Certificate
$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.cer
File: 8dsgUTI9ugMGJ1U0XYQ3b6bkim0.cer (raw, json)
Hash identifier: ex+ifZWCtePNXuFvECsTsGmZTDVO4JMeoYxAK8oWh8Q=
Subject key identifier: F1:DB:20:51:32:3D:BA:03:06:27:55:34:5D:84:37:6F:A6:E4:8A:6D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 429F
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F365E09B/96DCE8F4BFB011F1BC3D631BCF1D38B0/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F365E09B/96DCE8F4BFB011F1BC3D631BCF1D38B0/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Sun 04 Oct 2026 05:01:06 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 328469
IP: 102.68.16.0/22
IP: 102.214.168.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 25 Oct 2026 09:34:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17055 (0x429f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Oct 4 05:01:06 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F365E09BAF, serialNumber=F1DB2051323DBA03062755345D84376FA6E48A6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:04:1a:3d:b0:43:e5:05:0a:0c:a0:62:e2:ff:
09:3b:b5:62:f7:4b:30:b9:86:a4:75:cf:5f:9f:31:
8a:9d:ef:20:db:f6:4c:f8:8d:ad:ab:63:40:8f:be:
19:de:e2:6b:a2:b0:4a:13:7b:b3:52:6a:7d:05:06:
69:b2:80:90:19:d1:92:1c:21:1b:f2:37:a0:4c:82:
f9:32:11:ca:ec:38:ce:c2:16:02:b1:08:60:36:27:
79:c9:85:c4:1d:86:76:99:0d:16:00:65:16:dc:98:
b2:36:d3:d2:96:6f:b5:2c:9e:aa:f6:1d:2c:f3:bb:
57:4e:19:79:3a:ef:98:bb:f8:a9:37:58:91:75:1b:
26:b7:90:06:4e:76:0c:85:97:90:b6:b7:d0:90:b1:
d6:68:66:9d:5a:a2:3e:d1:a0:94:1c:d4:42:5d:59:
58:c4:93:2f:d3:a7:ed:83:6e:a1:b0:7f:1b:bf:60:
7b:27:e5:52:a6:64:22:a7:c3:d5:7c:05:eb:49:0e:
c0:fa:ec:cc:42:0f:82:bd:e1:8c:c2:3a:cf:65:4b:
fc:f9:fc:d3:70:40:79:1c:a9:c5:3e:5c:5a:1a:76:
f0:dc:6e:ce:93:61:33:20:eb:d6:c6:12:05:9d:bd:
ca:a6:0f:b3:97:f2:2c:a7:25:b8:e3:1a:ea:6f:f6:
02:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DB:20:51:32:3D:BA:03:06:27:55:34:5D:84:37:6F:A6:E4:8A:6D
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E09B/96DCE8F4BFB011F1BC3D631BCF1D38B0/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E09B/96DCE8F4BFB011F1BC3D631BCF1D38B0/8dsgUTI9ugMGJ1U0XYQ3b6bkim0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328469
sbgp-ipAddrBlock: critical
IPv4:
102.68.16.0/22
102.214.168.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:11:73:26:ff:de:04:7a:fd:d9:ea:88:72:e1:8c:53:d8:f5:
a8:21:59:2d:c1:b8:e2:df:71:0d:90:ce:0c:c5:e9:3f:32:3e:
cc:97:0d:0a:48:d1:a2:3f:e6:92:56:65:8c:93:dd:cc:29:9a:
35:e8:34:37:42:2a:ba:d3:f9:5a:c6:10:8d:47:20:da:f8:d9:
9e:c8:50:c6:32:f0:00:d0:d8:b1:4e:af:e2:8c:3c:2c:77:b8:
83:f3:a7:d8:d6:16:d8:50:ae:41:91:53:ff:43:d7:17:f6:2c:
fc:23:f8:cb:77:05:a8:f6:d0:e3:f0:64:c4:ea:88:c1:7e:fd:
48:65:b1:6e:5e:de:19:f1:89:51:f0:fc:43:d7:64:ff:9c:9a:
8e:07:b1:bd:47:cd:95:2f:e0:e4:3d:de:74:d3:d6:01:f8:8f:
2c:8b:e3:ef:79:8c:b4:c4:2e:d1:e3:db:66:50:80:95:c5:80:
6b:cb:97:be:9a:24:72:d0:20:65:54:88:36:b5:66:d5:31:23:
65:45:f7:f7:8a:06:03:73:9e:34:0d:0e:56:48:b7:8c:3e:ff:
c0:50:18:9e:3a:50:60:1b:bd:07:d8:93:eb:48:f2:8b:6f:5f:
6e:3c:70:f2:3f:1b:37:6e:df:38:1c:9f:e3:14:ed:50:79:49:
47:cc:08:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 18:50:10 2026 by rpki-client