Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/2cxFzcT8X4IbC1cESEGQPpzNC6A.cer
File:                     2cxFzcT8X4IbC1cESEGQPpzNC6A.cer (raw, json)
Hash identifier:          JGc8m/VgS93EDyXcKsC3K8tdbu+VTxqVh8kJXlz1yRE=
Subject key identifier:   D9:CC:45:CD:C4:FC:5F:82:1B:0B:57:04:48:41:90:3E:9C:CD:0B:A0
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4315
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36D6F5D/928D71FED3A311F1AB402B18CF1D38B0/2cxFzcT8X4IbC1cESEGQPpzNC6A.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36D6F5D/928D71FED3A311F1AB402B18CF1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 29 Oct 2026 14:18:19 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328136
                          IP: 196.250.176.0/20
                          IP: 2c0f:edc0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 00:08:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17173 (0x4315)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Oct 29 14:18:19 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36D6F5DAF, serialNumber=D9CC45CDC4FC5F821B0B57044841903E9CCD0BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:eb:b9:14:7c:6a:14:ff:a2:af:b9:a6:7c:22:
                    6a:c7:2b:6e:1d:34:a9:e5:ee:b5:a6:e3:b8:04:d3:
                    e5:4b:01:8b:61:3c:bc:be:9b:8e:ed:98:9c:56:7f:
                    d7:df:4d:68:59:d4:7f:a8:d6:0a:1c:fd:25:e6:db:
                    e1:48:9c:39:56:b7:c2:9b:ba:50:46:86:38:56:fd:
                    df:14:4c:28:18:4a:4e:6e:7a:dd:f9:4c:4b:f9:c6:
                    9c:af:e6:8b:94:f2:d3:33:33:b7:c1:28:e0:da:94:
                    c8:14:09:bb:3d:f2:71:6f:0d:31:25:f8:5c:f9:b4:
                    cf:bc:db:9c:a2:8f:21:f4:31:58:39:0e:02:f3:b9:
                    29:3a:9a:64:46:4d:8d:b4:e9:e4:60:3d:cc:67:9b:
                    aa:53:78:a3:e6:0a:f8:a4:74:40:75:e1:23:02:07:
                    2c:6a:55:71:0c:f6:a2:38:c1:ec:f4:7a:5e:a4:6d:
                    e4:09:09:58:39:60:33:38:5e:5f:a2:62:0b:4d:2d:
                    b4:79:bd:7d:63:66:aa:fa:49:b2:7a:4e:83:bd:ea:
                    55:e9:2f:a7:ec:f3:b3:bf:f4:27:8c:80:89:15:ef:
                    76:12:ef:7e:97:8b:9d:33:cf:36:df:9b:a2:37:b2:
                    9e:e2:42:ba:44:81:db:37:22:7e:99:54:4a:7e:ca:
                    78:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CC:45:CD:C4:FC:5F:82:1B:0B:57:04:48:41:90:3E:9C:CD:0B:A0
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D6F5D/928D71FED3A311F1AB402B18CF1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D6F5D/928D71FED3A311F1AB402B18CF1D38B0/2cxFzcT8X4IbC1cESEGQPpzNC6A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328136

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.250.176.0/20
                IPv6:
                  2c0f:edc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:8a:77:58:b9:25:0e:98:34:9a:22:bc:6d:a4:39:6d:93:0b:
         e6:4c:7b:8a:d7:d0:cb:85:cd:4b:f1:91:b6:17:99:28:5d:59:
         16:c8:e3:f5:dd:be:9b:aa:e4:c9:da:a0:a3:ba:f6:fa:89:61:
         b3:02:74:ab:d2:be:8a:c1:2c:58:9a:ad:a3:2a:02:7a:76:c4:
         59:a4:28:f4:30:f7:9f:40:b0:7a:be:7e:d0:bf:c3:48:5b:c3:
         3d:c0:e3:46:a6:bf:5b:4b:f3:14:fc:52:01:cf:65:c1:68:9e:
         08:10:0e:97:32:6e:24:76:34:58:db:c6:a2:9f:cc:09:3f:6d:
         cd:5e:39:2d:fd:b5:b5:87:68:c6:84:46:c5:bd:77:da:bc:6f:
         7a:6c:59:9a:9c:0b:51:31:70:1b:94:16:70:fe:0b:92:35:df:
         61:22:e1:62:c2:cd:f7:17:a9:61:e3:b4:a7:d4:90:e6:0e:c2:
         22:37:b2:39:92:9d:12:c4:07:b4:3d:7f:da:51:04:4e:dc:a0:
         32:3e:10:ea:f9:f5:15:e2:d6:00:b1:f1:47:de:bd:8b:a1:a6:
         1b:8e:73:bf:30:87:ac:6b:fa:c8:ea:90:45:3e:fa:b2:cf:f5:
         e7:b2:66:8d:0b:62:6a:b3:72:40:6a:04:3a:ab:2e:13:fc:6b:
         ff:87:7a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 03:19:06 2026 by rpki-client