Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/2cDlwkl6yIv_-87Z9V1goiiYkn8.cer
File:                     2cDlwkl6yIv_-87Z9V1goiiYkn8.cer (raw, json)
Hash identifier:          LNTVqYXAelTWTCkURfv+5CWD2JVG6gzA1lZZxAvDGiQ=
Subject key identifier:   D9:C0:E5:C2:49:7A:C8:8B:FF:FB:CE:D9:F5:5D:60:A2:28:98:92:7F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       359E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 14 Jul 2025 11:50:48 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 329419
                          IP: 102.209.237.0/24
                          IP: 2c0f:3340::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 12 Aug 2025 00:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13726 (0x359e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jul 14 11:50:48 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F3644EA8AF, serialNumber=D9C0E5C2497AC88BFFFBCED9F55D60A22898927F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:b4:d2:9e:67:93:b4:b1:79:e1:03:14:60:
                    f9:fa:8d:ff:28:bb:6c:c2:1e:95:a6:eb:7e:fd:b3:
                    16:b4:95:26:9f:b8:e0:a6:24:08:21:84:05:f1:61:
                    95:e9:97:eb:35:2c:40:5d:63:d1:10:1b:55:5a:fc:
                    5a:9e:4c:a7:bf:29:79:21:e2:c7:05:1f:39:d8:ca:
                    1a:2f:04:32:b8:cd:5c:d6:0a:42:85:a9:82:59:7b:
                    5d:b8:42:9f:17:d3:40:90:40:72:ff:ac:25:32:ff:
                    e0:e8:32:df:40:d5:4b:cc:21:ed:70:47:9f:bc:f3:
                    89:a6:fb:86:8a:57:be:26:6a:00:5b:22:ae:96:dc:
                    9e:9a:16:de:d3:91:de:ab:ed:71:98:67:33:20:8d:
                    97:0a:ce:74:49:4d:33:f6:2a:76:a2:2e:38:46:64:
                    b4:35:7d:de:4a:3a:7e:b6:b8:0e:cb:d5:dd:8e:1d:
                    ea:6e:43:b2:42:77:59:00:34:58:a1:cd:29:53:76:
                    b8:15:d7:3d:76:0a:38:6e:97:72:98:28:bd:4e:c3:
                    b6:8e:94:89:fd:10:3c:89:e6:80:47:91:28:45:9f:
                    d3:b0:97:55:f1:c0:85:ff:1b:0c:c3:a0:a5:b7:5c:
                    fd:33:20:8c:9b:98:46:45:09:18:38:fc:aa:d8:39:
                    3c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C0:E5:C2:49:7A:C8:8B:FF:FB:CE:D9:F5:5D:60:A2:28:98:92:7F
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329419

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.209.237.0/24
                IPv6:
                  2c0f:3340::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:b8:65:94:8c:6c:1e:28:95:34:a8:a0:d6:06:bc:d7:cf:70:
         ad:1b:3d:07:44:4c:14:a2:34:2e:22:8b:24:cf:d5:4d:4c:3d:
         77:f8:29:2e:df:d2:25:86:bc:32:18:d6:d4:32:43:a5:a8:ed:
         41:3e:c3:be:73:8e:bc:73:75:0c:af:69:42:d9:c9:ed:5a:d1:
         41:91:f9:83:2f:0b:96:e8:c2:08:b6:e8:9f:9b:ba:d6:a4:f0:
         e3:7e:fb:4c:1d:b2:59:79:e1:23:ea:0b:fb:77:1f:34:8e:93:
         fc:a8:fa:93:86:97:29:f4:d4:d8:33:49:83:c5:ee:48:6a:39:
         2b:16:33:7b:8f:c8:ba:ae:f6:94:77:b4:e8:a9:4d:db:eb:c3:
         02:61:53:fe:de:9a:9e:41:e7:ec:41:b6:fc:95:43:59:48:6d:
         ab:cc:b6:7e:a1:75:cc:65:1a:a5:1c:a6:e9:c3:81:42:47:23:
         43:c8:46:b5:8f:e2:16:e0:5e:26:00:41:02:69:66:f1:80:14:
         69:3e:99:da:1b:f0:d1:57:ee:00:f9:4f:5c:4b:ba:ae:87:bb:
         37:a4:fc:b1:0c:6f:74:c3:54:4b:43:35:24:53:cf:43:6c:de:
         d6:b9:02:60:62:32:82:22:f7:1b:eb:90:c7:77:9f:23:d5:bf:
         85:a1:2b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:18:58 2025 by rpki-client