Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/RfLi_fMRPvxjNXV8r49bXsSszbM.cer
File: RfLi_fMRPvxjNXV8r49bXsSszbM.cer (raw, json)
Hash identifier: 331byBkzkuNsYe9EynucGFG4+LgUgNDWCmO1P0dNKKk=
Subject key identifier: 45:F2:E2:FD:F3:11:3E:FC:63:35:75:7C:AF:8F:5B:5E:C4:AC:CD:B3
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 36A6
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 28 Oct 2025 09:03:52 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329643
IP: 102.204.60.0/22
IP: 2c0f:3cc0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13990 (0x36a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Oct 28 09:03:52 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36A6D8BAF, serialNumber=45F2E2FDF3113EFC6335757CAF8F5B5EC4ACCDB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1f:93:f3:6b:97:9a:29:a4:8f:eb:87:4e:94:
3d:40:97:e7:a6:5b:bd:30:ea:77:b2:c1:1c:9a:e4:
ef:39:67:5e:2a:9e:ee:b1:f5:6a:28:fe:62:80:20:
ff:b7:da:75:1d:92:b8:b1:11:d3:2d:89:cf:02:83:
c4:46:fb:c2:c8:7a:d9:de:e9:9a:74:89:3a:e4:01:
da:ca:23:57:22:cf:36:f9:db:4f:38:52:ae:eb:66:
08:e7:c4:a9:f1:05:41:fb:66:15:45:ae:47:3a:e4:
a3:d2:c0:48:b8:ef:a0:3c:ea:5f:75:94:1d:55:d4:
d6:84:3f:a1:01:4b:07:e6:86:7c:0d:29:6b:71:cc:
61:e9:b0:05:a8:bb:60:f2:5d:32:bc:85:d5:26:ea:
a5:b3:7d:d9:35:c6:fa:b9:b7:62:f5:aa:d9:ca:7b:
28:a5:61:73:ff:e7:f0:0b:69:78:d1:2f:4e:ea:e4:
d0:b5:74:37:a3:9b:56:1f:bf:73:5e:dd:a4:48:7a:
44:2f:75:91:e4:0a:76:da:ea:24:53:d9:73:c0:40:
95:c9:54:ac:53:9c:d2:51:89:44:af:37:d5:d5:26:
43:4a:3b:9b:4c:b9:47:cc:02:52:97:d0:d6:0b:b3:
38:dd:83:76:3f:e6:f5:a3:07:26:65:d7:c8:00:fd:
cc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F2:E2:FD:F3:11:3E:FC:63:35:75:7C:AF:8F:5B:5E:C4:AC:CD:B3
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6D8B/FF55D76EB3DC11F0AD0F1FDCDAE4EC9C/RfLi_fMRPvxjNXV8r49bXsSszbM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329643
sbgp-ipAddrBlock: critical
IPv4:
102.204.60.0/22
IPv6:
2c0f:3cc0::/32
Signature Algorithm: sha256WithRSAEncryption
04:d8:a7:cc:c4:df:73:cc:c1:3e:95:1a:6d:f1:4a:29:9c:f5:
96:6f:74:7d:60:5b:5e:21:70:f4:fb:c1:fa:8c:88:fc:2c:6e:
49:9e:f9:7f:e6:8c:44:54:a4:67:84:35:2e:18:e8:eb:02:59:
97:72:49:73:00:33:e3:c5:f3:b2:bf:36:66:e0:a0:52:ea:ea:
46:7c:14:70:0c:e5:fa:fc:8b:76:1d:24:a2:00:d7:b0:e6:39:
58:74:c3:03:11:15:67:60:7b:41:18:60:aa:87:b2:cd:56:7d:
f1:f9:dd:2e:02:9d:45:a8:1b:2a:10:98:cb:f0:92:52:d2:4d:
e8:f8:85:79:e7:9d:66:bf:61:f1:21:e6:9c:a1:c7:5f:d4:23:
66:59:46:af:b4:03:76:84:b7:53:60:b9:be:dd:c2:a3:4e:8b:
ed:56:1f:2b:8b:68:2b:50:be:b9:25:d2:d8:f0:ed:0f:ec:53:
94:90:d1:34:16:2a:4e:9a:5c:f0:a4:18:c2:73:85:cb:8e:b8:
32:f9:96:c8:c8:1c:60:f4:04:55:a3:dd:fa:c3:81:77:4b:86:
ec:60:a5:97:b1:8f:85:d5:13:b5:0b:74:fc:67:4f:fc:bf:69:
9e:ab:63:86:b7:ea:be:5e:6b:a7:d9:e4:c9:33:ea:5d:88:f1:
c1:c5:9d:61
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICNqYwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTEwMjgwOTAzNTJaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkE2RDhCQUYxMTAvBgNVBAUTKDQ1RjJFMkZERjMxMTNFRkM2MzM1NzU3
Q0FGOEY1QjVFQzRBQ0NEQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDvH5Pza5eaKaSP64dOlD1Al+emW70w6neywRya5O85Z14qnu6x9Woo/mKAIP+3
2nUdkrixEdMtic8Cg8RG+8LIetne6Zp0iTrkAdrKI1cizzb52084Uq7rZgjnxKnx
BUH7ZhVFrkc65KPSwEi476A86l91lB1V1NaEP6EBSwfmhnwNKWtxzGHpsAWou2Dy
XTK8hdUm6qWzfdk1xvq5t2L1qtnKeyilYXP/5/ALaXjRL07q5NC1dDejm1Yfv3Ne
3aRIekQvdZHkCnba6iRT2XPAQJXJVKxTnNJRiUSvN9XVJkNKO5tMuUfMAlKX0NYL
szjdg3Y/5vWjByZl18gA/cybAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQURfLi/fMR
PvxjNXV8r49bXsSszbMwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBNkQ4Qi9GRjU1RDc2RUIzREMx
MUYwQUQwRjFGRENEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QTZEOEIvRkY1NUQ3NkVCM0RDMTFGMEFEMEYxRkRDREFFNEVDOUMvUmZMaV9m
TVJQdnhqTlhWOHI0OWJYc1NzemJNLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFB6swLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmzDwwDQQCAAIwBwMF
ACwPPMAwDQYJKoZIhvcNAQELBQADggEBAATYp8zE33PMwT6VGm3xSimc9ZZvdH1g
W14hcPT7wfqMiPwsbkme+X/mjERUpGeENS4Y6OsCWZdySXMAM+PF87K/NmbgoFLq
6kZ8FHAM5fr8i3YdJKIA17DmOVh0wwMRFWdge0EYYKqHss1WffH53S4CnUWoGyoQ
mMvwklLSTej4hXnnnWa/YfEh5pyhx1/UI2ZZRq+0A3aEt1Ngub7dwqNOi+1WHyuL
aCtQvrkl0tjw7Q/sU5SQ0TQWKk6aXPCkGMJzhcuOuDL5lsjIHGD0BFWj3frDgXdL
huxgpZexj4XVE7ULdPxnT/y/aZ6rY4a36r5ea6fZ5Mkz6l2I8cHFnWE=
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:14:53 2025 by rpki-client