Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/7irD2j2KCkxmoRFNf8DUWv2CDgo.cer
File:                     7irD2j2KCkxmoRFNf8DUWv2CDgo.cer (raw, json)
Hash identifier:          Mgy/41PE5BN2q1RNpQSkA1a1TB2PN57s3emBAeBnlp8=
Subject key identifier:   EE:2A:C3:DA:3D:8A:0A:4C:66:A1:11:4D:7F:C0:D4:5A:FD:82:0E:0A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       42CB
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3676EFD/073E2BB8C6F411F193F62E16CF1D38B0/7irD2j2KCkxmoRFNf8DUWv2CDgo.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3676EFD/073E2BB8C6F411F193F62E16CF1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 13 Oct 2026 10:51:30 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329220
                          IP: 102.213.28.0/22
                          IP: 2001:43fc:d000::/48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17099 (0x42cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Oct 13 10:51:30 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3676EFDAF, serialNumber=EE2AC3DA3D8A0A4C66A1114D7FC0D45AFD820E0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ca:f3:4f:2b:d3:f1:3f:ec:20:82:9c:28:5c:
                    65:2c:46:26:65:c8:4f:9f:c1:e9:4d:1b:71:bf:52:
                    fb:d1:b8:05:d0:f5:67:75:9e:19:12:43:da:a4:5f:
                    94:c0:83:9b:60:f8:30:cc:5b:12:96:09:5a:07:86:
                    fe:23:07:3c:52:02:2b:83:c3:a2:eb:05:2d:51:46:
                    8a:c5:e6:20:c3:81:58:a8:f4:45:2c:01:69:53:80:
                    59:f6:4c:89:78:84:eb:4e:1f:b3:6c:41:7f:65:37:
                    e7:2e:c3:79:90:ba:eb:3f:39:82:a6:54:29:e6:8e:
                    a9:be:5b:87:47:48:90:8c:61:e2:ec:59:35:b5:93:
                    25:57:8a:19:ef:2f:af:2b:7d:fe:f4:80:a4:18:a4:
                    67:68:84:5c:2f:6b:ce:3e:d3:c9:90:a4:7d:00:dd:
                    c1:f3:e2:03:d9:41:b6:2e:63:9f:c0:f8:f8:48:04:
                    25:d9:b2:fe:0a:0e:dd:2c:87:0c:03:db:f5:95:b6:
                    40:48:27:55:d7:f0:82:82:96:4a:c3:1e:39:b9:6e:
                    d4:ef:eb:e8:36:c6:f0:e8:63:f1:2e:72:96:51:1b:
                    af:12:11:91:23:dd:01:de:4e:3f:f1:d8:05:81:3c:
                    88:85:fc:f3:8b:8f:e5:ff:ea:d9:d3:b7:3b:3c:79:
                    7e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2A:C3:DA:3D:8A:0A:4C:66:A1:11:4D:7F:C0:D4:5A:FD:82:0E:0A
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EFD/073E2BB8C6F411F193F62E16CF1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EFD/073E2BB8C6F411F193F62E16CF1D38B0/7irD2j2KCkxmoRFNf8DUWv2CDgo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329220

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.213.28.0/22
                IPv6:
                  2001:43fc:d000::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:bc:60:e0:38:e1:6e:a7:6f:7a:f6:a4:d8:2d:f8:72:71:de:
         47:ed:59:12:c2:57:5a:ce:07:1d:cb:ad:cb:1c:60:42:70:e7:
         44:c7:68:2f:9a:eb:ae:6d:f8:45:9b:5e:be:5a:10:95:d9:a2:
         39:85:74:12:15:62:61:ab:8b:ed:80:4a:f0:41:e1:54:e5:66:
         55:92:a5:ab:30:28:a6:88:a5:33:80:44:e9:72:90:4a:53:cc:
         78:c8:fe:24:71:8d:65:dd:d6:d3:ad:56:f5:ef:95:18:fc:cf:
         e2:64:13:a6:8a:25:9e:e3:f8:55:21:8c:78:7d:3b:f2:99:2b:
         e0:ad:a4:f7:4a:1a:74:1e:c5:fb:b6:a6:fc:87:4f:d6:5c:f8:
         a3:73:25:89:f4:46:29:d1:c2:17:57:e4:35:8f:69:f7:97:43:
         08:d9:aa:f6:55:5b:46:40:d4:e4:d4:ba:08:14:c5:e6:e2:a2:
         e0:0d:71:ad:c2:38:77:2d:26:b2:a5:03:ed:43:82:bf:c6:ef:
         f6:7f:38:96:9e:43:12:45:67:cf:1d:d3:20:8f:22:56:4c:e3:
         e1:bc:a4:3d:15:1b:23:cc:de:f1:61:2a:e3:6f:e6:26:5a:67:
         a5:be:8f:4c:5b:e6:28:2c:dd:2e:26:aa:80:4d:65:f2:9f:5c:
         d2:af:8a:32
-----BEGIN CERTIFICATE-----
MIIGJzCCBQ+gAwIBAgICQsswDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjEwMTMxMDUxMzBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjc2RUZEQUYxMTAvBgNVBAUTKEVFMkFDM0RBM0Q4QTBBNEM2NkExMTE0
RDdGQzBENDVBRkQ4MjBFMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDPyvNPK9PxP+wggpwoXGUsRiZlyE+fwelNG3G/UvvRuAXQ9Wd1nhkSQ9qkX5TA
g5tg+DDMWxKWCVoHhv4jBzxSAiuDw6LrBS1RRorF5iDDgVio9EUsAWlTgFn2TIl4
hOtOH7NsQX9lN+cuw3mQuus/OYKmVCnmjqm+W4dHSJCMYeLsWTW1kyVXihnvL68r
ff70gKQYpGdohFwva84+08mQpH0A3cHz4gPZQbYuY5/A+PhIBCXZsv4KDt0shwwD
2/WVtkBIJ1XX8IKClkrDHjm5btTv6+g2xvDoY/EucpZRG68SEZEj3QHeTj/x2AWB
PIiF/POLj+X/6tnTtzs8eX61AgMBAAGjggMcMIIDGDAdBgNVHQ4EFgQU7irD2j2K
CkxmoRFNf8DUWv2CDgowHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3NkVGRC8wNzNFMkJCOEM2RjQx
MUYxOTNGNjJFMTZDRjFEMzhCMC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NzZFRkQvMDczRTJCQjhDNkY0MTFGMTkzRjYyRTE2Q0YxRDM4QjAvN2lyRDJq
MktDa3htb1JGTmY4RFVXdjJDRGdvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBgQwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAJm1RwwDwQCAAIwCQMH
ACABQ/zQADANBgkqhkiG9w0BAQsFAAOCAQEAjbxg4Djhbqdvevak2C34cnHeR+1Z
EsJXWs4HHcutyxxgQnDnRMdoL5rrrm34RZtevloQldmiOYV0EhViYauL7YBK8EHh
VOVmVZKlqzAopoilM4BE6XKQSlPMeMj+JHGNZd3W061W9e+VGPzP4mQTpoolnuP4
VSGMeH078pkr4K2k90oadB7F+7am/IdP1lz4o3MlifRGKdHCF1fkNY9p95dDCNmq
9lVbRkDU5NS6CBTF5uKi4A1xrcI4dy0msqUD7UOCv8bv9n84lp5DEkVnzx3TII8i
Vkzj4bykPRUbI8ze8WEq42/mJlpnpb6PTFvmKCzdLiaqgE1l8p9c0q+KMg==
-----END CERTIFICATE-----
Generated at Tue Nov 3 18:08:00 2026 by rpki-client