Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/I5ojlaIixGtom4OhTUvZ5CL40XE.cer
File:                     I5ojlaIixGtom4OhTUvZ5CL40XE.cer (raw, json)
Hash identifier:          XCrYyTfCKE8kYnA1Fx4r3/2HGkkhLohmbJxTwXfhgyM=
Subject key identifier:   23:9A:23:95:A2:22:C4:6B:68:9B:83:A1:4D:4B:D9:E4:22:F8:D1:71
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       40A3
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F361033E/D4B202883D8111F1B57317B9CE1D38B0/I5ojlaIixGtom4OhTUvZ5CL40XE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F361033E/D4B202883D8111F1B57317B9CE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 21 Apr 2026 12:58:53 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329531
                          IP: 102.205.244.0/22
                          IP: 2c0f:1dc0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16547 (0x40a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Apr 21 12:58:53 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F361033EAF, serialNumber=239A2395A222C46B689B83A14D4BD9E422F8D171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5d:1e:0e:51:4e:07:b9:34:ed:52:76:e6:f6:
                    ef:fc:67:50:cb:d3:9c:5d:6d:72:dd:de:11:b0:f6:
                    ab:39:26:a4:99:de:a3:37:bd:24:54:2d:73:8e:37:
                    0d:13:03:c9:eb:2a:e8:50:eb:64:dc:6d:e2:b6:2d:
                    91:fc:6b:16:fc:06:75:cd:d1:38:5d:3a:cb:e4:1b:
                    58:1c:65:9b:f5:ef:38:e9:29:53:5a:be:56:e7:d9:
                    63:65:86:4b:a3:a2:c7:24:f0:79:d5:76:40:1b:22:
                    a6:00:d2:ad:0b:70:0f:f4:be:4e:d4:9e:20:5e:63:
                    ae:19:0b:6c:54:94:44:77:94:f3:28:80:ac:9b:1f:
                    cf:77:29:12:e1:34:79:f7:0b:cf:e2:a1:40:03:f5:
                    47:a1:f6:88:8d:e4:d5:2e:0a:02:d6:a7:96:13:28:
                    d2:32:f3:54:3a:66:fc:cb:62:d9:b1:78:b9:b5:41:
                    f2:93:8f:58:3b:d1:bc:e0:67:7d:d2:00:ef:ff:4a:
                    04:e5:a0:9c:8a:66:7b:af:ce:12:d4:a6:63:10:3d:
                    c2:27:30:be:05:f4:40:b1:9f:fa:7e:93:b3:5f:17:
                    54:f3:f7:cb:5a:8b:b7:fe:2b:e5:2d:d6:ad:0b:28:
                    6d:fb:de:45:83:6b:d7:cf:fe:cd:bd:53:75:19:cc:
                    c8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:9A:23:95:A2:22:C4:6B:68:9B:83:A1:4D:4B:D9:E4:22:F8:D1:71
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361033E/D4B202883D8111F1B57317B9CE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361033E/D4B202883D8111F1B57317B9CE1D38B0/I5ojlaIixGtom4OhTUvZ5CL40XE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329531

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.205.244.0/22
                IPv6:
                  2c0f:1dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:15:fd:6e:3b:52:52:15:6a:b9:c2:60:19:0e:0b:7f:48:6f:
         c2:81:07:77:9f:68:c0:0b:e3:7a:cd:8a:c9:d1:76:44:e3:cd:
         d6:57:f5:56:e7:1b:b4:bf:5f:21:5e:87:66:67:2e:dc:9e:19:
         bd:dd:65:50:67:a5:07:9d:b0:70:a5:68:9c:9a:f7:75:91:11:
         d8:22:98:38:12:ef:af:29:75:f9:ca:5c:cf:aa:da:c7:24:74:
         30:ed:fd:46:28:1c:69:46:90:ae:0e:49:e5:51:9a:f5:29:31:
         0e:6a:98:f8:a0:fb:04:fe:a6:1c:b6:b3:ac:f6:1a:7b:48:32:
         20:62:b1:8e:a7:22:1a:61:c9:11:50:6e:72:4e:10:05:aa:9f:
         7c:d9:e0:bd:61:a3:1d:de:b4:ef:49:bb:53:38:33:6c:9e:cb:
         7b:c3:5e:35:18:fd:46:55:37:85:a1:fb:0c:63:bd:ff:ca:9e:
         9f:83:fa:92:22:53:0b:26:4b:bd:c0:4c:e1:df:bd:43:c4:08:
         f4:8f:7c:28:d6:8b:c2:c6:a4:93:64:3e:85:bf:e7:62:c9:ee:
         93:e1:d0:be:89:99:62:e5:ed:f1:c3:7a:01:1a:41:fa:d2:43:
         33:e2:26:21:47:a0:11:28:6e:ae:5c:f3:37:92:4d:9e:0b:93:
         11:4d:fd:a8
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICQKMwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjA0MjExMjU4NTNaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjEwMzNFQUYxMTAvBgNVBAUTKDIzOUEyMzk1QTIyMkM0NkI2ODlCODNB
MTRENEJEOUU0MjJGOEQxNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4XR4OUU4HuTTtUnbm9u/8Z1DL05xdbXLd3hGw9qs5JqSZ3qM3vSRULXOONw0T
A8nrKuhQ62TcbeK2LZH8axb8BnXN0ThdOsvkG1gcZZv17zjpKVNavlbn2WNlhkuj
osck8HnVdkAbIqYA0q0LcA/0vk7UniBeY64ZC2xUlER3lPMogKybH893KRLhNHn3
C8/ioUAD9Ueh9oiN5NUuCgLWp5YTKNIy81Q6ZvzLYtmxeLm1QfKTj1g70bzgZ33S
AO//SgTloJyKZnuvzhLUpmMQPcInML4F9ECxn/p+k7NfF1Tz98tai7f+K+Ut1q0L
KG373kWDa9fP/s29U3UZzMgVAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUI5ojlaIi
xGtom4OhTUvZ5CL40XEwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYxMDMzRS9ENEIyMDI4ODNEODEx
MUYxQjU3MzE3QjlDRTFEMzhCMC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTAzM0UvRDRCMjAyODgzRDgxMTFGMUI1NzMxN0I5Q0UxRDM4QjAvSTVvamxh
SWl4R3RvbTRPaFRVdlo1Q0w0MFhFLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBzswLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmzfQwDQQCAAIwBwMF
ACwPHcAwDQYJKoZIhvcNAQELBQADggEBAMYV/W47UlIVarnCYBkOC39Ib8KBB3ef
aMAL43rNisnRdkTjzdZX9VbnG7S/XyFeh2ZnLtyeGb3dZVBnpQedsHClaJya93WR
EdgimDgS768pdfnKXM+q2sckdDDt/UYoHGlGkK4OSeVRmvUpMQ5qmPig+wT+phy2
s6z2GntIMiBisY6nIhphyRFQbnJOEAWqn3zZ4L1hox3etO9Ju1M4M2yey3vDXjUY
/UZVN4Wh+wxjvf/Knp+D+pIiUwsmS73ATOHfvUPECPSPfCjWi8LGpJNkPoW/52LJ
7pPh0L6JmWLl7fHDegEaQfrSQzPiJiFHoBEobq5c8zeSTZ4LkxFN/ag=
-----END CERTIFICATE-----
Generated at Thu May 7 20:39:23 2026 by rpki-client