Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/0dmrlRrZ6GQYFjLs6Ieb5WXuUCM.cer
File:                     0dmrlRrZ6GQYFjLs6Ieb5WXuUCM.cer (raw, json)
Hash identifier:          30h7Wmhz3NKWHndLcINWxhsZiGkbFWDz+2+FdeEm5Zs=
Subject key identifier:   D1:D9:AB:95:1A:D9:E8:64:18:16:32:EC:E8:87:9B:E5:65:EE:50:23
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4232
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F367CB0A/E838897EAD0411F1BAA8D719CF1D38B0/0dmrlRrZ6GQYFjLs6Ieb5WXuUCM.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F367CB0A/E838897EAD0411F1BAA8D719CF1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 10 Sep 2026 10:46:55 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328570
                          IP: 102.67.160.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16946 (0x4232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Sep 10 10:46:55 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F367CB0AAF, serialNumber=D1D9AB951AD9E864181632ECE8879BE565EE5023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c5:7b:44:45:be:44:65:71:56:1d:8a:79:d8:
                    e1:d5:ff:29:ff:b5:d4:3b:82:4a:0a:bd:8a:6a:10:
                    7c:6f:c5:39:96:bc:12:8a:79:e6:80:82:68:b6:ba:
                    85:62:68:0a:81:f6:bc:b4:87:e6:4a:1b:65:22:d8:
                    f2:35:2e:50:2c:20:b0:be:d4:b7:e7:29:67:5e:07:
                    bc:80:3d:bf:b5:2e:b5:17:d7:52:f1:92:05:25:e1:
                    08:d3:28:2d:1c:1f:7d:09:1d:e0:a1:82:54:fa:34:
                    4c:ad:80:ca:59:09:52:f8:01:0b:8d:2c:f5:11:9c:
                    04:ee:a8:39:c3:4c:7e:23:db:13:bf:b9:30:f2:a6:
                    e0:56:ae:dc:b1:da:23:d2:e1:d3:a4:b2:b4:fb:28:
                    da:ee:e2:27:04:4f:fe:40:d3:b4:9f:4e:17:00:d1:
                    3d:94:0d:64:40:69:88:1c:62:ab:e3:52:7a:2a:0e:
                    eb:3d:a9:ac:0d:7b:09:44:b3:64:26:ab:fe:94:ef:
                    8a:44:c8:32:dc:92:e0:42:a2:55:4e:0e:9f:16:76:
                    3b:02:58:3c:d1:ea:8b:86:cd:5c:49:08:c2:4e:c5:
                    97:a1:2a:17:b7:a7:a7:6a:67:8f:5b:12:9b:45:8d:
                    4e:e0:e8:4c:e7:ec:27:37:5f:a1:5c:05:87:49:9a:
                    09:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D9:AB:95:1A:D9:E8:64:18:16:32:EC:E8:87:9B:E5:65:EE:50:23
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CB0A/E838897EAD0411F1BAA8D719CF1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CB0A/E838897EAD0411F1BAA8D719CF1D38B0/0dmrlRrZ6GQYFjLs6Ieb5WXuUCM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328570

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.67.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:f0:02:fc:79:7c:bc:84:4e:e9:59:b4:b5:db:26:95:7a:c8:
         1a:82:0a:df:6e:2f:c8:3e:53:a5:4f:2a:d0:b0:82:22:d3:4c:
         98:89:43:e6:91:e0:f6:28:5a:95:a2:e2:ec:8f:db:51:7c:aa:
         a8:54:b6:2c:19:fe:ce:36:3d:dd:0b:e1:44:2f:67:6b:09:6e:
         f9:33:89:1f:78:1f:22:c3:8b:e9:9b:7c:af:dc:c4:a8:95:c2:
         5f:42:09:10:e8:d5:04:e2:f1:2f:d1:9a:a9:64:e0:d9:be:f6:
         c3:65:99:80:5d:c5:cc:28:6b:f3:76:da:3d:5b:5f:44:a6:5e:
         bc:33:c1:ef:14:0c:8a:77:57:ff:a2:7c:67:21:46:6a:03:e2:
         cd:bb:24:10:42:d3:6a:8e:b8:af:10:47:82:81:99:9d:b2:74:
         a3:8a:c8:7c:be:d2:81:44:22:de:f0:1d:9f:5c:89:e6:bb:56:
         a7:99:9b:3b:ff:bb:c9:29:40:6d:12:cb:55:be:13:87:d8:c6:
         41:ca:6a:b0:02:86:2f:64:dd:28:04:72:c4:fd:ef:f8:77:60:
         80:6a:a2:a0:f7:5e:4e:f5:28:41:9d:59:64:59:a3:fa:17:98:
         62:21:62:ee:3e:07:5f:e0:89:e6:b4:3f:29:b2:63:2f:52:f6:
         2e:85:59:1a
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICQjIwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjA5MTAxMDQ2NTVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjdDQjBBQUYxMTAvBgNVBAUTKEQxRDlBQjk1MUFEOUU4NjQxODE2MzJF
Q0U4ODc5QkU1NjVFRTUwMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQxXtERb5EZXFWHYp52OHV/yn/tdQ7gkoKvYpqEHxvxTmWvBKKeeaAgmi2uoVi
aAqB9ry0h+ZKG2Ui2PI1LlAsILC+1LfnKWdeB7yAPb+1LrUX11LxkgUl4QjTKC0c
H30JHeChglT6NEytgMpZCVL4AQuNLPURnATuqDnDTH4j2xO/uTDypuBWrtyx2iPS
4dOksrT7KNru4icET/5A07SfThcA0T2UDWRAaYgcYqvjUnoqDus9qawNewlEs2Qm
q/6U74pEyDLckuBColVODp8WdjsCWDzR6ouGzVxJCMJOxZehKhe3p6dqZ49bEptF
jU7g6Ezn7Cc3X6FcBYdJmgnvAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQU0dmrlRrZ
6GQYFjLs6Ieb5WXuUCMwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3Q0IwQS9FODM4ODk3RUFEMDQx
MUYxQkFBOEQ3MTlDRjFEMzhCMC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2N0NCMEEvRTgzODg5N0VBRDA0MTFGMUJBQThENzE5Q0YxRDM4QjAvMGRtcmxS
clo2R1FZRmpMczZJZWI1V1h1VUNNLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFA3owHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmQ6AwDQYJKoZIhvcN
AQELBQADggEBAHDwAvx5fLyETulZtLXbJpV6yBqCCt9uL8g+U6VPKtCwgiLTTJiJ
Q+aR4PYoWpWi4uyP21F8qqhUtiwZ/s42Pd0L4UQvZ2sJbvkziR94HyLDi+mbfK/c
xKiVwl9CCRDo1QTi8S/Rmqlk4Nm+9sNlmYBdxcwoa/N22j1bX0SmXrwzwe8UDIp3
V/+ifGchRmoD4s27JBBC02qOuK8QR4KBmZ2ydKOKyHy+0oFEIt7wHZ9ciea7VqeZ
mzv/u8kpQG0Sy1W+E4fYxkHKarAChi9k3SgEcsT97/h3YIBqoqD3Xk71KEGdWWRZ
o/oXmGIhYu4+B1/giea0PymyYy9S9i6FWRo=
-----END CERTIFICATE-----
Generated at Sat Sep 19 11:38:49 2026 by rpki-client