Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/KR6NlYwWISBEOHO-Rcp9o4Xeoto.cer
File:                     KR6NlYwWISBEOHO-Rcp9o4Xeoto.cer (raw, json)
Hash identifier:          LNPni8oB6cztyyvimdnytLWRlvjlcsDh0PPn5eIJRhY=
Subject key identifier:   29:1E:8D:95:8C:16:21:20:44:38:73:BE:45:CA:7D:A3:85:DE:A2:DA
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       40A9
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 23 Apr 2026 11:13:59 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 327773
                          AS: 328620
                          IP: 102.223.252.0/23
                          IP: 196.10.122.0/23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16553 (0x40a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Apr 23 11:13:59 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36389A7AF, serialNumber=291E8D958C162120443873BE45CA7DA385DEA2DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:72:ff:65:24:59:cd:47:23:6d:f3:d3:19:e8:
                    ab:9b:6a:4d:1d:94:7b:8d:0d:d7:4a:b6:c4:ef:17:
                    da:a1:3b:f5:bd:fb:68:da:e3:91:31:ee:8e:57:8d:
                    91:60:85:3e:34:68:cc:05:7e:03:5d:9b:e0:7c:8a:
                    4a:03:95:a9:03:84:26:22:73:03:af:24:25:7b:05:
                    ba:68:d8:1b:48:e6:56:28:52:e3:71:26:73:b1:75:
                    33:10:2d:f9:a0:37:cd:c2:05:93:5f:08:47:98:d3:
                    d6:1b:bd:47:f2:ff:36:b1:bb:f1:e0:d2:13:72:a9:
                    fa:bc:d2:03:ab:70:8d:03:cd:9c:85:91:7c:d5:f0:
                    eb:f1:d8:e1:49:06:c1:6a:57:23:15:62:d7:9a:3e:
                    9c:77:2e:98:c6:fe:1c:06:07:19:0c:02:b8:44:ca:
                    a3:2a:49:84:50:6d:e7:62:2d:75:20:0c:46:51:44:
                    c4:88:83:6e:d1:4e:43:2e:55:43:2f:ae:ad:ca:40:
                    f3:2a:ff:c8:dc:e7:55:c7:57:0e:6a:26:d5:4b:09:
                    5a:24:25:f8:e3:74:d9:6a:e8:33:aa:c5:e5:e7:a3:
                    0a:89:36:bf:58:81:4a:98:d2:6b:3e:dc:40:81:53:
                    f8:c2:a8:7c:ba:49:7d:9e:ef:53:db:b5:de:11:df:
                    0b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1E:8D:95:8C:16:21:20:44:38:73:BE:45:CA:7D:A3:85:DE:A2:DA
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327773
                  328620

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.223.252.0/23
                  196.10.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:2e:cc:bc:04:a7:c6:8c:26:2f:97:2e:3d:0a:b1:80:43:27:
         2c:67:d2:53:e4:44:19:20:35:81:78:f9:d9:bf:b1:b0:d6:b3:
         d2:46:66:ab:17:df:89:ae:31:93:37:70:be:a0:92:da:6b:08:
         25:5a:de:1e:20:38:bb:4f:74:8d:ff:55:ca:1e:e1:76:19:cf:
         e8:00:ea:17:65:2f:bf:59:f0:99:ac:72:68:87:3b:37:02:7c:
         8d:e8:f1:1a:85:76:72:6a:4e:6c:e2:9f:1e:f6:eb:9c:d8:a6:
         90:32:2f:ea:ef:7b:79:c1:c1:79:44:ed:85:c8:47:73:d7:ef:
         e9:38:3e:6d:6d:66:55:2f:78:1b:62:99:88:da:75:fd:f4:6f:
         4c:5c:6a:51:4f:0e:73:c8:d7:0b:b5:2c:51:fe:c0:a4:ed:fd:
         ce:0c:11:71:9d:ac:48:b9:f0:85:fc:b4:51:0e:f0:dc:6f:ca:
         e6:93:6d:8b:0b:29:6a:9c:59:a9:88:9d:97:43:2e:96:69:bb:
         65:38:93:f6:38:00:ee:ea:0f:80:0d:41:03:3a:9c:63:fe:3b:
         0a:cd:6d:69:4e:bc:57:9d:d5:18:8c:ae:ce:44:36:3f:c8:16:
         3a:75:8e:f1:88:44:e7:56:47:e4:6f:8a:c3:26:8a:56:fd:8d:
         fa:83:02:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 20:39:24 2026 by rpki-client