Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/eke20jGhHUpmmiXyLN0QZoIQ8RQ.cer
File:                     eke20jGhHUpmmiXyLN0QZoIQ8RQ.cer (raw, json)
Hash identifier:          L87DFs3gyZIx/y097SUVYmuvBfHtLaNJbK+PsYeUB/s=
Subject key identifier:   7A:47:B6:D2:31:A1:1D:4A:66:9A:25:F2:2C:DD:10:66:82:10:F1:14
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4319
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36CE380/63A30136D3CD11F1B0FD45A3CE1D38B0/eke20jGhHUpmmiXyLN0QZoIQ8RQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36CE380/63A30136D3CD11F1B0FD45A3CE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 29 Oct 2026 19:17:39 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329010
                          IP: 102.217.12.0/22
                          IP: 2c0f:4080::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 07:36:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17177 (0x4319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Oct 29 19:17:39 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36CE380AF, serialNumber=7A47B6D231A11D4A669A25F22CDD10668210F114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3a:d2:07:0f:6f:a5:82:1c:03:9a:fd:cc:d9:
                    b5:0d:8a:95:02:67:0e:13:ed:2a:47:82:7c:37:86:
                    d6:0f:8c:97:c6:44:ea:a9:33:19:9d:32:68:0e:7e:
                    a6:5f:83:55:99:bc:d0:a2:c3:97:28:ab:c2:90:98:
                    88:68:68:32:fd:67:c7:92:7e:4b:28:73:ae:fd:0d:
                    39:fe:86:ef:f9:93:8f:0f:e0:e1:a7:95:c8:d2:38:
                    e4:f1:f8:54:14:ef:52:3e:f8:e1:77:3a:a6:33:1a:
                    62:13:15:65:68:ec:c9:21:c0:10:c2:6b:b8:65:3d:
                    28:04:98:8d:ac:c9:9a:2b:1f:75:d0:75:f7:c3:9c:
                    f5:f0:16:dc:1a:30:e8:ca:77:35:e6:4a:e9:88:af:
                    4f:7a:b8:08:39:b6:ad:24:2c:0c:1d:49:ed:73:70:
                    d5:7f:f0:58:23:39:e9:7e:60:83:d8:63:02:28:31:
                    a2:10:c1:9e:d9:a6:cc:9d:ce:c0:07:8e:83:ac:23:
                    0d:08:fd:c6:d6:6d:a7:ba:93:3d:3f:dd:4e:84:a4:
                    a7:8f:28:d8:2c:a7:97:82:df:b0:74:c7:e1:67:07:
                    c2:58:0f:61:13:7d:14:98:56:f6:83:b6:1f:4b:80:
                    42:05:ac:29:7c:ea:1e:0c:e2:e2:86:68:9b:ea:3c:
                    56:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:47:B6:D2:31:A1:1D:4A:66:9A:25:F2:2C:DD:10:66:82:10:F1:14
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE380/63A30136D3CD11F1B0FD45A3CE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE380/63A30136D3CD11F1B0FD45A3CE1D38B0/eke20jGhHUpmmiXyLN0QZoIQ8RQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329010

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.217.12.0/22
                IPv6:
                  2c0f:4080::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:fb:70:66:8c:e6:2b:89:1c:6d:83:c7:ad:b8:01:69:44:64:
         c8:59:cf:4b:87:ec:4e:0f:67:92:8b:00:06:02:23:93:63:88:
         5d:a3:e7:f3:d4:fd:b8:6d:dc:d0:77:77:94:3a:d7:1e:5c:cd:
         60:7e:05:b9:82:4d:30:22:da:3b:7c:10:eb:f1:57:2d:c0:c2:
         c3:44:ae:40:63:c9:b6:69:a9:94:cb:19:ec:74:fa:6e:e4:96:
         5e:96:95:90:6b:e7:78:5b:d5:dc:2d:39:c9:bd:9a:d6:81:97:
         87:5b:d7:f8:39:f7:21:d9:18:4e:e1:25:90:74:f0:18:9b:25:
         a0:b3:b8:4b:de:ad:cb:3e:45:ca:10:09:2e:4f:4e:f1:77:ad:
         ca:c7:0b:5b:3c:10:3d:80:1d:a8:bf:65:fa:fc:76:a3:bc:a7:
         ef:11:32:b4:c6:69:07:14:ea:ee:c3:79:82:6a:df:f1:bc:f1:
         ce:c0:f5:19:d5:c7:c1:94:b1:ff:37:d1:e3:79:52:16:24:60:
         74:d8:96:3c:04:7c:eb:fc:4d:e3:07:8d:a1:c1:2c:b8:68:1a:
         51:9c:05:cd:61:85:7d:ba:d0:6d:86:3c:20:1a:5c:e5:d1:54:
         db:52:b9:e0:4a:51:55:87:ea:ec:f7:8d:a7:84:77:ca:7c:c1:
         31:07:01:a4
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICQxkwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjEwMjkxOTE3MzlaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkNFMzgwQUYxMTAvBgNVBAUTKDdBNDdCNkQyMzFBMTFENEE2NjlBMjVG
MjJDREQxMDY2ODIxMEYxMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCrOtIHD2+lghwDmv3M2bUNipUCZw4T7SpHgnw3htYPjJfGROqpMxmdMmgOfqZf
g1WZvNCiw5coq8KQmIhoaDL9Z8eSfksoc679DTn+hu/5k48P4OGnlcjSOOTx+FQU
71I++OF3OqYzGmITFWVo7MkhwBDCa7hlPSgEmI2syZorH3XQdffDnPXwFtwaMOjK
dzXmSumIr096uAg5tq0kLAwdSe1zcNV/8FgjOel+YIPYYwIoMaIQwZ7ZpsydzsAH
joOsIw0I/cbWbae6kz0/3U6EpKePKNgsp5eC37B0x+FnB8JYD2ETfRSYVvaDth9L
gEIFrCl86h4M4uKGaJvqPFapAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUeke20jGh
HUpmmiXyLN0QZoIQ8RQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZDRTM4MC82M0EzMDEzNkQzQ0Qx
MUYxQjBGRDQ1QTNDRTFEMzhCMC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Q0UzODAvNjNBMzAxMzZEM0NEMTFGMUIwRkQ0NUEzQ0UxRDM4QjAvZWtlMjBq
R2hIVXBtbWlYeUxOMFFab0lROFJRLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBTIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm2QwwDQQCAAIwBwMF
ACwPQIAwDQYJKoZIhvcNAQELBQADggEBAHX7cGaM5iuJHG2Dx624AWlEZMhZz0uH
7E4PZ5KLAAYCI5NjiF2j5/PU/bht3NB3d5Q61x5czWB+BbmCTTAi2jt8EOvxVy3A
wsNErkBjybZpqZTLGex0+m7kll6WlZBr53hb1dwtOcm9mtaBl4db1/g59yHZGE7h
JZB08BibJaCzuEvercs+RcoQCS5PTvF3rcrHC1s8ED2AHai/Zfr8dqO8p+8RMrTG
aQcU6u7DeYJq3/G88c7A9RnVx8GUsf830eN5UhYkYHTYljwEfOv8TeMHjaHBLLho
GlGcBc1hhX260G2GPCAaXOXRVNtSueBKUVWH6uz3jaeEd8p8wTEHAaQ=
-----END CERTIFICATE-----
Generated at Wed Nov 4 20:25:28 2026 by rpki-client