Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
File:                     vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer (raw, json)
Hash identifier:          CpAsCV9ARuUl4VXqYBTU6zN88zXdyvPoOVQnJ25aqk4=
Subject key identifier:   BE:B0:58:6F:D6:E2:07:3B:DF:97:C4:FE:F5:6A:F9:C5:A0:9B:F4:52
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       401D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 06 Mar 2026 12:07:26 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329648
                          IP: 102.204.36.0/22
                          IP: 2c0f:7dc0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 25 Mar 2026 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16413 (0x401d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Mar  6 12:07:26 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36DBB05AF, serialNumber=BEB0586FD6E2073BDF97C4FEF56AF9C5A09BF452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:7d:7d:c9:06:75:15:2e:7b:38:01:3c:a4:
                    65:0a:73:a3:58:80:08:7e:1d:89:c6:af:a0:64:2d:
                    e8:3e:49:18:54:3c:e0:7c:e0:43:94:b7:61:71:1c:
                    84:4a:e4:e9:67:89:c3:9b:96:ee:91:b1:64:06:7c:
                    9a:51:81:76:8c:99:11:56:3f:59:47:08:54:7b:3a:
                    be:27:5f:55:80:c6:8c:56:68:55:f0:73:e9:af:a5:
                    92:a7:cd:06:fc:61:c3:e8:bf:3c:44:a1:7f:76:f4:
                    c5:98:07:d3:1c:19:7a:d7:20:6a:d8:ef:11:a2:69:
                    39:02:ad:19:69:e5:4c:78:51:70:e8:20:23:a0:92:
                    1b:85:a4:cf:ae:5a:d4:61:33:23:ed:30:28:bb:15:
                    82:32:52:61:42:51:2c:74:d7:85:f8:16:fb:1a:2c:
                    f4:36:1d:c7:34:51:32:9f:96:4f:84:71:bb:f1:d7:
                    46:29:5b:96:e8:ca:72:47:b0:9f:ab:45:71:59:73:
                    0c:6c:ae:2e:fd:72:50:5b:b1:bb:cd:f4:cb:77:b5:
                    14:21:1a:82:2b:b1:2a:ea:fe:ee:9c:3a:a6:01:57:
                    05:2a:dd:b6:1a:19:aa:93:0f:69:fa:9d:b8:90:21:
                    5c:56:62:e0:9e:a9:a2:71:5b:85:52:03:7b:18:f9:
                    1b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B0:58:6F:D6:E2:07:3B:DF:97:C4:FE:F5:6A:F9:C5:A0:9B:F4:52
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329648

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.204.36.0/22
                IPv6:
                  2c0f:7dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:30:73:07:d6:f6:aa:94:61:46:f5:b0:9b:26:c8:76:94:50:
         ec:a9:83:bb:a3:65:8a:1a:fa:cd:b9:da:32:92:bf:46:b3:67:
         2e:db:ba:10:7b:de:8e:32:78:cd:a6:ad:e9:aa:60:8f:e5:f0:
         79:1f:28:57:1f:0f:6a:23:ac:77:f0:fb:0c:03:b6:75:18:46:
         56:90:83:84:bb:fc:53:89:de:e7:a2:4e:2f:c2:8c:bf:dc:bf:
         a4:63:1a:bc:84:bc:d2:b1:37:c7:b9:c1:3f:65:20:47:a9:79:
         84:80:c1:8b:3b:96:76:64:3e:e6:94:92:51:36:05:dd:df:ca:
         ed:99:b8:08:32:11:b2:7e:c5:23:a3:ed:8f:05:a8:92:2d:a2:
         a5:6b:ab:af:2f:d6:44:5f:1b:2e:f6:38:99:5d:0f:7a:4f:ce:
         42:bf:20:d7:dc:86:25:ac:e9:9c:2a:b1:ca:55:91:ed:67:ba:
         21:5f:3e:3e:3a:c9:ac:93:73:b3:58:7e:77:ee:5e:a1:24:a6:
         df:d4:62:20:55:06:29:60:76:43:09:a4:1b:7a:ae:b4:77:7f:
         fe:7a:96:8f:ac:08:3c:b9:37:1d:bf:7d:c8:c3:8f:b9:80:4d:
         7e:38:2e:74:71:8b:45:27:75:18:25:d8:cf:79:fd:c0:47:7d:
         57:04:42:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 08:59:54 2026 by rpki-client