Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/DQ0cjnxJZrrQUR1bHkb9CVobbNU.cer
File:                     DQ0cjnxJZrrQUR1bHkb9CVobbNU.cer (raw, json)
Hash identifier:          j0L+hLTUQ7yGAVkD4OGHZ2QJNLoSgg2hYdOojda/JiA=
Subject key identifier:   0D:0D:1C:8E:7C:49:66:BA:D0:51:1D:5B:1E:46:FD:09:5A:1B:6C:D5
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4085
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36DE477/454552523A6C11F18CF1B6C0CE1D38B0/DQ0cjnxJZrrQUR1bHkb9CVobbNU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36DE477/454552523A6C11F18CF1B6C0CE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 17 Apr 2026 14:46:59 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329526
                          IP: 102.206.8.0/24
                          IP: 2c0f:5bc0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16517 (0x4085)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Apr 17 14:46:59 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36DE477AF, serialNumber=0D0D1C8E7C4966BAD0511D5B1E46FD095A1B6CD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:26:4f:ad:11:d2:e7:6e:e1:e3:5d:43:8b:b5:
                    3c:e6:f9:d6:d8:8a:8d:6f:91:00:cb:08:8c:6d:c7:
                    84:6e:8d:96:0f:94:27:51:55:a3:6a:b4:ac:4c:20:
                    0f:86:21:ca:67:df:af:03:65:93:ab:f9:e8:2d:0a:
                    aa:41:e2:bf:aa:27:b1:49:69:5a:0f:7e:b0:42:56:
                    ef:76:12:4b:54:ae:05:51:92:9e:93:01:a0:29:e8:
                    ee:0d:e2:c0:01:f4:6a:b3:71:df:af:93:4a:b2:35:
                    f1:aa:05:5f:1e:2d:0c:60:04:fb:54:6c:7b:1f:06:
                    37:f4:c4:8c:51:b0:33:06:4f:83:10:32:f0:45:69:
                    83:2e:78:77:6c:ec:5b:2e:82:0f:c9:84:ce:d4:47:
                    2e:14:7a:42:01:d7:9c:48:9b:46:e1:11:84:45:11:
                    1b:25:d6:87:77:e5:c3:c1:45:6b:26:e2:f1:2b:c4:
                    ef:3b:69:49:ee:6d:76:c9:8c:98:c2:b4:0d:e5:e8:
                    96:71:e4:88:8b:95:61:98:3b:8a:20:29:32:e7:aa:
                    f2:f3:38:01:99:d8:26:76:0c:e7:0b:c3:02:e2:ac:
                    3a:ca:17:f7:30:c4:27:43:c2:d5:82:20:40:25:67:
                    74:84:e2:13:34:a1:b2:30:67:3f:68:f3:be:a6:5e:
                    08:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0D:1C:8E:7C:49:66:BA:D0:51:1D:5B:1E:46:FD:09:5A:1B:6C:D5
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE477/454552523A6C11F18CF1B6C0CE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE477/454552523A6C11F18CF1B6C0CE1D38B0/DQ0cjnxJZrrQUR1bHkb9CVobbNU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329526

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.206.8.0/24
                IPv6:
                  2c0f:5bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:b5:f1:68:45:a0:24:01:e6:7b:63:94:9e:b9:bd:6a:dc:53:
         cc:37:db:4c:67:c7:02:20:82:16:16:57:83:d0:b5:4c:dd:91:
         5a:c4:f6:5b:c5:e7:da:51:1c:c6:fc:dc:bf:5b:af:54:97:5a:
         b3:18:75:ef:1b:32:e5:48:49:9e:40:0f:bd:76:f5:dc:6d:e2:
         d1:f2:11:7e:fc:05:7d:27:3a:7f:d0:fd:da:92:65:4e:35:39:
         20:05:2b:ba:41:03:7e:cc:4f:3a:15:c3:e8:58:49:56:19:00:
         6e:4b:19:8d:3c:d0:ab:69:a4:e9:8a:30:c1:30:02:0e:66:67:
         0f:c2:91:3b:3b:70:7a:3f:e0:cc:24:0a:fd:41:b8:81:1b:af:
         ff:01:16:8a:1b:42:cd:cf:4e:d1:47:51:53:6d:62:aa:12:85:
         d5:97:51:99:b6:ec:da:18:32:ed:ee:e6:7e:89:7c:5c:49:25:
         77:0a:37:21:4d:d6:59:9c:33:00:d3:04:6c:9e:44:73:3b:4f:
         e7:0e:c6:d6:68:74:e4:81:89:7f:26:fb:7c:c8:79:e1:70:ff:
         9f:f1:9d:de:d3:6d:53:e6:ad:77:c7:19:58:08:85:4b:c3:61:
         cf:a8:c2:b0:26:a9:99:d9:d8:f1:aa:14:18:fb:8e:5b:1f:61:
         b7:94:ee:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 20:39:17 2026 by rpki-client