
Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/yDmJhjJn0TZLxz9143zW0rf-yYc.cer
File: yDmJhjJn0TZLxz9143zW0rf-yYc.cer (raw, json)
Hash identifier: zewU4fh0FG0aNo5SM2CXapoeKnrPhDbDkE4Ug4tWDCY=
Subject key identifier: C8:39:89:86:32:67:D1:36:4B:C7:3F:75:E3:7C:D6:D2:B7:FE:C9:87
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3677
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 07 Oct 2025 20:33:34 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329633
IP: 102.204.125.0/24
IP: 2c0f:39c0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13943 (0x3677)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Oct 7 20:33:34 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F361F0D8AF, serialNumber=C83989863267D1364BC73F75E37CD6D2B7FEC987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:15:97:d0:80:89:5c:da:85:cd:c2:c8:6e:
e7:4f:35:c3:10:64:3a:57:4e:63:fb:32:16:df:12:
7c:f6:97:a2:6c:fb:6c:ba:80:f0:9a:d2:96:6e:bd:
ed:cf:b6:9c:4a:b8:25:92:00:63:40:44:00:36:17:
17:8f:3b:b5:49:32:a2:65:f1:98:92:42:bb:fb:45:
55:c3:06:cf:93:1a:05:5b:c9:53:fb:79:57:34:dd:
d6:49:5a:12:00:20:5c:3f:71:4c:6a:61:be:ea:db:
6d:0c:c5:81:bf:92:7f:84:2d:a0:bb:7c:bf:81:e9:
68:b9:ac:9b:91:29:26:a1:0e:b5:e5:68:34:2a:f7:
50:d4:c5:b7:63:62:ac:b8:f9:fc:c0:48:2f:59:29:
6e:99:f6:8b:4a:6e:71:29:57:45:e7:c1:a3:f8:e6:
e6:fe:19:57:78:4b:87:a0:51:0f:98:01:50:ed:54:
10:93:c9:8d:b2:7d:2e:66:99:e4:cd:11:c9:6f:b5:
ce:42:8f:55:30:45:7d:ef:99:7b:6a:0a:20:a0:ce:
8b:83:b6:f2:a2:29:5f:9e:4e:aa:43:c3:a6:e8:3f:
a0:d8:58:43:8c:ab:2c:cc:6c:8d:44:2d:af:8c:59:
7d:59:5f:97:8b:61:63:4b:dd:82:36:af:01:ca:d2:
c3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:39:89:86:32:67:D1:36:4B:C7:3F:75:E3:7C:D6:D2:B7:FE:C9:87
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329633
sbgp-ipAddrBlock: critical
IPv4:
102.204.125.0/24
IPv6:
2c0f:39c0::/32
Signature Algorithm: sha256WithRSAEncryption
bc:a8:86:3f:fa:f6:9c:24:fb:70:b6:e3:a4:c7:64:11:3d:01:
9c:14:da:7b:11:9c:31:82:df:0d:21:7a:0d:6f:d8:f4:7c:af:
7b:99:bc:c0:00:9f:94:ae:4e:ea:3e:41:78:8e:ae:43:da:2c:
a8:8c:a7:a0:e9:ea:61:e0:c8:98:6b:13:d9:6b:e3:60:f1:04:
6e:a9:3d:3e:a8:fa:7b:8e:51:e6:3b:27:b7:50:d3:2c:20:79:
38:1d:08:93:44:0a:9b:07:f6:8f:11:b6:64:90:6e:ad:bf:c4:
54:ff:74:4d:72:d4:c4:11:94:ea:4c:04:ef:04:36:76:c1:b6:
f3:5e:f8:bb:de:c3:74:78:36:bd:da:cc:40:68:66:2f:60:76:
69:48:c1:9b:05:71:2f:be:3a:2e:06:74:6f:71:af:2e:b4:cf:
3c:60:4e:0a:76:06:fd:4a:2d:3d:26:eb:58:29:01:1c:7c:b9:
b8:55:da:3f:13:29:b5:87:6d:92:16:58:02:ed:5e:fc:76:49:
b2:e4:51:58:94:5d:bf:08:3a:6e:02:31:e0:99:37:40:36:66:
1d:72:9a:05:86:b8:98:c0:60:49:c9:ad:0e:bd:00:d3:a5:ee:
29:ad:83:be:2c:a5:99:43:29:19:37:3f:9b:a8:66:c5:21:25:
00:bc:64:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:20:42 2025 by rpki-client