Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/2FLZY43gNj3YSH_gDch1vI-a080.cer
File: 2FLZY43gNj3YSH_gDch1vI-a080.cer (raw, json)
Hash identifier: eiZTA9NuR+MpUgMpOv9yatfsZJ9TaJtLV02lpNTXFHA=
Subject key identifier: D8:52:D9:63:8D:E0:36:3D:D8:48:7F:E0:0D:C8:75:BC:8F:9A:D3:CD
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 4073
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 09 Apr 2026 11:22:11 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 327813
AS: 328364
AS: 329184
IP: 102.68.80.0/21
IP: 102.68.96.0/22
IP: 102.130.112.0/20
IP: 102.135.160.0/22
IP: 102.209.116.0/22
IP: 102.218.212.0/22
IP: 2c0f:f300::/32
IP: 2c0f:f598::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16499 (0x4073)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Apr 9 11:22:11 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F3636791AF, serialNumber=D852D9638DE0363DD8487FE00DC875BC8F9AD3CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:83:88:ef:0b:59:9a:11:d0:90:6c:2d:5c:
0e:89:32:ed:c4:c2:a6:a4:ee:8d:ca:87:77:af:a4:
3d:45:d1:27:b5:10:fa:fa:f8:4c:7c:42:8d:4e:a7:
d0:90:1b:29:69:21:29:1e:dc:ab:c1:7f:93:8b:7d:
05:df:65:56:c4:5e:cb:87:1a:a3:d5:19:51:9d:c1:
24:3d:76:d4:37:68:84:08:9f:ad:31:77:ea:09:e8:
a8:4f:cf:68:a1:51:49:b2:c2:5a:52:60:34:1f:42:
7f:16:d1:66:a2:3b:02:6c:1d:03:55:55:ec:97:6f:
1b:c1:41:81:ad:0a:7f:27:db:55:7f:f2:8d:7a:69:
ec:79:49:3e:5d:29:60:28:61:33:85:fd:37:32:60:
90:73:33:86:cd:ae:3c:34:c9:83:fe:74:ae:b8:02:
b7:06:06:0b:c4:c8:a9:8e:32:62:43:6d:4a:3b:8d:
20:63:e4:bf:03:83:79:9a:d7:0d:a3:a9:20:7b:c4:
62:fb:a8:0b:01:b0:5f:60:7d:23:1c:68:aa:29:7d:
53:57:63:60:87:e6:f5:e2:2a:c9:67:69:e3:d1:e0:
ae:54:bb:be:1c:9e:79:02:f2:9d:58:9d:8d:c6:2c:
27:4b:9e:c5:9e:bc:0a:1b:7e:9e:ac:33:5f:20:c2:
9b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:52:D9:63:8D:E0:36:3D:D8:48:7F:E0:0D:C8:75:BC:8F:9A:D3:CD
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327813
328364
329184
sbgp-ipAddrBlock: critical
IPv4:
102.68.80.0/21
102.68.96.0/22
102.130.112.0/20
102.135.160.0/22
102.209.116.0/22
102.218.212.0/22
IPv6:
2c0f:f300::/32
2c0f:f598::/32
Signature Algorithm: sha256WithRSAEncryption
43:0a:3d:29:f9:45:1f:dd:0c:39:b0:d7:cf:4e:7f:79:75:8b:
cd:65:8e:da:8e:ea:d0:36:da:07:c8:c4:b5:ca:26:55:c1:4b:
93:48:a2:92:4c:e1:9f:41:44:33:76:d8:1c:20:4c:cf:df:4d:
6e:60:2e:56:3d:d9:98:63:ac:a9:6b:d3:40:94:cf:4c:3f:65:
eb:5e:47:d4:cd:60:99:34:05:ff:88:50:96:76:b5:99:40:d8:
83:e2:c9:f0:c5:43:3f:7f:6b:49:1a:7e:12:0e:28:de:0d:a2:
59:04:3e:31:a6:bd:e4:a0:b4:47:fc:48:6d:75:63:5e:f7:f3:
98:5d:d3:be:5c:4b:9c:e9:a7:79:ac:45:97:41:3f:60:fc:75:
dd:f8:ff:24:d3:ae:be:04:e8:b0:22:ea:96:70:9b:b2:72:42:
28:6d:79:49:d5:a3:e7:6b:92:1b:a6:f3:07:cb:86:11:6c:c2:
fa:cb:16:80:2b:0b:8e:df:57:5b:30:10:5c:94:9a:7b:e3:c1:
d8:6b:40:bc:86:ad:e2:2e:89:3f:97:fc:e4:41:78:65:09:08:
1a:49:11:c3:70:49:9b:5e:eb:bc:09:a3:9e:6f:b9:bc:f0:4d:
70:ea:f1:b5:ff:25:8d:21:60:49:70:ec:3c:48:8e:82:a3:29:
3b:ca:82:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:09 2026 by rpki-client