Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/gYaDikiRYMghuM_8XQJ0D7JlPGw.cer
File:                     gYaDikiRYMghuM_8XQJ0D7JlPGw.cer (raw, json)
Hash identifier:          JzGl6hXkUQdDgAo+Y7LYMCQsJoWmE+6fmiuA8cNumvk=
Subject key identifier:   81:86:83:8A:48:91:60:C8:21:B8:CF:FC:5D:02:74:0F:B2:65:3C:6C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       41B4
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364B7D8/7402C8428A5611F1B8F03F05CF1D38B0/gYaDikiRYMghuM_8XQJ0D7JlPGw.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364B7D8/7402C8428A5611F1B8F03F05CF1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 28 Jul 2026 07:32:22 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329778
                          IP: 102.201.253.0/24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 07:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16820 (0x41b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jul 28 07:32:22 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F364B7D8AF, serialNumber=8186838A489160C821B8CFFC5D02740FB2653C6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:90:3f:2b:70:d1:c1:26:b5:6e:ba:58:f1:cb:
                    59:2f:86:16:a4:f8:24:5c:39:99:df:9c:00:f0:92:
                    0e:42:4d:4e:5d:5b:e7:c1:3f:32:c0:f6:7e:b3:55:
                    f3:44:f0:28:9f:97:b3:f1:ed:75:9c:23:4b:6f:80:
                    fd:53:f7:db:01:16:f4:58:f3:50:ad:df:32:2b:8f:
                    58:83:f0:13:d7:b1:fb:05:8a:65:94:67:97:f7:39:
                    13:5d:1e:df:46:1b:4f:9f:35:ea:fe:f3:7c:2b:6b:
                    63:ad:df:18:46:c0:a4:d8:bc:2a:0f:83:74:8b:df:
                    5e:c9:86:27:4a:ea:9a:fc:4d:c3:d8:52:f6:91:5c:
                    52:5c:15:e0:64:e4:43:8a:f2:64:fe:be:54:de:8e:
                    27:55:9d:4d:cb:ca:c5:9c:8f:bb:2d:f6:d8:e2:97:
                    9f:75:38:db:15:41:d1:34:a2:f5:da:e2:5e:b3:6d:
                    7b:10:37:00:23:a9:36:26:02:71:85:9f:ed:16:9d:
                    bf:c9:5d:26:a3:1b:b0:3f:80:fc:60:32:16:c9:d0:
                    d5:ed:e7:58:33:1b:c9:04:60:ad:a8:90:a6:c4:90:
                    4a:7f:8a:3f:b3:82:b7:3c:a5:99:d7:5f:bd:26:b6:
                    ef:c2:81:48:7d:3d:2e:6e:27:6a:79:f1:ca:53:82:
                    eb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:86:83:8A:48:91:60:C8:21:B8:CF:FC:5D:02:74:0F:B2:65:3C:6C
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B7D8/7402C8428A5611F1B8F03F05CF1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B7D8/7402C8428A5611F1B8F03F05CF1D38B0/gYaDikiRYMghuM_8XQJ0D7JlPGw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329778

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:c3:44:ee:1a:1a:51:20:61:ef:47:0d:84:a2:48:b6:e7:9b:
         b9:58:27:e9:b2:4c:65:f5:58:de:1e:fc:6d:7b:ea:c6:5f:08:
         13:71:89:ba:40:00:25:3c:3d:72:15:ff:2a:7b:99:56:0a:ed:
         16:05:8d:17:af:41:72:02:cb:fb:25:fa:0e:25:ac:8c:ca:27:
         73:be:f3:45:43:f1:78:b4:e6:97:f7:39:36:7d:48:05:05:ca:
         0a:fa:34:38:cc:fc:a7:b2:36:91:23:ca:05:a0:bc:3c:5f:39:
         7c:a7:71:95:d4:e5:49:02:fb:be:a9:66:ce:58:d8:ec:e7:c3:
         ca:f5:fb:71:b8:ed:fb:3c:b9:64:72:66:a7:36:92:6b:df:d7:
         55:3a:01:69:ef:78:81:52:d2:37:5b:6a:ea:eb:95:8b:d1:a9:
         48:02:32:71:66:86:1a:35:ea:62:6f:1b:72:39:6f:fc:1a:ce:
         d0:e9:4c:6f:35:77:1f:16:31:6e:19:49:4c:dc:c7:e3:fe:e4:
         fd:22:86:66:30:be:37:d0:4a:46:cf:b7:b0:97:06:9a:b4:09:
         05:8d:2a:b9:fa:29:50:31:47:d0:74:ca:ea:87:10:77:67:8d:
         c2:b9:d0:dc:04:40:8f:5a:4e:1b:b4:63:68:07:b3:b5:41:ac:
         7b:6b:3c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:58:32 2026 by rpki-client