Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/E2WN9-mHoR_1aHI8e3Ha1wceM98.cer
File:                     E2WN9-mHoR_1aHI8e3Ha1wceM98.cer (raw, json)
Hash identifier:          H1Fwm3gwDpok5ez8j3lq2CqCuLQYJYqM6v4gWLaZPhc=
Subject key identifier:   13:65:8D:F7:E9:87:A1:1F:F5:68:72:3C:7B:71:DA:D7:07:1E:33:DF
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3618
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F366115B/D6DD2C48D17D11EFAF2085B2762E951A/E2WN9-mHoR_1aHI8e3Ha1wceM98.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F366115B/D6DD2C48D17D11EFAF2085B2762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 04 Sep 2025 00:02:16 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 328562
                          IP: 102.23.144.0/20
                          IP: 2c0f:71c0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Sep 2025 00:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13848 (0x3618)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Sep  4 00:02:16 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F366115BAF, serialNumber=13658DF7E987A11FF568723C7B71DAD7071E33DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:98:5e:bd:99:d4:25:06:a5:9c:d8:7e:1a:ab:
                    30:44:6a:48:5e:36:b6:77:e9:d5:6d:8e:08:45:68:
                    43:25:13:d5:b4:85:9d:5e:08:27:35:a9:a1:4c:15:
                    99:af:76:da:03:83:53:52:56:f9:94:84:07:a5:26:
                    43:4e:94:7a:ef:26:42:cb:5f:1c:86:5c:a1:b3:03:
                    4f:27:bd:ad:55:3b:aa:f3:dc:15:1d:b1:8e:86:ed:
                    05:25:e3:6a:e6:03:23:0b:7c:a3:dd:61:fa:98:0c:
                    ed:43:2d:85:bd:3f:0c:cb:c7:e6:d3:d3:32:cd:b7:
                    d4:b0:4e:66:ee:67:a5:ca:25:91:07:ac:d8:f8:ca:
                    79:d4:d7:4e:b6:19:c1:25:ce:fe:46:3f:75:83:5c:
                    ff:70:44:c4:04:f4:06:5d:0e:88:f0:27:a7:7d:c0:
                    35:6a:2a:42:e4:8d:8a:0f:78:66:7f:c9:65:f8:a8:
                    10:8d:8e:c2:e1:3a:48:76:bd:3e:36:36:22:79:09:
                    0b:29:39:50:09:54:19:c6:cf:e1:dc:ac:a0:55:a7:
                    9d:d7:46:4f:02:48:e8:07:a5:4a:a0:16:d3:29:dd:
                    f5:51:33:f5:31:0b:ff:05:bc:49:04:ce:d4:13:5c:
                    e2:e6:de:ef:7b:37:19:88:34:b7:82:95:4b:31:6c:
                    14:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:65:8D:F7:E9:87:A1:1F:F5:68:72:3C:7B:71:DA:D7:07:1E:33:DF
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366115B/D6DD2C48D17D11EFAF2085B2762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366115B/D6DD2C48D17D11EFAF2085B2762E951A/E2WN9-mHoR_1aHI8e3Ha1wceM98.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328562

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.23.144.0/20
                IPv6:
                  2c0f:71c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:d1:22:d8:82:be:d5:57:a4:34:cd:f3:16:c6:95:f2:0a:d6:
         c1:a3:91:14:af:00:fb:f6:bf:25:2d:a6:79:2c:39:75:e4:b9:
         0a:0f:d7:26:a2:57:2b:06:ba:5f:4f:38:bc:8b:09:5b:f4:1b:
         06:f9:50:00:40:29:9a:58:51:24:cc:c4:86:1d:47:85:3e:33:
         3d:c4:d6:33:19:28:fb:55:d6:26:db:c2:9c:ae:da:f2:b1:04:
         7f:53:70:80:69:ff:49:b8:64:77:c6:98:d1:f0:0a:3b:2f:2e:
         59:64:b7:63:f7:ff:43:a6:bd:e9:c0:36:64:e6:e3:fe:61:7e:
         f8:84:f4:36:e0:fe:a3:71:21:d1:85:ff:f1:d2:9a:04:d3:66:
         50:79:0a:21:ea:53:f4:85:c9:25:48:2e:e1:cd:b3:c5:eb:8e:
         c0:1b:f5:6d:6f:f9:fd:9c:2d:01:05:af:11:35:3b:e7:33:48:
         6c:8b:8e:83:c0:1f:87:1e:85:8b:81:b0:80:41:fe:fd:93:2c:
         40:5f:d7:d2:9d:de:24:80:8a:ed:e6:3b:f8:0d:3b:83:14:74:
         89:f1:ff:54:ec:7a:42:f5:81:a6:b9:b9:9d:29:75:58:ad:bf:
         5a:90:c7:1b:4c:f3:c3:e6:68:a0:5d:b5:3e:d7:a5:17:96:65:
         c1:7d:76:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 14:36:06 2025 by rpki-client