Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/fcWl2KZ-MSpo_pgKkKb8dfdEJFs.cer
File:                     fcWl2KZ-MSpo_pgKkKb8dfdEJFs.cer (raw, json)
Hash identifier:          sp69cX4T0vfzbR0VMxJFj9WiF+uV8N5+Zd1XU+rGIVk=
Subject key identifier:   7D:C5:A5:D8:A6:7E:31:2A:68:FE:98:0A:90:A6:FC:75:F7:44:24:5B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       41A7
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36316B1/49D1728E885E11F193FB4DF0CE1D38B0/fcWl2KZ-MSpo_pgKkKb8dfdEJFs.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36316B1/49D1728E885E11F193FB4DF0CE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Sat 25 Jul 2026 19:23:25 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329777
                          IP: 102.201.252.0/24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 07:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16807 (0x41a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jul 25 19:23:25 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36316B1AF, serialNumber=7DC5A5D8A67E312A68FE980A90A6FC75F744245B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b6:ce:35:0f:78:bf:95:2a:26:f4:e5:a4:7b:
                    cc:a9:b8:fc:a4:4d:37:61:da:b4:6c:12:7a:4e:62:
                    1b:12:85:b1:66:08:50:6f:16:4c:21:8b:1b:4b:a6:
                    75:5d:e9:0c:83:91:b0:05:f5:e1:42:8a:74:b8:62:
                    23:3f:c6:ed:6f:04:fa:e8:7c:5f:5e:48:f4:77:ad:
                    f0:85:98:5c:aa:e5:b2:9b:03:fe:df:8d:9c:5f:fd:
                    9a:b9:ec:d7:2e:14:21:90:fc:6c:86:44:66:c9:1f:
                    aa:d9:91:46:19:20:00:3c:88:de:7d:48:0f:4b:07:
                    1b:02:25:9b:32:ce:5b:c6:9a:4b:70:31:00:3a:d2:
                    95:81:23:f1:b4:74:a1:d6:4f:4a:8d:ab:80:78:38:
                    26:59:2c:28:82:60:e9:b3:21:d7:2b:85:41:55:f3:
                    c8:65:5c:16:45:03:82:0e:32:c8:96:b7:17:c7:da:
                    bd:a9:4e:8b:7c:48:88:d2:f9:ed:be:1c:f7:5c:99:
                    76:4c:4e:28:09:f8:7c:16:fa:3e:22:10:b7:0f:7d:
                    3a:18:05:30:15:6e:56:1a:86:bc:77:8d:e1:2b:11:
                    97:c3:76:9e:51:f6:ba:c8:87:06:45:c0:6c:05:a0:
                    02:d7:d8:86:c9:b6:89:42:69:78:7c:a9:fb:8e:7d:
                    d6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C5:A5:D8:A6:7E:31:2A:68:FE:98:0A:90:A6:FC:75:F7:44:24:5B
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36316B1/49D1728E885E11F193FB4DF0CE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36316B1/49D1728E885E11F193FB4DF0CE1D38B0/fcWl2KZ-MSpo_pgKkKb8dfdEJFs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329777

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:1e:b5:b3:51:83:7b:93:1f:c6:3d:58:67:46:2d:1e:d5:2e:
         d2:fd:ea:03:7e:0a:ff:74:aa:f7:e6:84:2c:d0:99:84:1f:bc:
         f7:fe:3a:15:f2:cd:49:46:6e:c2:e9:66:d3:a3:03:d3:59:c0:
         6f:db:93:80:4c:95:b1:00:53:e4:ed:dc:d4:10:5d:bc:43:9c:
         4a:bb:8b:a7:40:d9:61:52:ce:ff:20:64:34:ff:ca:45:53:4a:
         0e:4c:dd:a3:62:ee:0b:ae:41:fc:b4:62:77:43:75:c2:2d:c7:
         3d:70:c8:39:d1:ce:25:fa:bb:21:5b:d8:15:c7:7b:27:9a:58:
         d5:91:ae:9f:5b:2c:68:89:73:19:a2:20:67:1e:b6:ae:c4:4f:
         ff:8f:c6:20:fc:b8:4f:dc:16:ec:cd:f3:e2:e2:cd:7e:c2:2b:
         9d:75:95:92:b2:74:0a:9b:80:5b:3d:a0:44:21:2f:30:f8:e6:
         e8:ab:2d:84:d5:a6:a0:dd:df:89:4d:f0:3c:b8:0c:a0:1c:db:
         73:e1:6b:08:9f:03:68:ec:82:01:f3:2a:6c:96:9d:fa:74:cf:
         fc:da:ca:4b:a9:2d:e6:69:fb:1d:9f:f9:bb:2b:2d:e0:d8:3e:
         a2:bd:b2:03:2a:7f:71:73:03:b1:ca:e2:c7:99:38:ff:56:d1:
         bf:72:76:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:00:36 2026 by rpki-client