Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/nDG_Ybi28H3SmbmF5zKd-qo84qc.cer
File: nDG_Ybi28H3SmbmF5zKd-qo84qc.cer (raw, json)
Hash identifier: MhdOwcOG/ajx7MG8puEw+8b54ea2uzOPGmKDj9KYU84=
Subject key identifier: 9C:31:BF:61:B8:B6:F0:7D:D2:99:B9:85:E7:32:9D:FA:AA:3C:E2:A7
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3FDC
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 11 Feb 2026 19:01:34 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 329702
IP: 102.203.84.0/23
IP: 2c0f:620::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16348 (0x3fdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Feb 11 19:01:34 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36E3D54AF, serialNumber=9C31BF61B8B6F07DD299B985E7329DFAAA3CE2A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b8:65:9c:22:22:60:6d:5b:88:4e:cc:27:03:
c5:4d:d4:e0:a5:d9:0a:83:1b:44:92:71:39:11:ff:
92:aa:62:49:66:69:7d:47:47:ba:c0:d3:6f:d6:d3:
82:e3:78:2d:2d:0f:66:db:b5:0f:10:5f:f8:5a:7b:
73:67:65:e2:75:f4:4c:94:4b:00:f1:d4:4c:0e:72:
37:6d:a0:9b:3f:aa:ee:d8:d6:6b:6e:2b:e2:fd:f3:
e5:d6:82:42:fd:71:cb:c4:fe:dd:f2:6d:a2:92:33:
ed:f5:db:1f:a5:76:7a:e7:22:15:0e:78:e5:bf:81:
cf:f4:fc:55:7c:70:e7:89:bf:bc:46:cc:1d:98:b5:
40:c7:1e:1e:76:13:39:10:20:dc:e2:3d:cd:29:26:
ac:02:f5:80:6d:b4:22:db:a8:26:b8:3e:f0:15:74:
fd:dd:09:ec:bd:ae:ff:d3:d3:cb:30:8e:87:c6:9f:
54:95:03:9f:e6:a3:f6:57:f0:c7:a4:49:3f:e9:67:
76:b9:42:76:b1:04:86:39:62:7e:d9:90:2e:46:ab:
ac:52:04:57:db:a9:d2:7e:43:ec:44:e3:e4:ce:bb:
2f:be:e1:c9:24:27:34:3a:ed:77:1c:e6:21:be:7e:
00:89:c3:9c:98:76:a2:f6:93:cf:18:aa:0c:7a:af:
4e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:31:BF:61:B8:B6:F0:7D:D2:99:B9:85:E7:32:9D:FA:AA:3C:E2:A7
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329702
sbgp-ipAddrBlock: critical
IPv4:
102.203.84.0/23
IPv6:
2c0f:620::/32
Signature Algorithm: sha256WithRSAEncryption
46:1a:cc:c1:fb:c2:93:4b:e1:06:1e:df:0a:76:bf:e6:af:3b:
3d:dc:49:85:63:b1:35:7f:db:93:06:ac:18:ef:59:ee:3c:75:
9e:27:55:ac:ce:a7:f2:be:40:50:c9:cb:f8:a9:12:1c:4f:55:
73:1c:18:6e:1c:71:4b:6f:09:ef:d6:09:de:16:42:fc:36:20:
73:b9:a1:84:01:41:57:51:f7:94:a0:24:17:6a:1d:f2:90:9a:
0a:bb:c5:28:83:b2:0f:d4:04:15:56:62:46:7c:f8:4a:5d:86:
3c:e2:7c:cf:23:27:74:63:48:ca:b6:58:5d:20:85:1b:a0:05:
ed:06:d8:58:13:85:e1:e4:99:14:e9:16:14:a1:fc:98:9c:7b:
b0:c8:a0:4d:7e:91:55:8a:56:6a:5b:3c:03:1b:13:34:1c:bf:
e0:11:46:7a:14:43:ef:be:14:d5:1a:f9:8f:b8:f2:fc:0b:1f:
e5:65:bd:a5:1f:9d:c7:23:1a:c9:8c:bb:7d:3c:06:40:63:5c:
23:df:d1:33:52:c5:19:38:8a:d5:8a:b9:2d:7f:49:97:c1:e7:
79:28:b9:35:d5:e9:e5:56:7a:63:98:14:f4:61:24:da:f8:4c:
80:2f:66:82:03:e8:47:2f:36:9f:35:02:6d:14:66:05:00:3b:
48:fd:be:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:03:03 2026 by rpki-client