Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/RBxm0uJ-FF16atySlsDDULxxi2U.cer
File:                     RBxm0uJ-FF16atySlsDDULxxi2U.cer (raw, json)
Hash identifier:          hnSUz3InZqqDuMhevc7dc1VXqC/qwJungob2KD1WVns=
Subject key identifier:   44:1C:66:D2:E2:7E:14:5D:7A:6A:DC:92:96:C0:C3:50:BC:71:8B:65
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       42F0
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3616C70/2541A90A3FD111F18FE9BCDBCE1D38B0/RBxm0uJ-FF16atySlsDDULxxi2U.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3616C70/2541A90A3FD111F18FE9BCDBCE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 23 Oct 2026 00:00:21 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329422
                          IP: 102.200.184.0/22
                          IP: 102.209.76.0/22
                          IP: 2c0f:3440::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17136 (0x42f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Oct 23 00:00:21 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3616C70AF, serialNumber=441C66D2E27E145D7A6ADC9296C0C350BC718B65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:49:95:93:73:e5:b7:31:67:41:ba:62:20:e4:
                    3f:ad:2d:df:43:98:01:22:05:a3:18:c8:2a:e6:8b:
                    d5:34:be:e5:bd:48:dc:db:01:81:6b:b7:f2:c0:ad:
                    c7:84:c9:a9:10:60:c0:35:ef:ee:ae:c3:eb:8e:9c:
                    c1:e7:1f:d2:44:af:b9:45:39:17:73:e9:8d:ba:1f:
                    bf:7d:34:d7:a3:d0:2b:0b:06:9b:b7:52:28:c6:f4:
                    8a:2f:40:62:2d:fb:d3:0a:1f:30:50:15:74:7a:1a:
                    be:8d:36:0b:00:56:73:d0:e7:57:7e:8a:fd:e2:a3:
                    9a:21:7b:67:57:0e:6d:29:e8:85:e8:b7:5e:51:88:
                    9c:01:57:e0:c8:6a:79:f5:3e:d0:7b:19:38:94:2e:
                    80:4b:36:26:4c:9e:fb:be:03:2c:77:4d:1d:45:70:
                    e5:f0:66:a0:9b:e8:35:d3:55:33:ae:9e:8e:de:a8:
                    a8:58:79:c5:f9:72:72:9a:a5:88:ae:30:9e:be:bd:
                    b7:f2:21:45:41:26:f1:07:fc:4b:9f:86:ad:3d:69:
                    63:61:ba:06:48:53:58:28:73:72:b7:d8:3c:cf:a7:
                    13:70:8d:99:72:fc:28:7a:85:6a:9f:ff:d7:9a:92:
                    17:23:af:13:59:7f:02:b4:1d:47:a8:c6:88:74:9a:
                    78:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1C:66:D2:E2:7E:14:5D:7A:6A:DC:92:96:C0:C3:50:BC:71:8B:65
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616C70/2541A90A3FD111F18FE9BCDBCE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616C70/2541A90A3FD111F18FE9BCDBCE1D38B0/RBxm0uJ-FF16atySlsDDULxxi2U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329422

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.200.184.0/22
                  102.209.76.0/22
                IPv6:
                  2c0f:3440::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:09:ba:00:d1:c1:bf:c8:35:70:33:48:a2:ea:4c:fb:86:c6:
         fb:02:4c:57:69:98:6e:1a:3a:c0:88:0c:f9:cb:b6:f2:65:d6:
         d2:ad:7a:42:2f:dd:bb:85:fa:93:d9:da:1e:40:26:54:eb:07:
         ff:f4:26:9a:9e:65:56:fb:a2:0a:3b:49:18:63:db:da:f0:52:
         54:ea:ad:c3:53:84:19:68:9e:a7:ab:e2:c0:1a:2f:28:ef:b9:
         32:a0:94:83:66:59:45:a7:08:57:87:9e:10:04:1f:50:75:96:
         ae:a1:3f:08:5c:55:65:16:ca:dc:8b:38:ff:c9:cf:0a:c6:1f:
         92:7c:15:6b:e5:c8:f6:9a:64:67:88:28:b2:e7:34:c1:2b:42:
         ea:ab:c1:33:a3:62:93:75:44:ae:a2:f2:94:9e:51:f5:a2:90:
         a2:36:55:95:7d:e8:6e:d5:86:ef:ed:dd:08:7f:2e:54:8e:1e:
         6f:79:f8:bd:e6:4b:05:06:06:59:8f:c2:db:d8:1c:48:3b:e8:
         57:88:5f:ef:6f:9e:c1:56:ca:38:4e:a7:5b:71:d0:d9:0d:28:
         76:c3:87:8a:ff:c7:23:b0:ca:ff:38:0a:76:5b:99:bf:4c:45:
         dd:8b:de:62:38:a1:47:f9:55:21:2d:64:ca:f7:6b:ab:df:9b:
         ce:c1:dc:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 25 20:52:48 2026 by rpki-client