Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/bj0aqU4tYq-BEr3_sEnED_m9bWQ.cer
File: bj0aqU4tYq-BEr3_sEnED_m9bWQ.cer (raw, json)
Hash identifier: RyKsRVRNYl+6o7EE+bk8+zl488CU5vv39KIy1LHwpxU=
Subject key identifier: 6E:3D:1A:A9:4E:2D:62:AF:81:12:BD:FF:B0:49:C4:0F:F9:BD:6D:64
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 34CD
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B7E77/B6BE040424CB11F0BF5B50A6DAE4EC9C/bj0aqU4tYq-BEr3_sEnED_m9bWQ.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B7E77/B6BE040424CB11F0BF5B50A6DAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 29 Apr 2025 07:29:53 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328934
IP: 102.212.21.0 -- 102.212.23.255
IP: 102.219.21.0/24
IP: 2001:43fe:2000::/48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 06 May 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13517 (0x34cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Apr 29 07:29:53 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36B7E77AF, serialNumber=6E3D1AA94E2D62AF8112BDFFB049C40FF9BD6D64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:a0:d7:cc:85:18:e4:89:16:64:e2:94:23:
f5:2e:30:fd:98:ff:39:6d:0b:fa:5b:62:5c:21:d4:
5f:b3:9d:5b:74:ed:03:82:da:6c:b3:59:51:7a:1e:
63:8a:27:9a:8c:1c:09:01:44:2d:89:5a:d2:76:e8:
c5:34:d7:1c:46:7d:b3:50:05:b0:3f:7a:ee:c5:c3:
3b:9e:f8:36:d8:7b:2f:ea:a5:10:53:47:fa:e9:9f:
3c:2c:c5:03:76:4c:9e:da:66:30:90:6a:0c:8e:cc:
51:b0:41:af:1e:5f:b3:ba:a2:ee:4e:cc:2b:91:8f:
b9:fa:68:e1:94:0b:85:a3:bc:29:25:4e:60:ce:dc:
d8:4f:23:81:23:e7:ab:0b:69:a6:96:69:3d:4d:c3:
00:65:d9:74:6d:a8:ae:a8:4d:59:01:f9:c4:97:c9:
81:db:9b:6e:aa:47:34:60:85:53:32:c4:5b:d5:5e:
4d:80:f7:ce:97:94:81:9c:fa:03:e4:36:7b:e5:b9:
e5:3c:f0:48:34:3a:dc:fc:fe:9a:82:cc:fe:82:21:
54:b8:7e:e5:e4:16:0e:0a:44:19:95:41:ec:99:29:
3c:d3:ae:35:81:dd:9d:57:1f:1d:1b:df:14:8e:cf:
85:ef:2b:e9:e9:a8:ed:00:67:6b:35:73:7d:9c:2d:
a9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3D:1A:A9:4E:2D:62:AF:81:12:BD:FF:B0:49:C4:0F:F9:BD:6D:64
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7E77/B6BE040424CB11F0BF5B50A6DAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7E77/B6BE040424CB11F0BF5B50A6DAE4EC9C/bj0aqU4tYq-BEr3_sEnED_m9bWQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328934
sbgp-ipAddrBlock: critical
IPv4:
102.212.21.0-102.212.23.255
102.219.21.0/24
IPv6:
2001:43fe:2000::/48
Signature Algorithm: sha256WithRSAEncryption
80:eb:57:4f:b3:03:10:6a:f2:0c:6b:fd:03:84:74:0a:9e:cd:
f9:f3:b3:0d:14:b3:74:07:31:2e:67:8b:a2:6d:7a:b9:23:82:
08:8e:36:26:f2:0e:e4:1f:ab:dc:36:69:0e:c5:b3:db:46:02:
9b:6f:ef:a2:2c:7b:d2:d2:90:69:4e:78:33:8a:bb:97:21:d6:
0b:61:b1:f5:8a:62:d2:10:6a:a7:8a:32:d3:4a:7a:a9:54:fa:
35:26:61:34:25:a3:8b:cf:30:b9:40:fd:4c:3e:b5:80:cf:51:
49:6f:01:1c:61:d9:66:59:84:fa:79:cf:c0:d4:5a:a9:f8:a4:
12:8d:15:06:90:a0:d5:07:49:db:bd:72:4c:86:bd:67:86:72:
7c:ce:d7:86:a6:27:bf:fb:88:7d:6e:78:d6:d3:73:70:dd:e6:
2b:31:11:11:17:89:d2:00:2f:db:1a:0d:a2:1f:21:1a:d6:12:
d1:9e:51:79:d3:5f:b0:5f:af:31:99:30:84:ee:16:78:64:ad:
85:43:4e:b9:ce:74:4f:60:09:0d:b6:0f:dc:d8:73:a4:56:24:
dd:15:e7:19:06:44:31:dc:53:f0:0e:b8:0e:9c:8f:d3:13:31:
49:55:14:19:ce:af:d9:4e:8c:6e:0d:ce:a8:97:58:25:12:b5:
0f:39:99:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 21:40:35 2025 by rpki-client