Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/8RynOfh_E2iVt2T04GlkdyAJ0yI.cer
File:                     8RynOfh_E2iVt2T04GlkdyAJ0yI.cer (raw, json)
Hash identifier:          xY++N2ZI4HxdTdaAHUQ94fSFZGhrhOmoA5MqjhMhq4E=
Subject key identifier:   F1:1C:A7:39:F8:7F:13:68:95:B7:64:F4:E0:69:64:77:20:09:D3:22
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       425E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36F4B39/7C8716F2B1E411F187E2EE17CF1D38B0/8RynOfh_E2iVt2T04GlkdyAJ0yI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36F4B39/7C8716F2B1E411F187E2EE17CF1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 16 Sep 2026 15:37:20 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 327828
                          IP: 154.118.240.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16990 (0x425e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Sep 16 15:37:20 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36F4B39AF, serialNumber=F11CA739F87F136895B764F4E06964772009D322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c2:47:d2:24:31:9b:5d:02:ee:5e:2b:99:1e:
                    c9:7d:ff:bf:5a:22:f0:b8:62:17:e9:d4:e7:6b:3b:
                    af:34:b1:7b:33:87:05:2a:e9:8b:da:eb:0d:7d:e6:
                    7c:27:cc:88:1f:a3:18:5a:c2:3f:ff:06:72:0d:8f:
                    39:57:16:d2:a0:7a:58:f7:35:85:60:b2:63:ad:2d:
                    15:e7:6c:9e:0a:2a:38:8a:b5:9a:87:99:cd:a3:b8:
                    69:b4:55:df:92:c0:0d:02:04:45:00:59:ab:54:47:
                    3e:47:49:15:ce:02:58:b7:78:40:9e:c0:a1:4c:f3:
                    7e:c0:46:0b:66:f3:a3:c7:6a:ad:fb:30:53:94:22:
                    26:37:d1:41:2e:1f:4d:51:99:5c:a4:b3:03:d4:3c:
                    46:b3:37:70:54:25:ea:c1:7c:88:fe:f9:0f:69:1b:
                    a5:6b:fb:d7:73:f7:e5:b2:49:9b:d1:31:9d:29:39:
                    bc:4b:1e:91:9c:96:86:4b:f5:18:d5:02:35:f5:e2:
                    05:54:a0:75:a7:15:6b:84:dd:ab:13:fc:d3:ec:ff:
                    fa:f8:e2:37:76:6a:39:f8:39:8e:54:67:e5:c3:b7:
                    50:9d:f5:42:1d:a0:cb:8d:87:b3:7e:5a:64:2e:c1:
                    20:07:bc:73:61:d9:53:76:a1:48:3e:59:d6:fa:29:
                    ca:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1C:A7:39:F8:7F:13:68:95:B7:64:F4:E0:69:64:77:20:09:D3:22
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F4B39/7C8716F2B1E411F187E2EE17CF1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F4B39/7C8716F2B1E411F187E2EE17CF1D38B0/8RynOfh_E2iVt2T04GlkdyAJ0yI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327828

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.118.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:00:36:8e:fc:5c:5d:78:83:d8:98:01:d1:0b:13:1d:e3:f1:
         1f:6e:2b:be:45:67:f4:52:46:54:c4:4d:71:85:67:61:80:5f:
         c0:9e:85:68:7a:51:15:f9:18:ed:e5:12:90:7d:f4:4b:7f:99:
         91:46:2b:e5:74:80:d5:90:7b:f2:9e:63:47:90:3a:b4:8e:8b:
         b0:50:c2:ab:91:9e:42:68:ad:5d:b4:d9:12:5c:aa:09:68:ac:
         8c:cd:6c:0a:4c:a7:d2:fd:5e:07:57:a1:b9:7b:15:d8:a2:38:
         06:36:92:94:ae:84:08:8b:d9:46:2f:a7:fd:4d:ce:59:ab:22:
         16:1e:b6:f6:e2:17:a5:5b:1a:7b:c2:82:84:2c:98:44:fd:64:
         10:46:3d:c1:f5:ad:36:1d:41:3b:0c:d0:c4:d2:54:71:e7:55:
         93:52:f9:2e:5a:b4:72:ff:d0:f3:8a:8a:7a:40:28:cf:77:2a:
         5c:64:0c:8a:8c:0e:cc:23:4e:b7:2a:03:45:17:97:ff:42:7e:
         cb:bc:23:b3:a7:2b:28:ac:d2:97:a7:75:67:08:18:b8:c2:20:
         2f:bd:2b:86:cd:b9:2e:a2:e8:be:81:10:4b:5d:f4:f6:7f:31:
         3b:52:cd:74:d5:23:21:03:64:10:28:60:d0:15:59:27:fc:79:
         3b:6e:4b:88
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICQl4wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjA5MTYxNTM3MjBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkY0QjM5QUYxMTAvBgNVBAUTKEYxMUNBNzM5Rjg3RjEzNjg5NUI3NjRG
NEUwNjk2NDc3MjAwOUQzMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMwkfSJDGbXQLuXiuZHsl9/79aIvC4Yhfp1OdrO680sXszhwUq6Yva6w195nwn
zIgfoxhawj//BnINjzlXFtKgelj3NYVgsmOtLRXnbJ4KKjiKtZqHmc2juGm0Vd+S
wA0CBEUAWatURz5HSRXOAli3eECewKFM837ARgtm86PHaq37MFOUIiY30UEuH01R
mVykswPUPEazN3BUJerBfIj++Q9pG6Vr+9dz9+WySZvRMZ0pObxLHpGcloZL9RjV
AjX14gVUoHWnFWuE3asT/NPs//r44jd2ajn4OY5UZ+XDt1Cd9UIdoMuNh7N+WmQu
wSAHvHNh2VN2oUg+Wdb6KcqFAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQU8RynOfh/
E2iVt2T04GlkdyAJ0yIwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGNEIzOS83Qzg3MTZGMkIxRTQx
MUYxODdFMkVFMTdDRjFEMzhCMC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjRCMzkvN0M4NzE2RjJCMUU0MTFGMTg3RTJFRTE3Q0YxRDM4QjAvOFJ5bk9m
aF9FMmlWdDJUMDRHbGtkeUFKMHlJLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAJQwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKadvAwDQYJKoZIhvcN
AQELBQADggEBAMEANo78XF14g9iYAdELEx3j8R9uK75FZ/RSRlTETXGFZ2GAX8Ce
hWh6URX5GO3lEpB99Et/mZFGK+V0gNWQe/KeY0eQOrSOi7BQwquRnkJorV202RJc
qglorIzNbApMp9L9XgdXobl7FdiiOAY2kpSuhAiL2UYvp/1NzlmrIhYetvbiF6Vb
GnvCgoQsmET9ZBBGPcH1rTYdQTsM0MTSVHHnVZNS+S5atHL/0POKinpAKM93Klxk
DIqMDswjTrcqA0UXl/9Cfsu8I7OnKyis0pendWcIGLjCIC+9K4bNuS6i6L6BEEtd
9PZ/MTtSzXTVIyEDZBAoYNAVWSf8eTtuS4g=
-----END CERTIFICATE-----
Generated at Sat Sep 19 11:39:15 2026 by rpki-client