Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/co6d8vendXcUhEsssIgR99pu9Qk.cer
File:                     co6d8vendXcUhEsssIgR99pu9Qk.cer (raw, json)
Hash identifier:          2E6Gipp26jQVd24XJXhi1F1j+5lp4dSmRRqeILIw5dQ=
Subject key identifier:   72:8E:9D:F2:F7:A7:75:77:14:84:4B:2C:B0:88:11:F7:DA:6E:F5:09
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       42C8
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36E3822/85324FA6C3B411F197B6D5E8CE1D38B0/co6d8vendXcUhEsssIgR99pu9Qk.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36E3822/85324FA6C3B411F197B6D5E8CE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 13 Oct 2026 00:07:04 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37051
                          IP: 196.216.163.0/24
                          IP: 2001:43fc:7800::/44
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17096 (0x42c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Oct 13 00:07:04 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36E3822AF, serialNumber=728E9DF2F7A7757714844B2CB08811F7DA6EF509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:da:e6:4c:36:7f:e9:8e:68:d6:51:cb:25:da:
                    23:f2:93:13:8a:22:cf:83:08:4b:2c:33:ae:24:8e:
                    7e:2c:ba:06:df:24:6c:61:7c:4d:b4:47:f3:b5:e4:
                    00:1e:44:b3:1e:5c:2a:5a:c4:0d:36:23:26:01:51:
                    2c:8d:90:c1:48:b6:b1:fb:96:d1:fc:57:d8:e4:44:
                    a2:25:51:37:cb:4e:39:f9:73:dd:c1:63:e5:3c:fa:
                    49:4e:69:c4:3a:c8:95:9c:b1:ab:9a:f1:d7:a3:a3:
                    ee:4c:a2:cb:11:77:36:60:6c:42:8a:57:28:d8:1d:
                    98:2a:83:4e:6d:f3:38:e5:41:14:4b:d3:b0:b8:9d:
                    39:08:a6:c2:2a:be:d4:1a:f1:c0:8b:5f:71:19:45:
                    ea:81:3d:58:84:09:25:d8:a4:6b:e2:c5:30:d6:e1:
                    6d:1f:8c:ea:af:90:ee:ee:ef:d6:70:54:39:65:30:
                    da:5f:b0:6b:02:99:69:1b:a5:87:e7:c6:44:36:42:
                    b1:0e:2f:db:44:cb:13:30:13:54:39:f1:6e:bd:c6:
                    51:33:5b:80:65:34:c8:ea:b4:42:e9:de:4f:77:bf:
                    98:4d:c1:d2:87:52:45:6b:42:3d:54:c9:77:91:04:
                    25:31:47:a7:46:2a:0c:0c:a0:6c:2b:71:ce:a8:d8:
                    56:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8E:9D:F2:F7:A7:75:77:14:84:4B:2C:B0:88:11:F7:DA:6E:F5:09
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3822/85324FA6C3B411F197B6D5E8CE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3822/85324FA6C3B411F197B6D5E8CE1D38B0/co6d8vendXcUhEsssIgR99pu9Qk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37051

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.216.163.0/24
                IPv6:
                  2001:43fc:7800::/44

    Signature Algorithm: sha256WithRSAEncryption
         b2:5a:56:f1:4c:4b:9d:1d:dc:06:69:53:0e:f6:23:86:72:69:
         6a:3f:ba:96:d5:a4:25:c2:2b:34:74:36:dc:c4:02:bd:ea:b0:
         2d:d9:4c:bc:aa:37:11:3d:0c:15:e6:9a:20:33:9b:c1:a4:25:
         eb:b5:eb:e7:9d:34:59:26:3b:19:71:7c:ac:61:17:c8:1e:8a:
         3d:e3:df:d5:a1:31:5d:04:0a:c8:20:47:8e:73:f6:c0:31:60:
         cb:65:bc:80:e0:28:d5:a5:3e:aa:44:d8:c9:c1:ec:20:18:d8:
         c3:a8:b6:11:cf:4b:59:4a:57:7f:bb:23:dd:6f:1f:b7:b2:88:
         4e:b7:9b:73:e5:de:e4:c5:7c:d2:91:3d:73:5d:e8:4b:50:a3:
         b8:16:73:25:4e:dd:b7:0b:9c:8e:08:f5:ca:fa:26:71:d8:63:
         29:f9:9a:95:73:c5:a2:91:f3:dc:95:8c:56:80:62:3e:3d:39:
         8a:d7:17:a5:dc:7f:58:8c:cb:10:d6:da:b8:a3:58:5c:48:60:
         d7:d1:6a:1e:79:12:53:30:1d:2c:70:9b:21:31:2c:08:00:53:
         c1:d1:1e:d7:4e:66:db:85:e6:07:37:d0:63:e4:20:7f:11:85:
         b5:f6:e6:b3:81:dc:0b:4c:c2:59:87:8b:b5:0c:fe:ae:32:de:
         9e:15:98:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:21:06 2026 by rpki-client