c2:1a:17:
69:a5:dc:e3:cb:25:cf:2a:fd:19:5e:f4:30:e6:67:
4a:b7:d5:20:37:1c:01:29:67:eb:27:91:c8:11:c8:
2c:d2:40:b7:d1:c5:61:82:a8:6c:1c:73:bb:89:3b:
c6:0f:56:73:02:ee:3f:c6:61:06:a6:ff:50:3d:bc:
f6:4e:f7:20:c8:c6:f6:94:fc:2c:0d:a2:09:d5:9c:
09:6f:a0:21:10:70:31:e1:a3:31:d3:fe:fb:6a:5a:
bc:fa:19:96:bf:c8:09:66:13:ca:54:dc:ae:62:0a:
aa:44:7b:e0:4f:e2:fd:dd:52:5b:4f:56:da:29:ec:
fa:fd:2e:e3:43:ce:51:bf:40:0e:9a:ae:f1:3f:6f:
dd:f8:c6:43:9f:5c:8e:7d:7d:ef:df:8e:b1:b7:6e:
62:5c:dc:ee:87:f1:96:9a:1b:13:36:89:70:a8:15:
79:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2905
4178
4571
9129
11569
12091
16637
24788
28698
sbgp-ipAddrBlock: critical
IPv4:
41.112.0.0/12
41.181.0.0/16
41.195.0.0/16
41.208.0.0/18
105.176.0.0/15
105.208.0.0/12
105.236.0.0/15
196.3.224.0/19
196.4.87.0-196.4.93.255
196.7.0.0/16
196.11.239.0/24
196.13.228.0/22
196.22.64.0/18
196.30.0.0/15
196.41.160.0/19
196.44.0.0/19
196.47.0.0/18
197.64.0.0/12
IPv6:
2001:4218::/32
2001:4260::/32
2c0f:fb08::/32
Signature Algorithm: sha256WithRSAEncryption
19:5e:28:96:6b:92:00:db:42:26:1c:20:fb:4b:0c:ec:9b:31:
c3:48:83:87:b9:71:b0:51:eb:bd:85:5c:7e:31:61:b4:48:92:
43:4b:ef:57:f1:ce:23:b1:d2:82:77:d6:fa:f8:d4:16:2f:2a:
fc:7b:88:e9:90:76:70:a9:92:90:e0:d2:03:9e:03:ba:69:d3:
af:e0:13:50:a7:a6:79:b9:67:9c:65:14:8a:96:c4:f6:b3:fe:
4d:7f:d9:4a:86:07:0c:69:c2:2d:03:d7:e3:d4:f2:f6:49:ba:
ac:90:87:0d:13:40:14:96:1c:d2:c5:0c:08:10:d3:95:2e:dc:
ab:1d:90:c4:70:23:dc:ea:02:7c:7d:55:43:24:12:e8:c6:e0:
4d:59:37:85:28:8b:4b:6d:68:5c:c7:cc:34:39:e4:54:7c:1b:
f7:fb:ae:16:b5:40:d2:de:a6:40:49:78:99:db:cb:de:58:97:
7b:14:ce:ea:41:77:e1:40:25:ae:73:98:7a:c2:fc:4c:80:fe:
a1:17:57:1c:01:fd:d9:69:dd:b5:d5:3c:8f:c1:1d:49:06:64:
cb:a7:d8:8b:71:80:65:85:f6:1f:1d:c6:d5:62:b3:f7:b5:f6:
92:1e:46:8f:95:af:09:76:bb:a0:67:79:ab:ca:80:e8:bd:69:
f7:01:43:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue May 13 05:46:31 2025 by rpki-client