Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/UpunS83yaGnfBI9JzaZV3lnZgeE.cer
File: UpunS83yaGnfBI9JzaZV3lnZgeE.cer (raw, json)
Hash identifier: vdJ6fjyaAdVjkNe/cKrYzovyoTMYYKFnYMFeWvpTWiA=
Subject key identifier: 52:9B:A7:4B:CD:F2:68:69:DF:04:8F:49:CD:A6:55:DE:59:D9:81:E1
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 36A3
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 27 Oct 2025 13:41:14 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329621
IP: 102.204.152.0/22
IP: 2c0f:35c0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13987 (0x36a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Oct 27 13:41:14 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36596DEAF, serialNumber=529BA74BCDF26869DF048F49CDA655DE59D981E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:a1:5c:67:a1:8f:98:d1:e9:4b:9e:f0:21:
05:1e:0a:bc:af:4c:5d:ef:e1:8b:1f:23:0d:bd:10:
f3:8b:63:74:b4:7b:7d:47:f6:89:0d:eb:60:82:57:
a0:ad:05:30:ed:0b:85:ba:d3:f8:91:7a:36:5a:12:
e8:a0:8a:85:e2:79:48:de:14:3e:61:db:2f:88:5b:
57:15:30:67:e0:be:0b:ea:1f:5a:62:1d:f9:ba:20:
9f:16:75:7a:58:00:92:2c:da:77:f8:26:35:5a:6d:
9d:59:dc:5a:d6:f1:3d:96:af:80:79:ed:9d:11:3d:
3c:dc:30:6c:c5:ed:0e:b7:b3:17:85:23:72:73:bf:
c0:4c:81:ff:fe:89:c4:7d:78:49:f5:b3:41:9a:ff:
6e:15:3c:14:4d:fe:03:93:9c:bb:01:35:9a:f2:47:
b6:da:df:61:aa:c0:ad:f2:c7:09:51:4b:a6:9b:56:
a5:f8:c9:a9:1b:89:9b:37:84:35:2b:e1:02:11:3a:
94:84:db:b4:69:e3:46:00:e5:ca:28:9f:f2:a4:1d:
f8:ab:19:a8:1d:d8:bf:2a:d5:60:31:1c:e6:21:44:
ac:33:9e:95:0a:a2:6c:14:78:12:d8:45:b5:3e:9f:
c2:38:41:40:f7:64:73:8c:25:9c:f7:ac:0b:da:f9:
c4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9B:A7:4B:CD:F2:68:69:DF:04:8F:49:CD:A6:55:DE:59:D9:81:E1
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329621
sbgp-ipAddrBlock: critical
IPv4:
102.204.152.0/22
IPv6:
2c0f:35c0::/32
Signature Algorithm: sha256WithRSAEncryption
3e:69:f7:de:6e:c4:bd:2a:f8:23:44:54:38:16:99:35:a1:3a:
37:41:16:b0:42:a3:e7:7a:5d:26:d8:18:10:57:32:c6:e9:cc:
e9:35:ee:27:dd:2a:e1:47:80:f6:3c:bf:63:5b:a6:45:48:ab:
00:31:80:0b:fd:88:e1:76:67:e6:0f:06:6c:72:f0:52:69:e9:
81:24:2e:7f:eb:12:59:da:68:9c:03:82:5a:c7:9b:29:de:e7:
02:3d:87:a1:3b:e2:31:8a:46:f7:5f:5a:a5:93:3b:8c:60:f9:
ee:38:2c:81:61:ee:aa:40:08:ff:cc:e5:c8:26:08:bd:69:53:
c3:ad:00:93:69:20:88:43:03:39:0d:6f:8d:34:4d:1f:33:14:
cf:06:ed:75:cf:f7:0d:39:eb:84:95:d5:71:f0:60:da:90:af:
5c:b1:f1:bd:3c:d8:23:76:1c:9a:b4:22:28:09:26:7c:16:bb:
df:e1:f7:f0:0a:7b:ab:f5:70:9f:7e:29:57:dc:df:bd:92:9b:
37:ac:91:9e:e1:b6:8c:dc:3f:a8:d3:ce:9c:6e:e6:f4:ef:ff:
3d:95:1f:e3:b1:df:23:d8:e7:56:d1:96:a3:5d:ea:53:cc:01:
7a:dc:36:8d:85:81:e2:15:f4:ca:7f:34:53:ab:07:fb:4b:69:
30:f6:0c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:14:51 2025 by rpki-client