Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/VibDpyL2myOgzqq4vq9tsK0kQw8.cer
File:                     VibDpyL2myOgzqq4vq9tsK0kQw8.cer (raw, json)
Hash identifier:          +pgPVSHIbMx1+1FLs19Cj0egsvJJub4ab/EvgjxYLL0=
Subject key identifier:   56:26:C3:A7:22:F6:9B:23:A0:CE:AA:B8:BE:AF:6D:B0:AD:24:43:0F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       42B2
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36EA220/585D303CC16511F19640C4C1CE1D38B0/VibDpyL2myOgzqq4vq9tsK0kQw8.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36EA220/585D303CC16511F19640C4C1CE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 06 Oct 2026 09:07:32 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329687
                          IP: 102.203.160.0/22
                          IP: 2c0f:420::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17074 (0x42b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Oct  6 09:07:32 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36EA220AF, serialNumber=5626C3A722F69B23A0CEAAB8BEAF6DB0AD24430F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b3:82:cf:50:2b:19:7f:3e:86:bb:9c:42:1d:
                    39:de:50:06:6b:5b:b8:6c:92:43:60:09:62:50:51:
                    c1:c1:d8:76:e5:56:b4:c6:57:4c:54:2a:74:6a:3c:
                    da:a7:e0:44:90:a9:d7:bb:21:bc:12:14:51:98:1a:
                    78:ad:3f:5e:2b:d5:0e:c0:50:da:7d:1c:eb:77:5e:
                    7f:c4:be:ba:0c:b3:a5:dc:59:11:fb:4c:2b:5c:28:
                    62:37:2e:3a:63:68:47:cf:5d:2a:ca:8c:6c:91:91:
                    45:fa:88:c7:82:fa:e2:e1:70:ad:f7:01:dc:97:02:
                    2b:f2:9b:d1:8f:92:bd:06:16:9a:53:07:9c:58:9d:
                    ea:83:d2:eb:ec:3f:ab:55:35:7b:83:d1:22:c8:00:
                    65:41:e2:00:81:11:ce:dc:16:64:7a:40:42:1d:14:
                    85:74:91:4e:55:11:1d:9c:17:63:54:94:e4:07:dc:
                    56:eb:d0:48:89:37:4c:29:0a:86:bf:e8:22:9a:31:
                    df:73:b2:4d:8c:76:5f:d9:af:10:2c:4f:de:66:ab:
                    06:c9:16:55:6c:8f:fa:01:29:56:26:c2:82:a3:51:
                    7f:a2:98:f2:c0:4e:2f:9a:6b:89:a6:01:ef:29:97:
                    2c:85:bd:f7:01:94:84:03:70:31:e9:e6:ea:b1:46:
                    f8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:26:C3:A7:22:F6:9B:23:A0:CE:AA:B8:BE:AF:6D:B0:AD:24:43:0F
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EA220/585D303CC16511F19640C4C1CE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EA220/585D303CC16511F19640C4C1CE1D38B0/VibDpyL2myOgzqq4vq9tsK0kQw8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329687

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.160.0/22
                IPv6:
                  2c0f:420::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:02:00:05:98:55:58:70:66:61:8c:aa:86:14:e2:f5:68:67:
         32:0d:f0:69:af:60:43:17:9d:49:f0:9e:8b:48:f4:87:96:8d:
         dd:77:91:3c:f0:0b:45:55:28:4e:1d:9a:bc:78:71:de:f4:87:
         d5:12:a1:2b:72:8f:00:09:f3:02:09:8c:22:28:52:9a:bc:1b:
         5b:43:82:44:82:c5:00:8c:88:56:28:71:ba:74:e5:2e:8e:a6:
         c9:02:d1:2f:23:a4:14:59:ad:a6:0a:9f:a6:96:67:b0:19:3a:
         b9:ed:f0:66:67:56:8b:f0:db:ea:43:0e:fc:c4:f3:6e:e2:5f:
         87:9a:e8:1a:a9:b7:99:51:64:65:ef:0d:ab:14:c3:f8:f8:f3:
         35:89:32:08:3c:88:b3:c7:f7:31:3b:e3:42:61:1b:99:6e:79:
         98:2e:89:2c:88:a5:8a:e6:61:27:7c:fd:2d:8c:64:03:1a:af:
         41:cd:5b:35:5a:b2:b7:d8:85:59:c1:64:aa:68:b8:a5:8a:24:
         e5:80:97:c6:9b:87:32:71:e6:5a:b5:e8:d8:8d:a6:08:d9:4e:
         f7:d8:5e:26:15:0c:62:4c:dc:c8:bd:f1:c7:21:59:f4:cf:82:
         57:07:3d:b6:b9:66:28:67:63:13:34:15:6a:b9:a1:46:3b:e8:
         ec:14:d1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:16:48 2026 by rpki-client