Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/7RTXMXnfRSn4G5qHyV3yNtbnpow.cer
File:                     7RTXMXnfRSn4G5qHyV3yNtbnpow.cer (raw, json)
Hash identifier:          nAGcAPk/rU1uCUiRoaNx1wpkLT32jZ/iHuISDOelCHw=
Subject key identifier:   ED:14:D7:31:79:DF:45:29:F8:1B:9A:87:C9:5D:F2:36:D6:E7:A6:8C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       42D2
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3659C7D/92B51D2EC79311F1AD87B8ACCE1D38B0/7RTXMXnfRSn4G5qHyV3yNtbnpow.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3659C7D/92B51D2EC79311F1AD87B8ACCE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 14 Oct 2026 05:53:34 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328296
                          IP: 102.164.60.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17106 (0x42d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Oct 14 05:53:34 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3659C7DAF, serialNumber=ED14D73179DF4529F81B9A87C95DF236D6E7A68C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8b:f0:43:77:b0:1d:2b:dd:98:95:a3:2a:20:
                    e4:a6:48:ec:8a:67:e3:a4:47:74:e9:9e:c5:9e:9c:
                    7f:80:3f:a8:c3:be:71:21:a6:59:be:8e:b9:78:55:
                    9a:3f:4f:8f:1c:86:f7:b4:f5:1c:76:b5:f6:56:e3:
                    86:72:45:04:46:cd:79:13:0e:f3:b2:9b:e4:b9:58:
                    c7:b4:39:81:6d:28:69:17:6d:16:3d:b6:22:ff:ec:
                    db:92:73:e7:89:e2:ff:ab:7a:04:57:a0:ee:6d:3c:
                    88:ad:81:46:b6:b6:67:db:bc:af:57:06:7a:c8:eb:
                    0e:83:0c:27:17:9f:e8:03:f4:03:c3:62:5e:6e:73:
                    89:68:f6:30:6f:0d:99:d0:4c:ad:08:83:f6:02:52:
                    24:08:ed:0f:90:05:83:d6:95:b1:18:e1:34:8d:92:
                    95:92:d0:21:9f:f8:1a:fd:70:1c:88:f2:8d:a6:10:
                    8b:25:d6:ac:0e:5b:f6:72:07:e6:af:76:d3:c8:7a:
                    d1:bb:45:1b:39:b7:b7:cb:c9:3f:93:6b:94:dd:88:
                    53:2c:0c:98:5e:43:26:88:a9:02:d0:34:b2:e3:24:
                    30:05:31:00:5b:c5:bc:92:80:f2:de:bc:6d:7f:0d:
                    ed:34:94:e3:58:6f:f8:04:73:44:66:60:bd:b8:27:
                    cc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:14:D7:31:79:DF:45:29:F8:1B:9A:87:C9:5D:F2:36:D6:E7:A6:8C
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659C7D/92B51D2EC79311F1AD87B8ACCE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659C7D/92B51D2EC79311F1AD87B8ACCE1D38B0/7RTXMXnfRSn4G5qHyV3yNtbnpow.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328296

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.164.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:57:09:ff:a0:64:b7:48:83:a0:b6:35:48:3c:e4:54:f9:ca:
         a6:95:a0:43:64:dc:d4:eb:d2:f1:c5:71:b5:73:5a:9b:e8:ec:
         ba:b2:c2:a6:47:8d:b2:55:19:ee:d4:ed:0d:8a:0d:6d:2b:ef:
         bf:88:08:a8:40:d5:76:02:9a:16:d2:5e:0f:6b:a5:b1:1f:ee:
         4f:1c:23:1e:08:61:01:e2:6c:9e:e0:47:39:0b:51:f1:40:48:
         db:9e:52:47:10:5a:cd:99:a4:a9:8e:95:2e:b0:27:9e:c8:3a:
         fc:a7:4f:ec:a4:b6:8f:a9:65:3b:b6:61:8b:72:61:68:3e:af:
         94:42:82:01:55:3c:7b:ee:cd:7a:43:27:e8:8f:4c:7f:11:bd:
         a5:38:71:bb:4d:59:aa:eb:b4:ce:e4:3a:0c:43:e0:ae:3e:5d:
         7d:87:d0:cf:3c:df:e8:df:32:ba:79:5f:72:ab:ef:85:1a:da:
         13:6c:4a:0a:af:29:b3:cb:28:f3:45:3d:01:0b:e0:a0:fa:8b:
         6b:30:f7:bb:5a:fd:24:6d:91:a5:63:af:78:15:ba:27:7d:8f:
         63:cd:7a:62:71:ea:7e:ba:63:fc:14:bf:25:07:47:d8:dc:20:
         dd:64:bf:4a:94:ec:b9:7f:9a:05:61:2a:66:39:2e:2f:5d:58:
         e4:37:a1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 23:10:42 2026 by rpki-client