Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/b4Um3OtaqCQHFEfR3rQc7IBrSoE.cer
File:                     b4Um3OtaqCQHFEfR3rQc7IBrSoE.cer (raw, json)
Hash identifier:          cIinXP09H79uduqK1Q+q/EjWPCFTguyBStAG2sLmu+Y=
Subject key identifier:   6F:85:26:DC:EB:5A:A8:24:07:14:47:D1:DE:B4:1C:EC:80:6B:4A:81
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4027
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F369E735/7BC5D4801CD711F1B9A0DDDFDAE4EC9C/b4Um3OtaqCQHFEfR3rQc7IBrSoE.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F369E735/7BC5D4801CD711F1B9A0DDDFDAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 10 Mar 2026 23:18:59 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329252
                          IP: 102.213.188.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 25 Mar 2026 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16423 (0x4027)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Mar 10 23:18:59 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F369E735AF, serialNumber=6F8526DCEB5AA824071447D1DEB41CEC806B4A81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3a:2d:95:3c:c0:6e:9c:b6:0c:85:f6:8e:55:
                    3c:b9:81:6a:1f:2c:26:cf:33:04:ce:78:db:c5:0e:
                    70:c5:89:b7:07:7b:a2:45:3a:8d:64:4a:67:cd:16:
                    f5:42:60:51:77:93:53:c8:f9:91:5b:ff:dc:1b:7f:
                    55:1f:6e:02:b7:7d:06:fc:fb:e6:22:c7:74:cf:fd:
                    67:d3:16:5f:8d:76:86:d2:26:97:f7:eb:50:09:59:
                    94:4f:da:7b:e3:26:ed:f2:c4:f4:08:fc:f7:0e:ea:
                    1d:ce:bd:5b:ff:be:67:ec:2d:97:aa:71:39:74:b8:
                    5d:f3:4b:40:7a:95:1a:bb:43:18:60:32:38:af:5a:
                    ad:96:a1:3d:21:6d:be:22:82:61:d8:20:46:3f:d7:
                    79:7c:ee:18:da:57:fb:25:76:00:5f:7c:7b:6b:44:
                    00:91:87:a6:a6:10:3b:0a:0a:b6:bc:d4:a8:2c:5e:
                    14:7b:c6:ea:a1:5c:6b:22:f7:4a:9c:ef:54:70:8c:
                    ae:4c:7c:3c:a7:ac:bf:02:bb:c2:e8:14:6e:84:76:
                    f9:df:39:e8:ff:d7:3b:31:e9:04:26:5f:16:c5:1b:
                    cf:6f:7e:c7:fa:09:23:25:87:b5:9d:ef:d3:66:19:
                    52:43:df:e2:16:29:57:74:b1:8f:e8:a8:9c:71:97:
                    ee:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:85:26:DC:EB:5A:A8:24:07:14:47:D1:DE:B4:1C:EC:80:6B:4A:81
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E735/7BC5D4801CD711F1B9A0DDDFDAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E735/7BC5D4801CD711F1B9A0DDDFDAE4EC9C/b4Um3OtaqCQHFEfR3rQc7IBrSoE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329252

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.213.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:02:e4:18:fc:b4:56:6d:c0:f1:29:51:bf:a3:d8:08:51:29:
         7d:1a:14:83:8d:84:d9:f8:77:7c:23:d9:bb:c0:0d:6e:1c:8c:
         f9:5a:04:f8:43:45:51:51:06:a5:10:2a:fb:88:0c:64:b3:60:
         bd:c0:99:25:74:aa:b7:be:e9:96:e8:72:79:df:c6:ec:e6:57:
         69:f1:75:f8:b0:14:52:08:d6:63:05:44:97:f5:aa:4b:2a:1e:
         fa:26:79:a1:2b:25:a2:85:1a:92:8a:e2:e2:90:6e:d9:a5:79:
         85:ec:96:03:89:f7:f0:e4:8d:d8:31:8f:af:8b:1b:85:82:bf:
         1f:77:5a:57:6e:02:32:2b:8a:4a:38:54:ed:3b:72:06:5d:35:
         94:ec:77:1c:27:3c:78:9b:03:e2:4b:57:ef:ef:76:57:ed:81:
         01:99:30:e7:ce:9f:fa:47:7b:c8:14:cf:49:56:99:22:4f:7d:
         ea:0b:11:74:bb:06:6c:81:b4:51:b7:7b:f6:cc:d9:c7:51:6b:
         1a:37:50:05:10:f0:04:eb:92:a4:e6:85:29:d9:d2:e5:5c:22:
         df:3c:60:74:51:3e:d4:74:e9:55:cf:e9:de:86:20:8b:dd:7b:
         6b:e4:7e:53:83:24:70:f8:31:5f:c2:91:90:4a:0a:10:6b:8f:
         46:ff:93:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 08:52:52 2026 by rpki-client