Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/_7kiLkS7s-Yk2b-IVQbcXpk9Edg.cer
File:                     _7kiLkS7s-Yk2b-IVQbcXpk9Edg.cer (raw, json)
Hash identifier:          bT+IhnQ/Hm+azxmmF6p4LpxkmwaQ20IxoCoSFsBluc0=
Subject key identifier:   FF:B9:22:2E:44:BB:B3:E6:24:D9:BF:88:55:06:DC:5E:99:3D:11:D8
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       42A4
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F365FBDA/E376CAF6C0CB11F1A3540ED1CE1D38B0/_7kiLkS7s-Yk2b-IVQbcXpk9Edg.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F365FBDA/E376CAF6C0CB11F1A3540ED1CE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 05 Oct 2026 14:49:02 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 327945
                          IP: 102.206.81.0/24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 25 Oct 2026 09:34:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17060 (0x42a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Oct  5 14:49:02 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F365FBDAAF, serialNumber=FFB9222E44BBB3E624D9BF885506DC5E993D11D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:26:69:05:66:bf:e5:2c:2e:26:4d:3a:8f:ae:
                    75:bc:37:2b:5d:c3:46:c7:c9:30:df:ad:0c:8f:41:
                    06:8f:43:c8:59:77:d0:27:7f:87:9e:c4:fd:fb:bf:
                    be:c1:ca:4e:1e:1b:22:24:02:76:48:c6:c8:2d:b5:
                    87:19:13:64:9e:ca:06:24:d1:03:e1:14:b4:39:23:
                    e6:b2:37:3d:46:fe:7d:d1:87:7b:f5:df:0a:e9:f7:
                    7b:87:a7:c0:43:0f:2f:b5:45:3a:dd:5a:07:08:2b:
                    30:34:8a:da:70:61:3d:2e:d6:84:d5:5a:a5:66:72:
                    96:81:88:33:51:5a:5f:51:eb:87:ef:20:9e:c2:e4:
                    10:c7:19:39:dc:11:65:85:de:c9:f6:ce:ec:63:9a:
                    7f:fa:b4:b9:57:a7:74:8c:67:a0:65:c4:8f:94:23:
                    c7:e9:c1:b6:af:76:f8:b5:bb:5b:9a:17:8e:bb:73:
                    e7:57:97:b6:60:9c:f4:d1:82:4a:c9:56:bd:00:72:
                    83:9e:57:2e:aa:73:e8:47:f0:c9:4d:00:ac:b7:70:
                    e3:4a:43:ce:0c:19:dd:b2:3b:fc:e2:38:69:74:60:
                    aa:6a:3f:0c:67:7a:d7:97:a6:ff:7b:16:29:f5:68:
                    25:1d:8b:43:f6:94:e9:63:32:1a:9d:92:57:d1:e0:
                    03:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B9:22:2E:44:BB:B3:E6:24:D9:BF:88:55:06:DC:5E:99:3D:11:D8
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365FBDA/E376CAF6C0CB11F1A3540ED1CE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365FBDA/E376CAF6C0CB11F1A3540ED1CE1D38B0/_7kiLkS7s-Yk2b-IVQbcXpk9Edg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327945

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.206.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:3a:95:5b:c5:d5:95:ac:e1:86:99:65:76:1b:7e:a6:c5:f3:
         08:3a:7d:ea:ec:4e:0f:bd:64:30:f9:95:94:5c:b9:2f:da:3b:
         8c:1e:b3:48:52:08:8c:83:7a:b4:cf:9a:8a:df:88:cc:e1:d7:
         47:88:f6:05:70:9a:7b:05:cf:62:f1:cb:e6:6d:70:1f:bc:30:
         ba:ac:f2:77:c8:28:74:6b:0b:c4:6c:87:84:07:42:a4:30:15:
         ef:5f:cc:91:ae:95:37:af:f1:a3:0a:50:8b:91:91:a0:f7:6a:
         89:cb:fb:34:4c:5f:bb:14:19:a8:42:c4:b0:f9:d9:25:f4:56:
         59:b8:25:92:5c:1d:a7:6f:fc:e0:b6:33:18:4f:25:6f:36:81:
         7c:6e:c5:44:a5:29:54:9a:57:14:44:7e:81:8d:72:a2:46:6c:
         f3:8a:af:de:66:c9:23:e0:96:f3:76:90:7b:05:fc:7c:c9:8c:
         20:20:39:86:ba:32:29:ba:f3:85:39:9d:42:2a:21:2e:a7:5b:
         fa:f7:94:e2:6a:fe:96:ad:8b:3f:21:7c:8c:0a:3d:41:68:09:
         98:d9:14:f4:d4:ed:64:20:c8:2a:7e:73:20:5a:1d:1d:cc:45:
         f7:45:ba:4e:c5:09:e7:74:77:7d:35:85:3a:cf:88:46:a8:fa:
         f2:b6:bb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 00:44:51 2026 by rpki-client