Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/3udgbTmfhJnqSZX7yd_BW7kYfWU.cer
File:                     3udgbTmfhJnqSZX7yd_BW7kYfWU.cer (raw, json)
Hash identifier:          aIL3Ynk0cmgGA3jt2YAs9shHbNAiRIwBITAOku+C5uI=
Subject key identifier:   DE:E7:60:6D:39:9F:84:99:EA:49:95:FB:C9:DF:C1:5B:B9:18:7D:65
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4304
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F361D6E0/6B9D8F6AD10111F1BF054FEECE1D38B0/3udgbTmfhJnqSZX7yd_BW7kYfWU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F361D6E0/6B9D8F6AD10111F1BF054FEECE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 26 Oct 2026 05:52:33 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329781
                          IP: 102.201.204.0/22
                          IP: 2c0f:11a0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 02 Nov 2026 00:08:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17156 (0x4304)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Oct 26 05:52:33 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F361D6E0AF, serialNumber=DEE7606D399F8499EA4995FBC9DFC15BB9187D65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e0:88:05:79:6b:96:43:fe:1a:d6:79:75:bb:
                    32:e1:67:88:f6:34:fe:6c:8d:e1:ec:8d:43:88:0c:
                    ed:a3:1b:86:45:ae:4a:79:c8:bf:ff:2a:a1:bd:40:
                    6d:23:6d:1e:11:05:23:66:6e:7c:0c:66:82:e6:2f:
                    74:aa:75:2c:83:32:e4:5d:df:00:e6:f9:12:9b:f8:
                    b4:65:15:d8:6b:8a:47:a3:1f:53:93:9e:66:64:09:
                    4d:26:6d:90:33:a6:e5:b8:b0:c6:83:ea:3d:6f:98:
                    4d:88:fc:76:bc:b4:a5:18:df:83:a1:44:27:02:6d:
                    fe:7e:47:fb:34:b1:46:b4:be:99:12:96:e9:95:91:
                    c0:48:a6:eb:13:f6:fb:8b:03:59:4d:20:62:48:68:
                    f5:2d:92:d3:d8:ea:85:39:1f:35:a0:cf:1d:2f:ba:
                    4a:36:c0:2a:9d:6f:72:20:53:d6:43:64:18:77:dd:
                    0d:de:30:0d:d1:a5:15:62:51:b3:15:63:79:09:fc:
                    e3:6b:e3:6d:7d:23:ca:db:3b:cb:6b:be:ff:c0:37:
                    e5:3a:ba:e8:a6:f3:84:63:b4:dd:14:d1:d1:aa:9c:
                    78:76:44:20:13:b4:06:7c:cf:5e:86:3a:99:7a:99:
                    e3:91:f2:ef:be:f8:d5:26:c7:77:02:45:01:33:e2:
                    81:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E7:60:6D:39:9F:84:99:EA:49:95:FB:C9:DF:C1:5B:B9:18:7D:65
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D6E0/6B9D8F6AD10111F1BF054FEECE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D6E0/6B9D8F6AD10111F1BF054FEECE1D38B0/3udgbTmfhJnqSZX7yd_BW7kYfWU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329781

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.204.0/22
                IPv6:
                  2c0f:11a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:b0:96:5d:69:b4:94:dd:80:59:d7:79:5f:eb:cb:4d:2c:26:
         b1:bc:46:e8:e5:e4:fb:4b:c4:e9:50:cf:fd:41:a1:19:90:66:
         03:f5:68:e0:de:61:cd:ba:d7:e4:ac:fb:4c:bc:a1:50:4b:bf:
         35:ba:44:c6:9a:24:af:4c:e3:b4:59:dc:f6:34:45:2c:69:63:
         62:d2:99:3f:2e:93:73:1e:d6:07:f6:f6:a3:ee:b8:32:d0:88:
         fc:3e:d9:d4:60:5c:cc:b5:94:66:1a:75:89:60:bf:63:59:ee:
         37:c7:e7:35:f9:15:01:af:36:2a:4f:55:cd:86:4c:5a:f6:3c:
         69:b1:d5:ac:78:1b:62:68:af:99:b4:9d:74:cd:8b:b2:e2:3c:
         31:9e:79:ad:fa:9a:ac:30:42:cf:90:83:0b:3c:ce:f7:17:45:
         31:26:5c:b9:c2:24:80:9e:e4:41:5c:b0:e2:17:2c:72:77:a3:
         aa:01:2e:47:ca:64:66:0f:ca:d8:0b:3f:48:53:fc:66:03:2c:
         54:02:80:92:0c:59:f4:23:d4:de:e8:5d:93:86:0a:41:f7:f3:
         5f:51:e3:b0:f7:2d:d9:e6:ca:f6:d4:a0:10:de:44:77:dc:f8:
         81:1b:85:b2:8e:da:12:19:b2:31:95:7a:dd:b9:92:2a:17:cd:
         25:a0:db:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:15:14 2026 by rpki-client