Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.cer
File:                     E6ovcF9OD9NoRHzyh4E7VoEtVtQ.cer (raw, json)
Hash identifier:          VRTCcCZ1DLynro66aoisna0xHEO3EzZyf5tmmRzlZkE=
Subject key identifier:   13:AA:2F:70:5F:4E:0F:D3:68:44:7C:F2:87:81:3B:56:81:2D:56:D4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       41D7
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 10 Aug 2026 15:25:35 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329757
                          IP: 102.202.68.0/23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16855 (0x41d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Aug 10 15:25:35 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3655DF0AF, serialNumber=13AA2F705F4E0FD368447CF287813B56812D56D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c2:9f:41:9f:f4:6d:8b:b3:f6:fc:45:52:e7:
                    62:d6:16:de:09:9b:3e:63:14:85:0a:5c:1b:b8:50:
                    cb:27:ad:b4:48:33:13:ae:2a:b4:e6:a0:b0:e0:95:
                    81:34:9d:8b:ea:25:44:02:c3:15:a7:22:37:02:7a:
                    d2:03:26:7c:28:d4:71:63:4c:4b:cb:bd:9f:ca:f7:
                    56:24:c1:66:8e:8d:88:b0:22:15:61:e0:aa:bd:ab:
                    59:8c:93:b5:60:a9:ef:ef:25:2f:2b:15:5b:24:2f:
                    67:ec:ff:96:14:dd:26:0b:d7:48:ce:55:26:87:ba:
                    46:de:44:96:e6:09:02:07:14:73:9e:e4:13:47:fc:
                    61:b0:ee:5d:0b:b6:9f:17:95:9b:21:3b:d5:cc:6d:
                    eb:6d:2d:f6:05:20:20:5d:7b:12:73:e6:ce:6c:14:
                    df:ed:07:f2:8e:12:76:80:c6:95:66:6d:3d:5c:99:
                    fb:df:54:60:39:e4:2b:d7:1d:47:7b:66:9e:9b:db:
                    e7:76:a5:37:7c:12:0d:46:a6:e2:d3:5a:e2:1a:c0:
                    33:8c:b8:ab:d6:ab:fd:59:6d:32:65:c7:7f:a4:61:
                    0c:f6:b0:49:39:1b:04:8f:52:e9:95:fd:de:b9:da:
                    cb:40:2e:1d:ed:f1:ca:bb:71:c0:06:e6:f6:f0:fc:
                    71:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AA:2F:70:5F:4E:0F:D3:68:44:7C:F2:87:81:3B:56:81:2D:56:D4
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329757

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.202.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:d6:8c:d4:06:a0:bd:3c:71:92:ab:75:28:fd:03:29:84:19:
         c2:40:2b:82:ac:ef:08:7e:d2:3d:42:22:1a:3a:2a:73:35:c8:
         d0:b0:1b:65:3c:8b:d9:2b:f8:0f:70:08:99:f1:4a:73:2e:e2:
         b3:08:a4:cd:ef:d6:89:3c:2a:5b:e1:bd:32:56:e5:31:d5:30:
         2e:eb:90:da:47:5b:7c:b7:75:cf:6a:58:23:83:c5:06:ef:c1:
         22:a9:42:4d:73:9a:1e:bb:30:da:a3:a2:d1:28:fe:a1:a0:25:
         ee:1d:ba:7a:40:da:32:61:4d:a6:8a:ca:1e:73:da:61:6a:e0:
         df:ac:d4:58:94:31:c8:75:f9:ea:27:10:96:a3:ec:5b:9d:32:
         2f:56:52:09:d3:d4:eb:42:db:43:cd:3f:2f:a0:f6:2d:e6:6d:
         01:f6:f9:97:10:0a:c5:b1:a9:19:6f:4f:cd:82:27:b7:f2:ba:
         c3:55:a1:d4:a5:04:e6:1c:f0:4f:c3:e6:ee:27:74:dc:db:9a:
         e7:2f:35:bd:b7:d4:72:97:22:76:81:d1:60:72:ba:6c:12:62:
         c8:f6:59:4c:ab:20:2a:d0:36:31:ad:f4:ee:88:1c:68:32:73:
         eb:40:3a:a9:31:7a:43:d3:04:4a:4a:2a:69:10:e3:5d:56:5c:
         3a:53:d4:49
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICQdcwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjA4MTAxNTI1MzVaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjU1REYwQUYxMTAvBgNVBAUTKDEzQUEyRjcwNUY0RTBGRDM2ODQ0N0NG
Mjg3ODEzQjU2ODEyRDU2RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCbwp9Bn/Rti7P2/EVS52LWFt4Jmz5jFIUKXBu4UMsnrbRIMxOuKrTmoLDglYE0
nYvqJUQCwxWnIjcCetIDJnwo1HFjTEvLvZ/K91YkwWaOjYiwIhVh4Kq9q1mMk7Vg
qe/vJS8rFVskL2fs/5YU3SYL10jOVSaHukbeRJbmCQIHFHOe5BNH/GGw7l0Ltp8X
lZshO9XMbettLfYFICBdexJz5s5sFN/tB/KOEnaAxpVmbT1cmfvfVGA55CvXHUd7
Zp6b2+d2pTd8Eg1GpuLTWuIawDOMuKvWq/1ZbTJlx3+kYQz2sEk5GwSPUumV/d65
2stALh3t8cq7ccAG5vbw/HFnAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUE6ovcF9O
D9NoRHzyh4E7VoEtVtQwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY1NURGMC9CNzBCNEI1NDk0Q0Yx
MUYxOTlGMTk4QThDRTFEMzhCMC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTVERjAvQjcwQjRCNTQ5NENGMTFGMTk5RjE5OEE4Q0UxRDM4QjAvRTZvdmNG
OU9EOU5vUkh6eWg0RTdWb0V0VnRRLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFCB0wHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFmykQwDQYJKoZIhvcN
AQELBQADggEBADPWjNQGoL08cZKrdSj9AymEGcJAK4Ks7wh+0j1CIho6KnM1yNCw
G2U8i9kr+A9wCJnxSnMu4rMIpM3v1ok8KlvhvTJW5THVMC7rkNpHW3y3dc9qWCOD
xQbvwSKpQk1zmh67MNqjotEo/qGgJe4dunpA2jJhTaaKyh5z2mFq4N+s1FiUMch1
+eonEJaj7FudMi9WUgnT1OtC20PNPy+g9i3mbQH2+ZcQCsWxqRlvT82CJ7fyusNV
odSlBOYc8E/D5u4ndNzbmucvNb231HKXInaB0WByumwSYsj2WUyrICrQNjGt9O6I
HGgyc+tAOqkxekPTBEpKKmkQ411WXDpT1Ek=
-----END CERTIFICATE-----
Generated at Sat Sep 19 11:39:48 2026 by rpki-client