Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/heLrQoy_jUsx-aZGYrwHtsPuQRE.cer
File: heLrQoy_jUsx-aZGYrwHtsPuQRE.cer (raw, json)
Hash identifier: ujLxF5R61fDqA3RHBEoQxoZMCPWjitoCuJzMUBEROGg=
Subject key identifier: 85:E2:EB:42:8C:BF:8D:4B:31:F9:A6:46:62:BC:07:B6:C3:EE:41:11
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3FD8
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 09 Feb 2026 08:42:26 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 329676
IP: 102.203.212.0/23
IP: 2001:43fd:800::/48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16344 (0x3fd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Feb 9 08:42:26 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36A75D2AF, serialNumber=85E2EB428CBF8D4B31F9A64662BC07B6C3EE4111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:b2:77:a5:81:2b:0f:ff:93:dc:d8:cb:48:
cb:d2:df:6d:53:6d:28:54:38:3a:74:f1:46:74:9c:
ff:c9:8e:12:63:9a:54:1e:98:41:f1:2a:e4:1f:6f:
91:20:80:0e:ca:f1:d2:fc:bb:87:64:b2:99:4a:92:
9a:83:c4:2b:e9:b5:e3:89:fe:47:a0:6e:19:98:70:
78:38:be:19:25:97:d2:86:f1:07:fe:b2:ed:22:c7:
1b:a2:dd:c2:16:69:26:c8:27:d1:e8:21:ee:b4:62:
73:48:1d:80:71:14:fa:5c:12:15:a3:10:e3:6c:0c:
12:11:be:c4:03:c7:f4:f1:5f:7a:a1:57:1b:03:36:
f2:81:1e:28:d8:fa:71:18:c2:a3:a1:a6:8c:1d:ea:
ef:d2:03:a0:63:c8:20:96:17:3a:e4:6d:cf:6f:72:
9d:4e:cb:4d:c6:c8:91:11:fe:01:bf:7d:01:de:8b:
62:64:69:6f:7d:93:23:bd:af:40:50:26:19:ee:7f:
b3:13:b1:b1:47:1b:1b:e4:f1:f8:7d:f9:4c:c9:22:
ef:20:44:43:b8:64:83:e2:e2:ac:5f:21:e5:c2:9e:
6f:3e:0c:ce:46:21:34:fd:f3:a9:fc:32:dc:85:46:
f0:24:31:ab:9f:e7:b7:64:09:76:b4:b2:1a:8b:3a:
c6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E2:EB:42:8C:BF:8D:4B:31:F9:A6:46:62:BC:07:B6:C3:EE:41:11
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A75D2/3CFEC410059311F19F65F3D6DAE4EC9C/heLrQoy_jUsx-aZGYrwHtsPuQRE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329676
sbgp-ipAddrBlock: critical
IPv4:
102.203.212.0/23
IPv6:
2001:43fd:800::/48
Signature Algorithm: sha256WithRSAEncryption
7e:fe:74:df:be:f3:35:d5:c3:3f:70:27:c7:bf:b1:9f:52:b0:
a3:1e:1c:82:33:df:09:fe:d0:3d:a5:62:ad:fe:81:b0:ad:dc:
54:c3:74:77:26:ad:3e:4f:e6:b9:46:76:54:6f:50:4d:78:4b:
a3:2d:ab:b5:4f:8e:15:65:97:21:00:57:7c:f8:35:a4:25:7c:
56:ee:b9:f3:bb:a2:bb:a4:9c:5d:d5:aa:5d:2c:33:34:53:48:
97:bc:4f:04:13:97:79:48:40:06:a4:99:ef:03:03:e3:f0:b7:
0d:ec:20:4f:2d:b3:77:dc:f8:37:29:39:39:03:ca:4d:ae:0e:
54:b2:23:70:1a:3e:da:b2:d2:fd:40:46:8e:a5:7c:3f:4c:a1:
cb:8b:e4:00:3f:0e:2b:3b:79:43:d3:84:06:36:08:6e:4c:5c:
7f:89:41:db:9c:b7:e0:47:50:b4:cf:ef:41:f2:42:c4:a3:7b:
77:e0:59:16:f5:a5:2c:71:ff:d1:65:b0:fb:63:65:91:17:42:
97:82:e5:8d:1b:ac:d8:ae:92:95:30:81:7b:82:19:57:51:96:
80:47:a8:d5:53:ce:da:c7:c1:db:6b:1d:d9:ec:2b:fa:f2:17:
58:a4:15:4b:2a:11:36:d6:ca:88:4b:2b:8c:26:96:e7:80:a7:
d1:6f:3c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:38:35 2026 by rpki-client