Certificate
$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/I8xn97X6oZbu3VVmQaMUU-BlZrY.cer
File: I8xn97X6oZbu3VVmQaMUU-BlZrY.cer (raw, json)
Hash identifier: uS9nYIpVeR8rhYWRjauttQsY4CKKMMvho6S+0ru6o3I=
Subject key identifier: 23:CC:67:F7:B5:FA:A1:96:EE:DD:55:66:41:A3:14:53:E0:65:66:B6
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 4313
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F361ED84/9698A9D6D37F11F191570EB3CE1D38B0/I8xn97X6oZbu3VVmQaMUU-BlZrY.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F361ED84/9698A9D6D37F11F191570EB3CE1D38B0/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 29 Oct 2026 10:00:44 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 328581
IP: 102.23.140.0/22
IP: 102.207.104.0/22
IP: 102.223.168.0/22
IP: 2c0f:eaf8::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Nov 2026 00:08:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17171 (0x4313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Oct 29 10:00:44 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F361ED84AF, serialNumber=23CC67F7B5FAA196EEDD556641A31453E06566B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b8:8f:d5:0b:cb:3e:83:47:aa:31:2e:32:94:
03:8c:6b:99:f6:95:9b:16:2e:80:84:f5:c1:64:8c:
42:e5:e9:1e:c9:17:92:f7:0e:a4:fc:8d:e3:c1:f8:
78:b3:44:36:5b:4f:4f:5d:57:49:b2:40:35:37:77:
86:3e:49:56:c0:be:68:d5:bb:6d:7c:cf:67:c4:ba:
08:3c:85:c3:c7:2d:55:13:1a:37:c1:75:03:0f:c7:
40:ab:1c:e8:90:a6:9e:78:5e:f2:85:39:f1:71:ee:
0e:bb:83:73:c0:60:a4:7d:5b:19:41:50:c4:e6:9b:
86:39:72:48:e0:bd:56:5f:1d:ea:12:d7:48:11:5e:
84:44:4e:0d:97:9b:35:0e:1f:39:13:3e:28:57:44:
37:09:58:7c:38:7d:62:90:ad:dd:bc:4e:d4:04:8c:
ad:86:b1:71:69:d7:c4:2a:a2:d0:27:7c:16:ca:5d:
33:71:b3:fa:fa:9b:6e:db:0b:f1:01:87:f1:f2:77:
53:00:66:e6:29:a2:9f:76:60:fc:f1:dd:e9:c2:3c:
0f:30:aa:76:d3:e9:6c:c3:06:ba:26:78:cb:47:2f:
21:a3:1d:4e:6d:46:d7:03:6e:5a:66:aa:87:33:1e:
d6:62:ce:ac:94:29:1e:3d:95:88:8b:cf:1a:d4:a1:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CC:67:F7:B5:FA:A1:96:EE:DD:55:66:41:A3:14:53:E0:65:66:B6
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED84/9698A9D6D37F11F191570EB3CE1D38B0/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED84/9698A9D6D37F11F191570EB3CE1D38B0/I8xn97X6oZbu3VVmQaMUU-BlZrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328581
sbgp-ipAddrBlock: critical
IPv4:
102.23.140.0/22
102.207.104.0/22
102.223.168.0/22
IPv6:
2c0f:eaf8::/32
Signature Algorithm: sha256WithRSAEncryption
26:a7:53:d3:5d:cf:35:dd:2e:7c:9b:b5:44:29:d1:b6:01:ef:
a5:68:7a:08:f9:e3:d2:0f:49:df:7b:40:33:b4:a2:02:c1:9b:
2f:64:e3:f7:93:bd:b5:81:b2:27:b8:51:0b:8e:15:12:79:84:
55:76:56:07:6d:26:59:30:48:a7:f7:55:e8:e7:6f:fb:3e:66:
a2:cf:09:85:56:c1:44:3c:d5:b3:09:e7:8c:fd:f8:29:5f:5d:
41:1b:55:7b:bc:a4:67:72:19:c7:42:92:30:de:96:10:cf:a2:
b6:c1:c6:76:cc:8d:9f:c2:51:03:36:71:53:0c:d1:43:9a:42:
07:54:82:e8:2d:ad:2b:79:c3:bb:83:1d:42:c6:5f:fd:95:61:
84:aa:01:d2:b7:2f:db:d2:68:6e:4d:2b:d3:72:2a:6f:45:98:
1e:41:a8:5a:03:9d:46:65:61:15:fc:df:24:a9:ee:f9:9a:21:
8f:f8:5e:5e:67:18:32:b1:65:e5:0b:1d:97:fd:f9:7c:27:ef:
64:af:79:d4:31:6f:d7:52:bf:4c:14:68:5c:45:02:6e:67:29:
f9:d8:28:ef:06:70:ba:6c:3a:51:9e:ac:bd:5e:dc:34:1a:ec:
b8:1c:e1:ec:91:33:0b:e0:28:b6:7d:25:12:74:05:6c:83:7a:
1e:75:7a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:16:00 2026 by rpki-client