Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
File:                     Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer (raw, json)
Hash identifier:          7ADsuwXUt86R6PVJjCAfxGopa2m95riqDPB+lXTjhOU=
Subject key identifier:   57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4105
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Sat 30 May 2026 00:00:54 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329530
                          IP: 102.202.72.0/22
                          IP: 102.205.248.0/22
                          IP: 2c0f:5cc0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16645 (0x4105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: May 30 00:00:54 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36280C9AF, serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:90:37:3c:e8:a0:09:77:ce:23:06:99:05:
                    64:36:ff:95:bd:d1:67:f1:46:50:91:06:ab:a2:b8:
                    a1:9a:8e:51:8c:77:51:17:15:c9:1e:69:e9:dc:7d:
                    e2:f7:6c:91:bf:19:55:a5:69:fa:7b:53:79:41:cc:
                    a0:f0:25:aa:f7:c6:94:3b:da:1a:cf:d0:7b:20:e1:
                    06:08:6b:41:54:fa:e2:4f:8e:d3:a1:0a:e6:69:41:
                    98:d1:c6:7b:14:e7:f1:8f:5b:3d:2c:97:d9:d8:d3:
                    0b:29:1a:11:ec:a3:90:5f:5d:eb:c1:f6:17:23:ee:
                    9a:bd:55:50:a2:51:05:f9:6a:ae:ba:26:17:d4:50:
                    eb:71:6b:e7:59:78:37:93:66:99:c5:39:bb:20:c3:
                    97:60:04:ff:4b:34:6b:38:d5:ab:4d:ec:48:63:08:
                    fa:e9:bf:13:9a:97:20:ef:a1:e9:b4:02:3e:da:f6:
                    8f:16:a4:07:7c:7a:33:92:0d:6e:b8:05:53:ae:3f:
                    a8:3e:6a:bd:50:a7:4e:79:fe:33:73:e7:b6:2c:7f:
                    68:45:92:10:e4:bd:f8:e4:40:2d:a0:9f:43:9b:da:
                    c0:7b:d8:d8:80:5d:d8:9a:a1:1b:c0:98:5f:1d:62:
                    02:71:b1:bd:42:de:b5:96:88:d5:a5:c5:45:04:23:
                    b5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329530

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.202.72.0/22
                  102.205.248.0/22
                IPv6:
                  2c0f:5cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:40:fe:12:db:df:cf:ea:05:55:79:34:9e:be:a2:7e:c1:fc:
         52:73:c6:41:d0:9e:95:f5:75:62:41:b5:f4:8e:5f:72:7e:a4:
         3a:dc:b9:59:26:cf:53:e9:89:7a:7a:d6:cd:42:7a:91:3d:90:
         f0:51:f1:40:51:87:0b:63:40:53:76:10:86:f0:f1:56:c6:e7:
         3f:a1:f7:c1:e9:bb:8c:56:2d:da:0f:ee:f1:c5:0a:08:85:c1:
         7e:e0:bf:b4:84:8f:a5:9b:11:d6:be:3c:fa:0f:ed:db:0e:0e:
         4b:23:15:2b:06:16:ed:1e:68:2f:e8:f4:f6:11:0a:b2:3f:35:
         6a:79:25:61:7e:c6:88:f2:22:f9:d7:8d:99:d3:90:1d:ef:1b:
         35:15:6b:f7:98:e5:f3:d9:12:f4:87:e7:e2:1d:0c:f7:53:83:
         a6:e7:0b:c4:5f:c9:58:6b:a6:5b:ba:0e:35:db:d5:c8:9e:54:
         f7:15:3c:e2:c8:1e:42:fc:c5:78:07:85:d8:a8:a4:d8:64:7c:
         bd:8e:d7:d2:73:6b:94:6a:81:d3:9b:dc:6d:55:34:ab:17:57:
         4b:7c:77:ed:24:8f:8f:1b:cb:0f:43:c3:8e:09:b2:f6:92:43:
         3e:67:79:54:a3:8b:46:e3:7a:2e:39:9d:af:2d:20:18:76:b6:
         ca:91:50:7a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 03:09:56 2026 by rpki-client