Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/zBbI3dzOE6mgunKyD6uQO9nqDc4.cer
File:                     zBbI3dzOE6mgunKyD6uQO9nqDc4.cer (raw, json)
Hash identifier:          c2/KaqsFqxaD0p1FwF3ejhJtRDJaeg47mX0ju0pOO64=
Subject key identifier:   CC:16:C8:DD:DC:CE:13:A9:A0:BA:72:B2:0F:AB:90:3B:D9:EA:0D:CE
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       40C6
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F361373D/47CCED72478D11F1ABAFC0F7CE1D38B0/zBbI3dzOE6mgunKyD6uQO9nqDc4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F361373D/47CCED72478D11F1ABAFC0F7CE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 04 May 2026 07:46:02 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329425
                          IP: 197.157.204.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16582 (0x40c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: May  4 07:46:02 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F361373DAF, serialNumber=CC16C8DDDCCE13A9A0BA72B20FAB903BD9EA0DCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ec:46:73:12:5a:db:80:2f:dd:5e:68:03:57:
                    c5:b2:e5:4d:db:87:3b:a7:ff:d7:c5:57:f0:c9:2e:
                    63:10:50:cc:95:45:ea:96:83:6e:3b:0b:8b:3b:99:
                    c3:a0:5d:ca:6f:8f:ff:93:7d:e0:18:33:0e:6d:2f:
                    ab:57:4e:17:7c:f0:dc:86:a2:d0:87:84:5c:a2:82:
                    00:31:90:af:f0:92:cf:66:ca:45:39:1d:84:e0:19:
                    b6:b8:6e:65:38:c1:75:19:30:56:a3:d8:ec:4f:83:
                    43:17:90:ed:65:1f:48:8f:f7:40:b2:0d:8f:ae:c9:
                    c2:1b:39:ee:9c:74:d3:42:83:44:0c:0b:0b:0d:86:
                    a9:e1:c4:f5:4c:bb:15:40:de:a4:21:bc:ed:fa:a7:
                    32:20:fc:7a:f0:7d:15:50:58:44:fa:3a:8e:3b:6a:
                    c6:5c:b6:f7:fc:16:96:0b:ad:55:ad:b3:f8:74:19:
                    45:7c:e9:cf:73:18:db:f6:b5:5b:54:bb:01:56:ad:
                    49:4a:ba:a9:0e:ed:c6:a2:32:4c:64:34:1e:c2:71:
                    ac:58:29:21:7a:8c:9b:1b:29:63:71:f4:c5:75:75:
                    ac:2a:77:99:74:ec:5b:94:99:28:8e:2e:6e:b8:39:
                    35:34:c5:de:62:dc:22:25:a2:07:d2:99:33:ca:44:
                    00:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:16:C8:DD:DC:CE:13:A9:A0:BA:72:B2:0F:AB:90:3B:D9:EA:0D:CE
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F361373D/47CCED72478D11F1ABAFC0F7CE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F361373D/47CCED72478D11F1ABAFC0F7CE1D38B0/zBbI3dzOE6mgunKyD6uQO9nqDc4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329425

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.157.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:5f:ce:6e:5c:11:d8:fc:77:b5:8a:c1:6b:3d:df:d1:ed:16:
         6c:94:3b:b1:31:6c:c7:50:72:3b:68:92:ac:da:e6:b0:72:5d:
         fe:ce:15:5d:5a:7c:85:98:b4:75:1a:8b:42:db:00:47:bb:07:
         b0:fe:b3:ea:70:7b:f8:2b:10:2e:16:93:cd:6e:2a:b9:86:5a:
         eb:56:fb:98:24:ca:a1:37:e8:6a:c9:64:33:90:eb:e3:27:1f:
         64:b2:47:cd:e3:9c:d2:05:45:60:9a:45:88:f1:76:1e:d9:e2:
         c8:5f:20:68:53:eb:48:65:b2:12:58:9f:bb:ff:1a:3c:ac:45:
         71:24:34:37:a5:0e:83:bb:9a:53:e5:a5:70:be:2c:6d:e4:0a:
         97:61:4e:02:48:83:46:db:ae:ec:ac:29:11:95:a6:c7:d2:94:
         f8:7d:65:3e:b7:df:ca:45:4c:8a:03:5e:6c:57:b7:46:d9:6c:
         c3:af:6a:49:21:41:45:3a:b1:04:5c:df:f9:be:db:2e:d9:bb:
         02:72:73:f1:f0:ad:26:5e:75:76:ca:ff:ae:c5:a2:d9:b8:85:
         13:b2:56:2d:f8:a0:b0:3c:16:f4:13:71:46:ca:38:55:5e:68:
         25:c6:19:66:76:b1:25:a1:4b:a2:de:8d:4d:64:8c:aa:62:53:
         3d:87:01:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 20:39:16 2026 by rpki-client