Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/8s4Gvmzfp90I--NZHFt9wmpfLGA.cer
File:                     8s4Gvmzfp90I--NZHFt9wmpfLGA.cer (raw, json)
Hash identifier:          Og+6DPREbzkdF3RbwkRvB/QB5F08XkCmfQr6i9/ERo4=
Subject key identifier:   F2:CE:06:BE:6C:DF:A7:DD:08:FB:E3:59:1C:5B:7D:C2:6A:5F:2C:60
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       41C7
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F362E9C4/9D505354901411F19085CAFDCE1D38B0/8s4Gvmzfp90I--NZHFt9wmpfLGA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F362E9C4/9D505354901411F19085CAFDCE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 04 Aug 2026 14:56:12 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329756
                          IP: 102.202.76.0/24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16839 (0x41c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Aug  4 14:56:12 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F362E9C4AF, serialNumber=F2CE06BE6CDFA7DD08FBE3591C5B7DC26A5F2C60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f0:40:3f:61:62:31:09:24:7b:14:43:13:98:
                    72:fe:2d:95:93:82:9a:7b:21:0e:76:ca:55:5a:5b:
                    68:07:40:ce:2f:a1:12:d0:84:12:8e:58:e0:39:60:
                    85:7c:c7:0f:64:09:5e:0b:10:f4:bd:06:e3:cb:b1:
                    36:d7:6d:f9:5e:ab:b0:59:ab:7d:71:88:33:36:d3:
                    c7:29:10:7b:6e:ea:ab:00:3a:07:1a:1f:97:09:4c:
                    f5:a7:4c:bc:0a:5c:0e:13:06:ac:e4:fe:1c:c5:5a:
                    7d:84:78:f8:55:80:36:c5:af:7d:9a:ae:dc:75:45:
                    4e:02:4a:df:c8:32:91:eb:aa:80:65:6c:52:04:0f:
                    c2:9c:ea:be:d7:13:1f:9a:af:06:2c:33:f7:8f:d3:
                    d1:a6:9d:e9:83:6c:6d:b2:d2:d1:6b:81:80:e7:8a:
                    3b:24:18:91:4b:95:db:22:c9:fe:2e:45:02:88:56:
                    81:f9:c6:aa:a6:a7:81:ff:ca:43:df:d9:99:2d:05:
                    3b:37:31:30:fb:55:ad:78:58:4b:c4:de:a2:3a:08:
                    f5:97:cb:e1:b9:14:40:42:87:aa:ea:10:af:82:7d:
                    4f:4a:24:69:5c:cf:56:02:aa:6b:9e:cc:25:66:0a:
                    ae:ff:f6:8f:cc:04:f7:7d:65:bb:08:bd:87:75:4d:
                    d8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CE:06:BE:6C:DF:A7:DD:08:FB:E3:59:1C:5B:7D:C2:6A:5F:2C:60
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E9C4/9D505354901411F19085CAFDCE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E9C4/9D505354901411F19085CAFDCE1D38B0/8s4Gvmzfp90I--NZHFt9wmpfLGA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329756

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.202.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:ac:12:84:8d:39:f2:3f:2c:76:79:8c:04:f7:18:7c:d0:fa:
         54:b0:c4:a0:46:4d:3c:4d:c8:31:41:e1:44:bf:42:01:45:91:
         c6:50:bd:cf:3c:ed:07:b8:fb:38:70:8e:40:89:ff:f5:7c:94:
         c7:d6:f6:ed:41:19:10:13:d0:19:5d:6e:d8:79:3c:f6:d1:6b:
         e3:26:81:7e:33:37:84:1b:f1:ee:fe:a4:57:81:9a:36:ba:33:
         68:1f:0d:65:af:89:9e:eb:04:6f:51:de:8c:08:05:81:11:4a:
         d2:ca:60:d6:45:3f:16:0b:91:a8:9b:cc:60:7f:44:c2:dd:5e:
         7c:4e:ff:53:57:c4:99:3b:44:88:6d:f5:b2:e1:e4:40:c6:3e:
         b3:df:b3:85:23:72:da:f3:9a:4f:b1:08:56:09:a3:a3:2b:c3:
         33:0d:0c:f3:e9:9b:01:55:2b:da:8b:ea:78:49:18:2e:60:94:
         16:75:c2:dd:c9:52:4f:c4:78:0a:74:08:57:44:02:d6:ae:56:
         3f:15:d2:85:ef:1e:67:76:f3:23:5c:da:c2:8d:67:dc:e8:98:
         cf:c4:f0:e3:f8:e8:d5:ff:ab:a2:85:d1:45:83:30:67:02:71:
         d3:34:97:84:7a:b8:c2:f4:00:47:ef:55:a5:78:aa:82:d0:3f:
         82:b1:66:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 10:33:27 2026 by rpki-client