Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/CJu_po0WI_pGyRBDO-B2KT4_wrk.cer
File:                     CJu_po0WI_pGyRBDO-B2KT4_wrk.cer (raw, json)
Hash identifier:          RWNTP6L14jpWq6IP6YbzqCNDhpglkx8/qeri0xEazgM=
Subject key identifier:   08:9B:BF:A6:8D:16:23:FA:46:C9:10:43:3B:E0:76:29:3E:3F:C2:B9
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3FEA
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Sun 15 Feb 2026 11:30:17 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328348
                          IP: 102.134.84.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16362 (0x3fea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Feb 15 11:30:17 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F365BE6BAF, serialNumber=089BBFA68D1623FA46C910433BE076293E3FC2B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:37:b4:7e:90:f8:fe:db:e8:04:ec:e9:08:
                    e3:c4:77:4f:71:fc:a9:83:6e:a7:6f:f2:a8:23:9a:
                    dc:95:6e:05:5c:9b:f7:2c:47:c3:17:9b:dc:14:b1:
                    fe:ae:55:30:99:90:17:e4:d2:61:7c:9b:55:a0:95:
                    97:02:25:62:a0:02:ec:30:d0:94:17:2b:2d:9e:09:
                    1f:57:5f:49:54:4c:e9:b3:7a:21:02:a7:71:09:99:
                    fb:d5:ee:c1:b1:ba:39:07:37:b7:2c:3e:2d:e5:e8:
                    16:6a:8d:f1:bc:8f:85:15:04:b7:ac:53:3d:b2:d5:
                    5f:3d:52:bc:15:7b:33:68:85:91:58:d0:1e:ba:20:
                    ae:f4:85:c8:fd:d8:40:a8:c5:2d:87:16:76:a8:c0:
                    33:f5:81:d3:21:5d:32:69:52:79:73:81:36:fc:9e:
                    f7:e8:81:d5:7b:df:a9:92:d0:df:0a:92:e1:ac:47:
                    51:94:e2:92:9e:6c:54:6c:b7:1d:64:28:31:74:37:
                    4a:30:4c:7a:7d:1b:21:cc:be:7b:12:70:c4:50:de:
                    9f:6d:2e:fd:9b:22:7b:e6:b2:75:56:59:11:55:c6:
                    1d:e0:7b:4f:49:c3:65:5a:cd:ee:e1:87:85:48:65:
                    d9:93:ae:f1:ae:49:02:9b:e4:d1:26:4e:1e:ba:5c:
                    22:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9B:BF:A6:8D:16:23:FA:46:C9:10:43:3B:E0:76:29:3E:3F:C2:B9
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE6B/AE58C9440A6111F189CC10DEDAE4EC9C/CJu_po0WI_pGyRBDO-B2KT4_wrk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328348

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.134.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:2c:ba:e0:0a:03:88:da:2f:df:a2:d6:97:5f:ff:cf:73:9a:
         06:f1:55:ae:75:e4:3c:53:6f:1b:4b:f0:28:e5:8f:db:70:c7:
         ff:b3:a2:96:d0:24:ca:cf:d3:30:6d:0f:91:dd:f5:ee:e4:f8:
         73:48:c5:dd:94:6c:53:9d:fa:81:82:cf:2f:d6:0c:76:be:5a:
         30:86:59:53:5a:b0:c7:83:25:0b:54:fb:8a:df:6d:5b:7b:2a:
         cb:f8:0a:0d:ff:96:7a:ee:0a:e7:a5:d5:6b:57:42:cd:84:1e:
         bf:c2:8e:6b:2c:cb:10:e2:21:8a:f6:4a:1f:fd:e5:51:0d:bf:
         71:78:9c:f9:3c:56:96:68:ad:f2:a4:d8:87:da:ba:9b:9f:ce:
         3b:89:fa:20:3f:f6:99:84:6a:9f:df:14:fd:0e:58:03:60:1f:
         12:b0:93:3b:2c:7a:10:31:ad:d2:95:4f:c0:a2:29:8a:99:1e:
         f2:01:69:14:4a:81:fa:43:a1:fd:10:0c:98:96:b1:14:6a:ca:
         c8:ac:b3:3a:56:c7:00:31:ae:4e:99:b2:6b:c1:38:2b:b3:9c:
         cc:f1:a2:c5:b4:62:7e:0a:35:1a:ba:57:08:b8:1a:77:9b:51:
         71:c4:57:f5:83:49:07:8f:c8:a2:1f:55:ea:51:7a:3e:a4:5c:
         61:58:29:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:35:26 2026 by rpki-client