Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/q_pChsdioMCKr3ukYyEsmmY3wE4.cer
File:                     q_pChsdioMCKr3ukYyEsmmY3wE4.cer (raw, json)
Hash identifier:          WntTao0Rkc+TTjacpCLJ8XiMkQFhLSOACtKvrw249ms=
Subject key identifier:   AB:FA:42:86:C7:62:A0:C0:8A:AF:7B:A4:63:21:2C:9A:66:37:C0:4E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3538
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F368C55F/E7F7D708436F11F0A0CE9AD6DAE4EC9C/q_pChsdioMCKr3ukYyEsmmY3wE4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F368C55F/E7F7D708436F11F0A0CE9AD6DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Sat 07 Jun 2025 07:20:49 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 329468
                          IP: 102.208.82.0/24
                          IP: 2c0f:c0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13624 (0x3538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jun  7 07:20:49 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F368C55FAF, serialNumber=ABFA4286C762A0C08AAF7BA463212C9A6637C04E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:62:fe:f0:f9:fe:33:0c:1a:22:5c:20:09:01:
                    14:26:b3:7b:ea:66:fb:af:f8:d3:af:8a:60:51:42:
                    93:0f:6a:30:3c:46:47:a4:00:56:5e:b7:24:40:8b:
                    d9:0d:de:37:7c:af:17:63:dc:cc:13:10:1a:4e:58:
                    e9:3a:24:d6:ae:da:b0:8e:dd:d4:7d:ed:59:25:83:
                    16:3b:77:b1:9b:90:54:42:10:69:53:da:f6:4e:ac:
                    db:c6:24:1f:8a:ee:af:ea:22:ef:1b:3e:b5:5b:fc:
                    be:08:9c:7c:2f:90:71:71:55:b4:98:ac:3b:53:7f:
                    4f:8e:d2:00:35:03:e8:6b:c6:f3:4e:a5:59:f7:5a:
                    9a:7f:ad:29:2e:14:29:e5:29:e2:ff:b2:66:5e:c2:
                    c4:a8:ce:6a:c7:4a:95:3a:d8:f4:81:10:d5:b7:e2:
                    78:7e:1c:de:9d:cb:a6:81:c3:30:ab:75:0d:0f:d9:
                    74:ce:e4:3c:91:2d:1e:93:26:6c:15:5e:6f:b0:69:
                    8b:2c:a7:a7:27:02:d4:43:a6:57:8f:d1:88:80:af:
                    e9:d1:fc:f1:ff:e1:fe:a8:04:0e:3c:83:f8:af:e5:
                    d8:5f:23:1a:bc:e3:6c:ba:41:f8:9b:2c:6e:f0:88:
                    2e:cb:41:44:3e:97:c3:82:9e:e7:c7:28:5d:58:4a:
                    b8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FA:42:86:C7:62:A0:C0:8A:AF:7B:A4:63:21:2C:9A:66:37:C0:4E
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F368C55F/E7F7D708436F11F0A0CE9AD6DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F368C55F/E7F7D708436F11F0A0CE9AD6DAE4EC9C/q_pChsdioMCKr3ukYyEsmmY3wE4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329468

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.208.82.0/24
                IPv6:
                  2c0f:c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:46:e9:f7:07:87:c2:24:7f:d2:f9:91:42:7a:e2:1e:64:82:
         20:f0:84:35:51:6a:5d:38:9f:43:fd:23:39:37:0d:60:79:17:
         d7:2b:a3:14:ea:fb:51:fc:3a:8f:ae:e5:2d:1b:10:cc:47:a3:
         5f:4f:50:70:bd:04:36:0a:92:04:e0:15:eb:54:26:aa:00:83:
         52:a7:99:06:da:a2:8e:1f:6d:3f:e4:7b:c7:4a:5c:70:3d:c5:
         ba:a2:46:8c:1e:44:27:06:5c:cb:94:e2:ac:5e:9b:a7:26:c8:
         ba:ed:f3:60:76:cb:61:96:7a:34:69:99:ac:62:bb:b5:18:af:
         f5:40:92:70:c0:c6:25:30:aa:d5:db:94:9b:15:4f:a2:18:78:
         29:52:f5:60:78:15:6c:98:6f:3d:98:bf:dd:c5:46:df:b0:db:
         54:ca:2e:4b:e1:f2:84:59:67:5f:7f:05:b9:ab:8d:a0:3a:21:
         1f:39:fb:ce:8c:04:a5:73:f1:ca:fc:47:f7:49:3b:93:e6:c1:
         81:12:77:11:90:63:3f:c8:33:66:c0:df:35:a5:a5:91:5a:8e:
         af:c7:35:88:43:fc:a2:bb:24:3d:88:82:60:71:fd:10:d7:de:
         40:15:0c:04:66:d0:96:01:f2:20:92:1f:74:4b:6d:88:3b:89:
         84:f8:c5:b2
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICNTgwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTA2MDcwNzIwNDlaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjhDNTVGQUYxMTAvBgNVBAUTKEFCRkE0Mjg2Qzc2MkEwQzA4QUFGN0JB
NDYzMjEyQzlBNjYzN0MwNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNYv7w+f4zDBoiXCAJARQms3vqZvuv+NOvimBRQpMPajA8RkekAFZetyRAi9kN
3jd8rxdj3MwTEBpOWOk6JNau2rCO3dR97VklgxY7d7GbkFRCEGlT2vZOrNvGJB+K
7q/qIu8bPrVb/L4InHwvkHFxVbSYrDtTf0+O0gA1A+hrxvNOpVn3Wpp/rSkuFCnl
KeL/smZewsSozmrHSpU62PSBENW34nh+HN6dy6aBwzCrdQ0P2XTO5DyRLR6TJmwV
Xm+waYssp6cnAtRDpleP0YiAr+nR/PH/4f6oBA48g/iv5dhfIxq842y6QfibLG7w
iC7LQUQ+l8OCnufHKF1YSriZAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUq/pChsdi
oMCKr3ukYyEsmmY3wE4wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY4QzU1Ri9FN0Y3RDcwODQzNkYx
MUYwQTBDRTlBRDZEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OEM1NUYvRTdGN0Q3MDg0MzZGMTFGMEEwQ0U5QUQ2REFFNEVDOUMvcV9wQ2hz
ZGlvTUNLcjN1a1l5RXNtbVkzd0U0Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBvwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBABm0FIwDQQCAAIwBwMF
ACwPAMAwDQYJKoZIhvcNAQELBQADggEBAMJG6fcHh8Ikf9L5kUJ64h5kgiDwhDVR
al04n0P9Izk3DWB5F9croxTq+1H8Oo+u5S0bEMxHo19PUHC9BDYKkgTgFetUJqoA
g1KnmQbaoo4fbT/ke8dKXHA9xbqiRoweRCcGXMuU4qxem6cmyLrt82B2y2GWejRp
maxiu7UYr/VAknDAxiUwqtXblJsVT6IYeClS9WB4FWyYbz2Yv93FRt+w21TKLkvh
8oRZZ19/BbmrjaA6IR85+86MBKVz8cr8R/dJO5PmwYESdxGQYz/IM2bA3zWlpZFa
jq/HNYhD/KK7JD2IgmBx/RDX3kAVDARm0JYB8iCSH3RLbYg7iYT4xbI=
-----END CERTIFICATE-----
Generated at Mon Jun 16 08:24:09 2025 by rpki-client