Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/e6ibzcZgPecSsbBcwhRCBOujnig.cer
File:                     e6ibzcZgPecSsbBcwhRCBOujnig.cer (raw, json)
Hash identifier:          VJ62qzFKXRrANgHmm3yMgvIctihMEQy1SVedN0eJoAU=
Subject key identifier:   7B:A8:9B:CD:C6:60:3D:E7:12:B1:B0:5C:C2:14:42:04:EB:A3:9E:28
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       40AB
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36E1834/0089D61C3F1F11F186F93815CF1D38B0/e6ibzcZgPecSsbBcwhRCBOujnig.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36E1834/0089D61C3F1F11F186F93815CF1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 23 Apr 2026 14:16:28 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329720
                          IP: 102.202.222.0/24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16555 (0x40ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Apr 23 14:16:28 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36E1834AF, serialNumber=7BA89BCDC6603DE712B1B05CC2144204EBA39E28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8c:46:16:15:b9:4b:39:2e:75:5a:d8:cc:e8:
                    fd:91:05:8e:f1:d8:61:69:93:b8:dd:15:cf:eb:ff:
                    f5:99:26:af:5b:fb:c2:cd:f8:3e:d9:b3:cc:3c:4c:
                    fd:41:f4:25:f0:74:21:d6:3a:30:98:af:2a:9c:c6:
                    e8:e4:e3:0f:86:3a:ba:a4:b0:6e:eb:b3:87:8f:c6:
                    b5:19:c2:31:cb:50:ab:1b:9c:1f:f9:36:b1:25:1d:
                    94:7f:a0:99:d0:6a:46:d4:5e:94:60:3e:2c:d6:34:
                    c9:43:5f:f3:f0:22:1a:94:5c:f0:06:81:b8:79:c2:
                    f3:72:a5:f0:cd:25:71:a2:6b:6b:83:c1:a7:9f:05:
                    e0:93:0f:f5:ca:e6:05:d8:cb:17:65:e1:7d:b9:15:
                    14:ff:7f:6d:57:2d:78:d5:4d:57:f2:5e:b0:59:dc:
                    00:6d:b4:54:b6:42:00:c2:d2:a3:57:f8:4f:d4:63:
                    6c:f0:b9:68:8b:16:02:c5:10:06:59:d3:1b:85:7b:
                    b1:c3:36:65:2f:f7:33:91:7d:6f:86:3a:cb:d1:15:
                    ff:21:4d:59:16:b6:9a:c4:11:b2:cd:08:64:f2:08:
                    41:8a:91:8d:5c:ed:97:e7:4a:8c:d2:59:a3:79:32:
                    80:b3:32:d4:84:e3:44:6b:79:1f:a1:48:c8:f3:c8:
                    d1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A8:9B:CD:C6:60:3D:E7:12:B1:B0:5C:C2:14:42:04:EB:A3:9E:28
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1834/0089D61C3F1F11F186F93815CF1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1834/0089D61C3F1F11F186F93815CF1D38B0/e6ibzcZgPecSsbBcwhRCBOujnig.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329720

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.202.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:e6:53:af:ae:ee:88:6e:c2:b8:c2:93:b3:bd:3c:64:61:0d:
         a3:36:fe:b6:cb:02:41:8b:9e:35:dc:f5:57:82:fb:e1:50:95:
         18:77:73:89:d3:9b:36:ab:8c:95:8d:c5:81:5a:ad:ba:99:36:
         cd:03:e4:a0:58:ec:14:0b:96:bd:be:b5:4b:c2:16:1b:e8:ae:
         42:13:3d:a7:05:8d:1a:3e:63:33:1f:47:c5:07:26:75:2d:ac:
         3f:89:3c:d1:4b:66:6a:35:1b:67:56:e6:d8:16:5b:ee:7f:fe:
         8e:d1:85:7a:66:c8:06:5b:72:a0:ac:ed:fe:d6:52:18:0f:65:
         0e:ae:dd:57:3e:cd:6b:42:65:a8:69:4b:b4:1f:7b:84:79:ad:
         98:3f:7f:97:eb:4d:34:13:d6:e5:b0:af:bf:70:24:49:14:58:
         c7:62:a7:b6:2d:c7:b2:b7:26:ed:1a:64:26:64:b5:38:62:42:
         50:ed:65:2c:31:49:e0:e5:f2:00:01:42:17:61:d7:d2:96:b2:
         8d:60:eb:1b:28:58:9a:c8:d2:fc:88:d8:42:b7:37:89:56:6f:
         04:a2:e0:fb:73:07:3f:07:ed:02:5e:1d:e2:a9:85:51:04:18:
         8a:55:f0:fb:ed:fe:62:8d:eb:c6:99:b1:13:fb:c1:70:73:3d:
         c7:bd:d5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 20:39:24 2026 by rpki-client