Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
File: JLXuZ0cVou7uiGTqX17kcyPPdmw.cer (raw, json)
Hash identifier: fZ6uxncUeRbyWt88/zfaNDTLodbKfpIxqN013m+hzNA=
Subject key identifier: 24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 34AC
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Fri 25 Apr 2025 00:02:41 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 2905
AS: 4178
AS: 4571
AS: 9129
AS: 11569
AS: 12091
AS: 16637
AS: 24788
AS: 28698
IP: 41.112.0.0/12
IP: 41.181.0.0/16
IP: 41.195.0.0/16
IP: 41.208.0.0/18
IP: 105.176.0.0/15
IP: 105.208.0.0/12
IP: 105.236.0.0/15
IP: 196.3.224.0/19
IP: 196.4.87.0 -- 196.4.93.255
IP: 196.7.0.0/16
IP: 196.13.228.0/22
IP: 196.22.64.0/18
IP: 196.30.0.0/15
IP: 196.41.160.0/19
IP: 196.44.0.0/19
IP: 196.47.0.0/18
IP: 197.64.0.0/12
IP: 2001:4218::/32
IP: 2001:4260::/32
IP: 2c0f:fb08::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13484 (0x34ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Apr 25 00:02:41 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F367678FAF, serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e5:a5:30:fc:00:2c:15:bf:f7:c1:ca:9d:8f:
a9:b5:ae:b1:3b:24:42:39:80:ad:36:96:6c:a9:33:
6f:09:1e:39:4d:af:7f:d9:41:a0:74:cb:0e:c1:78:
72:59:7c:27:48:e4:de:48:4e:b8:e4:63:6f:0b:30:
39:18:cc:04:31:6f:a5:d2:bc:94:f0:2b:d6:c8:29:
00:7c:d5:3c:2b:09:74:74:7f:55:b3:99:c2:1a:17:
69:a5:dc:e3:cb:25:cf:2a:fd:19:5e:f4:30:e6:67:
4a:b7:d5:20:37:1c:01:29:67:eb:27:91:c8:11:c8:
2c:d2:40:b7:d1:c5:61:82:a8:6c:1c:73:bb:89:3b:
c6:0f:56:73:02:ee:3f:c6:61:06:a6:ff:50:3d:bc:
f6:4e:f7:20:c8:c6:f6:94:fc:2c:0d:a2:09:d5:9c:
09:6f:a0:21:10:70:31:e1:a3:31:d3:fe:fb:6a:5a:
bc:fa:19:96:bf:c8:09:66:13:ca:54:dc:ae:62:0a:
aa:44:7b:e0:4f:e2:fd:dd:52:5b:4f:56:da:29:ec:
fa:fd:2e:e3:43:ce:51:bf:40:0e:9a:ae:f1:3f:6f:
dd:f8:c6:43:9f:5c:8e:7d:7d:ef:df:8e:b1:b7:6e:
62:5c:dc:ee:87:f1:96:9a:1b:13:36:89:70:a8:15:
79:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2905
4178
4571
9129
11569
12091
16637
24788
28698
sbgp-ipAddrBlock: critical
IPv4:
41.112.0.0/12
41.181.0.0/16
41.195.0.0/16
41.208.0.0/18
105.176.0.0/15
105.208.0.0/12
105.236.0.0/15
196.3.224.0/19
196.4.87.0-196.4.93.255
196.7.0.0/16
196.13.228.0/22
196.22.64.0/18
196.30.0.0/15
196.41.160.0/19
196.44.0.0/19
196.47.0.0/18
197.64.0.0/12
IPv6:
2001:4218::/32
2001:4260::/32
2c0f:fb08::/32
Signature Algorithm: sha256WithRSAEncryption
c2:eb:52:cd:b4:13:04:23:08:33:fc:ef:23:26:85:18:7e:b2:
6f:3a:2b:42:d7:42:10:66:7a:2b:b3:f2:0c:36:c1:06:a1:91:
ab:a9:67:cd:6c:7f:9f:c3:3b:7e:58:5e:dc:ae:ff:e3:65:29:
ac:40:8a:95:e5:7d:73:21:57:15:29:3d:0d:a9:ce:2d:e0:61:
fa:31:b6:5d:a0:71:39:1c:2d:58:3e:e9:c2:d3:76:eb:ab:db:
bd:76:ac:97:5b:1a:f8:d9:c4:2a:d4:52:bc:35:77:56:04:b3:
a9:ea:5d:ea:df:f7:08:86:40:53:9d:2a:ca:f7:5a:7b:6e:52:
a4:dd:0e:35:46:21:98:5f:b8:29:7b:b1:69:c1:74:0d:43:12:
52:04:82:c1:2c:48:f6:b9:34:13:9b:fb:3c:e7:fd:09:5e:1d:
f0:46:7b:b6:ec:28:51:08:90:06:25:17:d4:ff:07:7c:19:c5:
06:50:13:f1:80:1f:b0:14:82:dd:f4:88:71:7c:7e:94:52:5d:
8b:47:46:36:20:bc:60:25:8d:6d:6c:24:9c:70:75:61:7b:b3:
8d:fa:fb:c4:a5:ca:1c:19:63:43:1f:b8:10:85:64:fe:d2:fc:
57:90:2e:88:ec:77:38:d6:59:f6:4e:d4:4f:8b:71:10:19:1b:
9b:20:06:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:09:32 2025 by rpki-client