Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer
File: mSzTGdelFaVjcylM4EkVP4w-AEs.cer (raw, json)
Hash identifier: duiGzf6RoxydX8Zkpqbu5fAcnHwk9PbwQsh7G1/hDmM=
Subject key identifier: 99:2C:D3:19:D7:A5:15:A5:63:73:29:4C:E0:49:15:3F:8C:3E:00:4B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3665
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Oct 2025 00:05:33 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328723
IP: 102.206.116.0/22
IP: 102.209.84.0/22
IP: 102.222.20.0/22
IP: 2c0f:e990::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13925 (0x3665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Oct 1 00:05:33 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36DD92BAF, serialNumber=992CD319D7A515A56373294CE049153F8C3E004B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:fe:ee:14:97:e3:b7:f5:ec:bb:f2:11:c4:
d6:ee:aa:d3:99:c1:39:50:64:d6:a2:05:e7:a5:be:
09:84:de:a1:7a:c3:98:86:f3:bd:24:2b:db:b2:a5:
bb:1f:cf:81:f9:c4:0c:d2:9e:09:37:e6:50:3b:e6:
4f:02:b5:24:e8:ed:d8:bd:0e:6b:c1:99:a0:a6:b6:
b2:fa:b2:43:e0:ba:03:f3:63:f5:a4:71:27:b8:6b:
fb:82:0f:67:4d:cc:85:2d:78:5b:60:7a:f2:32:ac:
58:5f:09:5f:ce:e8:7a:53:f4:f7:bf:fe:df:7f:0c:
5c:51:e7:df:29:d3:52:e2:8f:9d:44:3c:70:a3:f9:
ce:dd:95:28:5c:12:e9:20:5c:13:5e:ce:80:60:f9:
ea:d0:23:b7:d8:70:f3:29:09:01:05:63:a2:dd:16:
7a:18:02:86:74:2f:9d:55:bc:c3:e1:23:08:26:f7:
c6:aa:ce:15:7e:52:71:03:7b:72:0a:34:3d:9f:41:
f1:15:5f:51:d2:30:c8:b7:c3:be:66:3e:7b:94:97:
8a:5f:23:d9:1b:01:f9:e8:aa:b7:55:13:60:77:b0:
1f:f7:d7:5a:0d:e8:08:f2:05:3e:83:0c:85:87:37:
10:63:ed:d5:30:e8:22:5a:f7:f0:1d:61:f1:58:c9:
20:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2C:D3:19:D7:A5:15:A5:63:73:29:4C:E0:49:15:3F:8C:3E:00:4B
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328723
sbgp-ipAddrBlock: critical
IPv4:
102.206.116.0/22
102.209.84.0/22
102.222.20.0/22
IPv6:
2c0f:e990::/32
Signature Algorithm: sha256WithRSAEncryption
ad:14:26:5c:f0:1e:b8:70:42:93:1f:8b:28:c4:7b:7e:d1:3e:
a6:1d:90:c0:93:ed:be:08:d9:89:3d:3a:86:13:63:35:88:26:
44:ab:8c:41:56:46:57:2e:b6:06:74:59:9b:30:1f:ac:f0:74:
50:b6:39:e6:75:fc:da:ce:a0:30:9a:58:55:3e:f6:83:64:71:
95:d0:17:0b:16:ae:78:aa:a6:3e:c8:e4:69:cf:0c:30:13:b6:
c8:20:af:37:82:a0:52:55:49:83:d1:87:96:a9:df:f9:7a:3e:
e6:02:e1:3c:b5:02:e1:3c:f1:82:90:1f:0f:b0:92:79:34:58:
60:75:0d:4a:ac:3b:d5:eb:95:3f:89:87:f9:03:ab:68:22:e5:
11:7c:12:b3:83:2a:20:1a:95:72:de:4f:70:cf:6d:8e:5d:15:
02:1e:09:74:71:a2:35:bb:67:ef:63:0c:fa:a9:f2:a9:48:1e:
c7:f6:24:fc:30:09:63:10:f9:27:57:5a:c6:ca:7f:15:49:32:
2e:df:de:39:15:86:9f:2a:e9:16:2a:dc:77:57:a7:5a:05:b9:
d2:fc:cb:e7:05:99:04:ad:6d:ab:d7:4e:59:cd:6c:31:77:b0:
fd:50:5d:b2:fb:4d:f1:62:9c:ef:e4:aa:e7:41:20:d0:22:b7:
d3:3b:6a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:32 2025 by rpki-client