Certificate
$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/r9KUDQ3dbmUbuPdH1wHMEFQYpHg.cer
File: r9KUDQ3dbmUbuPdH1wHMEFQYpHg.cer (raw, json)
Hash identifier: VF0D6NPakFYBKs1/pvZtrKUfREzLgu98LgQ+3Gc1JDk=
Subject key identifier: AF:D2:94:0D:0D:DD:6E:65:1B:B8:F7:47:D7:01:CC:10:54:18:A4:78
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 42CD
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FF015/9E246658C70F11F1A40F27C6CE1D38B0/r9KUDQ3dbmUbuPdH1wHMEFQYpHg.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FF015/9E246658C70F11F1A40F27C6CE1D38B0/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 13 Oct 2026 14:08:59 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 329785
IP: 102.201.188.0/22
IP: 2c0f:5220::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Nov 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17101 (0x42cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Oct 13 14:08:59 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36FF015AF, serialNumber=AFD2940D0DDD6E651BB8F747D701CC105418A478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:76:50:d9:5b:85:4d:28:cb:77:fd:ed:a7:
15:a5:ae:4a:d6:4a:21:95:f9:aa:72:61:1b:2d:02:
cc:e7:ac:35:a3:22:5e:aa:1a:15:22:0c:76:e0:69:
ef:2d:98:c5:e0:05:d2:e0:fd:42:15:72:ba:de:9d:
c5:14:43:c0:51:2c:08:5c:b0:f5:af:16:2e:21:84:
89:a1:58:a4:29:6a:c9:37:75:06:d4:14:89:cf:73:
32:22:7f:56:af:b0:f0:a9:1d:5f:cf:cd:6d:36:b1:
e3:ef:9f:46:e1:d3:e9:3c:03:83:5c:24:8d:e7:5f:
5e:2e:bd:e5:8e:b8:2e:98:a2:b4:28:bd:df:90:70:
9c:12:19:b4:17:c0:3a:3e:b2:90:fb:89:5f:de:3e:
33:41:e2:14:c6:85:bb:fd:8b:0e:56:40:de:d1:16:
a0:82:a8:7d:ba:92:b8:db:ab:2a:fc:13:61:22:ee:
86:69:2f:99:e1:af:9b:03:dd:78:53:e2:72:a7:da:
f4:2f:06:50:0b:dd:0c:fb:9e:cb:0d:62:0a:25:99:
95:f4:a5:10:31:92:4c:23:28:e5:2b:83:57:52:2e:
2d:14:30:c4:a6:7f:a1:1d:77:1f:70:55:e3:ef:7f:
92:03:36:76:fa:f5:1d:c9:78:2b:6a:97:6e:0a:0d:
8b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D2:94:0D:0D:DD:6E:65:1B:B8:F7:47:D7:01:CC:10:54:18:A4:78
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF015/9E246658C70F11F1A40F27C6CE1D38B0/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF015/9E246658C70F11F1A40F27C6CE1D38B0/r9KUDQ3dbmUbuPdH1wHMEFQYpHg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329785
sbgp-ipAddrBlock: critical
IPv4:
102.201.188.0/22
IPv6:
2c0f:5220::/32
Signature Algorithm: sha256WithRSAEncryption
9a:6b:75:6f:b0:41:ac:1f:bf:36:b7:bd:1c:92:17:97:5e:c7:
73:d9:9a:0a:f4:94:73:c5:48:c5:c3:bb:b4:e1:a9:85:d5:d5:
97:67:21:4d:7d:15:63:62:29:7e:40:f7:71:10:eb:59:db:45:
f7:3c:af:55:2b:87:7f:56:37:24:6a:6b:ce:28:7b:b4:dc:a0:
61:df:8e:eb:77:e0:bb:cb:67:7c:45:86:c1:33:72:5b:45:82:
86:02:ac:59:56:d2:9f:74:c3:05:d0:96:3b:b3:ac:25:6b:16:
4a:77:ba:20:6c:e4:f9:b6:e3:e7:a5:15:8f:64:ee:fa:7e:a4:
1f:5b:de:b2:82:07:73:48:d7:06:58:1f:dd:d9:e8:d3:8d:0b:
21:dc:c7:58:3f:2c:ab:5e:7a:7a:ef:70:6e:41:f5:39:9f:b0:
d6:d3:71:7c:94:33:ea:dc:b3:45:fb:6b:10:e8:0c:9a:3f:a0:
47:ca:60:f0:1c:a8:2a:1b:c5:c4:b2:b6:48:d0:65:02:3e:29:
f2:6e:b5:c2:47:18:b8:9c:b9:d3:bf:98:a9:3b:82:ba:0b:22:
6a:1e:2e:4a:0a:ff:24:fb:d6:25:23:70:b0:94:37:9f:25:9a:
21:36:a5:3d:d2:8b:51:3d:25:c6:81:88:49:9d:a3:5f:b6:a8:
4f:e7:7f:6c
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICQs0wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjEwMTMxNDA4NTlaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkZGMDE1QUYxMTAvBgNVBAUTKEFGRDI5NDBEMERERDZFNjUxQkI4Rjc0
N0Q3MDFDQzEwNTQxOEE0NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCmOXZQ2VuFTSjLd/3tpxWlrkrWSiGV+apyYRstAsznrDWjIl6qGhUiDHbgae8t
mMXgBdLg/UIVcrrencUUQ8BRLAhcsPWvFi4hhImhWKQpask3dQbUFInPczIif1av
sPCpHV/PzW02sePvn0bh0+k8A4NcJI3nX14uveWOuC6YorQovd+QcJwSGbQXwDo+
spD7iV/ePjNB4hTGhbv9iw5WQN7RFqCCqH26krjbqyr8E2Ei7oZpL5nhr5sD3XhT
4nKn2vQvBlAL3Qz7nssNYgolmZX0pRAxkkwjKOUrg1dSLi0UMMSmf6Eddx9wVePv
f5IDNnb69R3JeCtql24KDYsDAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUr9KUDQ3d
bmUbuPdH1wHMEFQYpHgwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGRjAxNS85RTI0NjY1OEM3MEYx
MUYxQTQwRjI3QzZDRTFEMzhCMC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RkYwMTUvOUUyNDY2NThDNzBGMTFGMUE0MEYyN0M2Q0UxRDM4QjAvcjlLVURR
M2RibVVidVBkSDF3SE1FRlFZcEhnLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFCDkwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmybwwDQQCAAIwBwMF
ACwPUiAwDQYJKoZIhvcNAQELBQADggEBAJprdW+wQawfvza3vRySF5dex3PZmgr0
lHPFSMXDu7ThqYXV1ZdnIU19FWNiKX5A93EQ61nbRfc8r1Urh39WNyRqa84oe7Tc
oGHfjut34LvLZ3xFhsEzcltFgoYCrFlW0p90wwXQljuzrCVrFkp3uiBs5Pm24+el
FY9k7vp+pB9b3rKCB3NI1wZYH93Z6NONCyHcx1g/LKteenrvcG5B9TmfsNbTcXyU
M+rcs0X7axDoDJo/oEfKYPAcqCobxcSytkjQZQI+KfJutcJHGLicudO/mKk7groL
ImoeLkoK/yT71iUjcLCUN58lmiE2pT3Si1E9JcaBiEmdo1+2qE/nf2w=
-----END CERTIFICATE-----
Generated at Tue Nov 3 17:06:32 2026 by rpki-client