Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/1-0tlCXqfLm4-cvVBE6rbWNFiXA.cer
File:                     1-0tlCXqfLm4-cvVBE6rbWNFiXA.cer (raw, json)
Hash identifier:          fkwsftuqz5CMe1qkSCYCXOfuRfcsxFue4/n5URxwWBo=
Subject key identifier:   D7:ED:2D:94:25:EA:7C:B9:B8:F9:CB:D5:04:4E:AB:6D:63:45:89:70
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4137
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364E8BF/7F6043A63D9211E790533747F8AEA228/1-0tlCXqfLm4-cvVBE6rbWNFiXA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364E8BF/7F6043A63D9211E790533747F8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 18 Jun 2026 01:08:39 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37095
                          IP: 102.204.128.0/22
                          IP: 2001:43f8:d0::/48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16695 (0x4137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jun 18 01:08:39 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F364E8BFAF, serialNumber=D7ED2D9425EA7CB9B8F9CBD5044EAB6D63458970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:f4:3e:9a:3c:34:db:d0:b4:8b:78:6f:9a:
                    ba:11:08:79:28:e2:9d:67:62:ee:e7:cb:90:a5:e2:
                    f4:06:a7:68:b7:d2:6b:0e:0d:10:1f:81:86:34:12:
                    f8:fe:cd:dc:cd:e4:ae:ad:ef:12:3e:9a:72:e8:b5:
                    2f:df:33:94:58:2f:50:1c:dd:70:0f:27:c0:7d:74:
                    f4:d6:54:e0:2b:63:e6:dc:65:a2:4c:b4:d8:53:4f:
                    df:5a:d5:95:33:4d:02:a3:a7:9b:c7:ba:5e:95:0b:
                    5e:92:a9:75:3a:26:2e:33:16:8e:b0:b6:8a:c4:c3:
                    86:1b:61:df:25:63:17:78:7a:76:5c:9a:e0:cb:8b:
                    ea:d7:51:e3:30:ef:bf:0f:30:14:b4:01:fe:ff:a7:
                    63:46:62:e7:9f:e6:33:00:7e:d7:e9:54:0a:f0:74:
                    26:97:b9:a5:ee:8c:44:1d:da:27:69:44:98:ee:43:
                    9d:65:67:f4:56:db:86:b5:e2:a1:04:db:ab:06:2f:
                    f9:62:ef:9e:a9:42:cc:84:23:e9:0b:50:60:0f:82:
                    42:39:f9:8e:81:52:85:99:4d:60:ee:74:e4:6b:67:
                    3a:94:d5:0d:19:13:21:d4:a6:5a:91:75:90:e2:cd:
                    a1:c6:ca:75:dd:16:67:0a:78:b7:ae:bf:24:fd:23:
                    b2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:ED:2D:94:25:EA:7C:B9:B8:F9:CB:D5:04:4E:AB:6D:63:45:89:70
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E8BF/7F6043A63D9211E790533747F8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E8BF/7F6043A63D9211E790533747F8AEA228/1-0tlCXqfLm4-cvVBE6rbWNFiXA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37095

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.204.128.0/22
                IPv6:
                  2001:43f8:d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:28:42:22:ad:d0:54:0f:88:7e:5b:42:8b:be:c4:f9:eb:ab:
         4c:9c:ac:2c:e2:88:c2:62:f3:4f:3c:0b:22:60:e5:99:d6:ba:
         a7:de:a8:ef:1e:02:5b:cf:d7:8d:33:11:eb:d9:71:64:01:39:
         b9:66:7c:db:4e:8e:66:62:d1:2e:dd:9c:6e:b4:f6:72:0a:de:
         c7:38:ef:4d:c4:ae:27:19:78:75:0b:cf:c3:55:b5:0d:3e:13:
         65:3d:e8:d2:85:98:99:94:a1:1c:fb:24:46:e5:b1:44:3c:e5:
         d5:58:1a:5c:a1:a1:5c:55:9e:7e:62:39:64:ed:78:50:f0:bb:
         2a:6b:72:28:c4:16:9d:74:e4:47:fa:56:b5:f0:bb:03:b0:8a:
         4a:8a:31:19:f4:24:db:c8:d5:48:4e:b5:7a:4f:04:37:b1:7c:
         04:f4:bd:be:06:02:0b:b7:fd:8e:21:b6:11:f3:24:e3:93:3c:
         99:5d:5d:a0:ce:36:64:83:08:d0:0c:ae:fb:cb:88:8b:77:6d:
         57:ad:85:dc:7e:dc:a5:06:9e:5d:a1:21:9d:49:aa:8a:28:50:
         e6:e4:5c:2f:2a:6b:73:6d:79:44:94:29:c4:ed:70:5f:d4:14:
         f3:84:ad:14:51:ca:38:c6:bb:8c:48:c7:f8:b2:a2:05:8f:e6:
         eb:9f:60:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 22:38:21 2026 by rpki-client