Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/RBxm0uJ-FF16atySlsDDULxxi2U.cer
File:                     RBxm0uJ-FF16atySlsDDULxxi2U.cer (raw, json)
Hash identifier:          SXGyeIFZsOznXctJZG4PN1XGdOZHqmZ3P3CjOfGDqHw=
Subject key identifier:   44:1C:66:D2:E2:7E:14:5D:7A:6A:DC:92:96:C0:C3:50:BC:71:8B:65
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       40B4
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3616C70/2541A90A3FD111F18FE9BCDBCE1D38B0/RBxm0uJ-FF16atySlsDDULxxi2U.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3616C70/2541A90A3FD111F18FE9BCDBCE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 24 Apr 2026 11:31:40 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329422
                          IP: 102.209.76.0/22
                          IP: 2c0f:3440::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16564 (0x40b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Apr 24 11:31:40 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3616C70AF, serialNumber=441C66D2E27E145D7A6ADC9296C0C350BC718B65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:49:95:93:73:e5:b7:31:67:41:ba:62:20:e4:
                    3f:ad:2d:df:43:98:01:22:05:a3:18:c8:2a:e6:8b:
                    d5:34:be:e5:bd:48:dc:db:01:81:6b:b7:f2:c0:ad:
                    c7:84:c9:a9:10:60:c0:35:ef:ee:ae:c3:eb:8e:9c:
                    c1:e7:1f:d2:44:af:b9:45:39:17:73:e9:8d:ba:1f:
                    bf:7d:34:d7:a3:d0:2b:0b:06:9b:b7:52:28:c6:f4:
                    8a:2f:40:62:2d:fb:d3:0a:1f:30:50:15:74:7a:1a:
                    be:8d:36:0b:00:56:73:d0:e7:57:7e:8a:fd:e2:a3:
                    9a:21:7b:67:57:0e:6d:29:e8:85:e8:b7:5e:51:88:
                    9c:01:57:e0:c8:6a:79:f5:3e:d0:7b:19:38:94:2e:
                    80:4b:36:26:4c:9e:fb:be:03:2c:77:4d:1d:45:70:
                    e5:f0:66:a0:9b:e8:35:d3:55:33:ae:9e:8e:de:a8:
                    a8:58:79:c5:f9:72:72:9a:a5:88:ae:30:9e:be:bd:
                    b7:f2:21:45:41:26:f1:07:fc:4b:9f:86:ad:3d:69:
                    63:61:ba:06:48:53:58:28:73:72:b7:d8:3c:cf:a7:
                    13:70:8d:99:72:fc:28:7a:85:6a:9f:ff:d7:9a:92:
                    17:23:af:13:59:7f:02:b4:1d:47:a8:c6:88:74:9a:
                    78:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1C:66:D2:E2:7E:14:5D:7A:6A:DC:92:96:C0:C3:50:BC:71:8B:65
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616C70/2541A90A3FD111F18FE9BCDBCE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616C70/2541A90A3FD111F18FE9BCDBCE1D38B0/RBxm0uJ-FF16atySlsDDULxxi2U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329422

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.209.76.0/22
                IPv6:
                  2c0f:3440::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:04:70:a6:6e:50:53:db:c9:b6:7f:33:24:a8:f8:5d:75:a9:
         b3:bc:81:47:fb:c9:7b:47:65:aa:12:0f:1d:61:7c:c5:5f:a9:
         ac:a9:73:cc:48:44:bb:41:5e:43:a7:da:de:9c:44:c6:3d:49:
         d3:25:ae:33:1b:8c:fe:27:fe:ff:a7:d6:10:37:d0:a3:49:8c:
         92:c7:de:92:0b:d4:c1:c8:8b:32:cb:b2:63:a5:2d:5f:f2:61:
         3c:ff:9e:08:b4:4f:de:5a:b5:4e:c9:96:d9:26:25:30:cc:e4:
         cf:4f:41:40:c3:70:f1:1f:56:0e:50:2a:c4:47:d8:d5:60:03:
         40:42:4f:d6:e3:24:e2:db:0b:30:16:ac:e4:d8:f0:56:cf:2b:
         5d:85:89:79:c2:1a:c1:ff:00:37:2b:8e:9e:8c:c2:31:0e:65:
         6e:96:aa:13:92:09:ba:c6:2b:57:2d:a5:22:03:67:72:16:85:
         93:a8:20:3a:8c:9b:57:a6:89:36:12:00:90:8d:e4:6d:37:90:
         ab:f9:37:76:06:96:9c:47:9c:b8:99:31:bc:97:f5:fe:0b:f2:
         34:af:14:13:c3:46:cf:fc:30:06:4c:fb:f2:ad:3a:de:d4:72:
         10:fc:28:e5:00:87:19:ce:38:a9:ca:4e:08:bf:27:29:3d:5e:
         44:65:4c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 20:39:19 2026 by rpki-client