This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
File: CrgqSYFgfZszadx3bbCHPaDXW0o.cer (raw, json)
Hash identifier: +KPg/NkkwCHnp65r8uBNsfoGnIga0OF4FmCLEbYfkok=
Subject key identifier: 0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 37B6
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:17:51 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 329373
IP: 102.210.124.0/22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 Jan 2026 00:06:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14262 (0x37b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 00:17:51 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F3619C2DAF, serialNumber=0AB82A4981607D9B3369DC776DB0873DA0D75B4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:06:36:72:ba:e2:ce:18:a1:5f:a1:b4:5f:97:
5e:0e:13:1d:f2:82:da:19:9e:9b:b4:a1:56:f1:e0:
3a:9e:ab:74:fe:3a:5b:7b:7a:2c:8e:a4:37:85:0d:
2d:5d:bb:ab:e0:22:32:0e:2d:ec:00:e0:0f:8d:f3:
d8:7a:45:d9:5f:ff:1e:a5:b1:3b:ad:c3:93:1a:de:
1b:2a:24:e6:92:9d:20:c2:32:83:8c:75:99:65:f0:
47:c5:da:c9:3a:eb:25:7f:18:68:f1:6c:bb:82:19:
a7:90:b8:60:28:8a:cb:59:48:9e:7b:73:8e:28:b2:
99:c8:00:03:49:cf:28:85:59:a6:49:11:ab:27:26:
9f:73:7a:bc:c8:45:48:d3:a5:23:b3:d2:e4:8e:23:
09:7c:58:67:fb:f6:66:b6:94:f4:61:48:d0:eb:5e:
8e:b8:9d:06:59:48:e5:a0:ef:ed:d0:21:e2:09:bc:
b0:cd:05:0b:a8:66:2c:56:de:56:b9:19:5e:b2:31:
8b:8a:50:60:5a:80:97:9c:f7:90:c3:d3:2d:cb:af:
5b:97:09:db:f9:8e:6a:55:ec:16:6e:4f:45:32:50:
40:63:ba:90:d8:7d:5e:e7:b3:ed:39:20:a0:1e:ca:
ff:d4:ae:64:88:02:31:7e:b2:95:36:9b:73:5f:0a:
a5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329373
sbgp-ipAddrBlock: critical
IPv4:
102.210.124.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:8d:41:ea:79:2e:77:15:b5:bb:21:6c:3a:33:2d:18:0e:6e:
1d:73:f2:92:bc:68:d1:d4:13:6f:c9:fa:03:97:b6:57:f1:6d:
0f:92:6e:b4:64:1c:b4:02:3e:a2:0b:32:86:e8:f3:11:42:3c:
f8:03:36:93:22:d0:bc:bb:44:28:03:6c:76:d9:dc:c9:4b:8c:
00:c9:10:b6:e5:cb:ca:b7:28:7c:e3:44:94:cd:24:d4:c2:9a:
12:28:43:e4:d8:4f:e7:1b:e1:37:05:45:1f:d1:aa:f6:1f:a2:
e5:90:09:0b:70:4f:13:47:01:2c:f3:77:41:6f:74:4a:8d:c7:
10:1d:59:24:38:1d:bd:07:e5:da:51:31:45:a1:65:48:43:4c:
f3:fa:66:08:17:d6:46:33:e1:12:28:87:19:a3:ac:3a:6a:e7:
e4:83:75:73:c6:6c:57:95:85:30:56:81:95:6f:41:44:6d:d0:
9f:a5:8b:39:df:82:80:18:73:45:be:5f:e6:d7:2e:8f:c7:7f:
24:d2:0c:4d:16:c2:53:70:3e:53:0c:4f:32:99:ee:86:dd:52:
8d:f6:95:c5:48:ee:2e:88:f1:9b:6e:e2:4a:52:12:97:9f:74:
a9:69:d7:cc:96:2e:0c:3c:4e:3e:98:8e:54:3f:6c:40:56:83:
7f:ca:9c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 01:33:58 2026 by rpki-client