Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/xE0y1JF8eCux2zJK4FcIfAY8cLk.cer
File:                     xE0y1JF8eCux2zJK4FcIfAY8cLk.cer (raw, json)
Hash identifier:          az76odO5pEYwm2JdXNwwZIJ3YSrs/WILlA0o7alXhck=
Subject key identifier:   C4:4D:32:D4:91:7C:78:2B:B1:DB:32:4A:E0:57:08:7C:06:3C:70:B9
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4075
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/xE0y1JF8eCux2zJK4FcIfAY8cLk.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 09 Apr 2026 15:09:50 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 327746
                          IP: 102.216.204.0/22
                          IP: 154.73.100.0/22
                          IP: 2c0f:e800::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16501 (0x4075)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Apr  9 15:09:50 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36A94BDAF, serialNumber=C44D32D4917C782BB1DB324AE057087C063C70B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9a:bf:70:3b:6c:bf:3c:a9:74:70:a5:8e:1d:
                    03:75:09:f6:d9:3a:a6:28:e4:46:b0:08:54:b2:2d:
                    ea:f7:4b:f4:d6:b4:cb:67:c4:83:cf:c2:08:54:c1:
                    94:de:03:01:c7:d4:e8:0e:b7:98:ac:15:9d:f7:6e:
                    95:1a:67:2d:91:a9:45:02:c6:c3:2d:86:ac:27:13:
                    98:ad:cb:2d:b2:a5:09:50:e1:2d:02:d9:95:d3:c0:
                    80:ec:09:09:81:08:02:ba:72:fe:6b:d6:a4:f1:fc:
                    04:68:f6:c2:9a:b8:7e:5c:12:21:39:cf:f3:d2:84:
                    a7:09:db:c6:38:68:49:57:3c:f8:d9:94:83:1d:1f:
                    b7:7d:64:62:48:94:80:55:1c:d9:01:e2:90:0d:a5:
                    c3:d6:5e:f7:6a:07:33:d5:4c:ad:81:0f:b7:1b:82:
                    85:b6:a4:6d:86:5f:49:12:45:c1:45:e1:75:c3:46:
                    e5:46:cb:0e:7f:eb:3a:6d:58:36:5d:40:f7:de:2a:
                    c4:f8:7b:95:5e:79:de:48:6b:4a:d7:59:91:e8:97:
                    1e:e7:3a:d8:b1:1d:53:77:79:44:45:91:1c:39:e6:
                    e6:77:b6:8d:14:c1:77:af:f1:fe:e6:3c:f5:20:a2:
                    ca:1b:08:9d:53:77:be:9c:8a:cb:89:cb:e5:ef:3f:
                    b5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4D:32:D4:91:7C:78:2B:B1:DB:32:4A:E0:57:08:7C:06:3C:70:B9
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/xE0y1JF8eCux2zJK4FcIfAY8cLk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327746

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.204.0/22
                  154.73.100.0/22
                IPv6:
                  2c0f:e800::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:dc:59:0f:05:56:1c:ba:93:f9:3d:dd:7e:c9:9f:60:c4:1c:
         17:46:97:5d:1c:07:cc:34:8a:e7:f5:cf:da:92:28:af:b9:ed:
         75:1e:b3:ac:af:d3:46:40:e7:83:aa:c9:a6:e0:e6:17:5c:62:
         31:25:24:e6:b2:3b:fd:f3:48:45:b9:b4:c6:3a:a6:67:01:b7:
         5a:3c:30:9c:f4:7d:c0:af:a9:76:75:c2:e4:ec:69:e4:15:7c:
         4a:64:1b:a3:a7:c7:72:02:12:c2:5d:fa:25:25:2e:65:6a:a8:
         a9:d5:ef:24:aa:f9:33:78:f6:e0:a8:c8:76:41:88:40:ac:42:
         8e:58:4a:e5:d7:b1:d4:e0:3d:51:02:92:86:e1:7a:74:b4:5f:
         91:45:7e:81:94:62:01:2a:e7:d7:1c:6e:d8:29:6d:36:0d:4a:
         8b:e9:42:f6:19:46:70:08:6d:88:a6:1f:0c:11:f7:2a:8c:86:
         a9:27:64:e3:a9:2d:9c:ae:39:87:ed:32:5b:a3:e3:67:a5:05:
         1b:b3:1d:13:31:2e:26:4f:f3:01:a1:60:30:f4:47:c0:d2:e1:
         6f:4e:18:12:a9:fc:6b:bc:f9:1b:20:f8:20:33:e1:11:38:47:
         6b:57:d2:cd:39:65:60:d7:c2:de:98:b3:b7:0d:97:3a:be:e8:
         f2:30:16:f8
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgICQHUwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjA0MDkxNTA5NTBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkE5NEJEQUYxMTAvBgNVBAUTKEM0NEQzMkQ0OTE3Qzc4MkJCMURCMzI0
QUUwNTcwODdDMDYzQzcwQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCumr9wO2y/PKl0cKWOHQN1CfbZOqYo5EawCFSyLer3S/TWtMtnxIPPwghUwZTe
AwHH1OgOt5isFZ33bpUaZy2RqUUCxsMthqwnE5ityy2ypQlQ4S0C2ZXTwIDsCQmB
CAK6cv5r1qTx/ARo9sKauH5cEiE5z/PShKcJ28Y4aElXPPjZlIMdH7d9ZGJIlIBV
HNkB4pANpcPWXvdqBzPVTK2BD7cbgoW2pG2GX0kSRcFF4XXDRuVGyw5/6zptWDZd
QPfeKsT4e5Veed5Ia0rXWZHolx7nOtixHVN3eURFkRw55uZ3to0UwXev8f7mPPUg
osobCJ1Td76cisuJy+XvP7WHAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUxE0y1JF8
eCux2zJK4FcIfAY8cLkwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBOTRCRC8yMzQwRUZCRTM0MjYx
MUYxQUQyMUU2MDZDRjFEMzhCMC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QTk0QkQvMjM0MEVGQkUzNDI2MTFGMUFEMjFFNjA2Q0YxRDM4QjAveEUweTFK
RjhlQ3V4MnpKSzRGY0lmQVk4Y0xrLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFAEIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJm2MwDBAKaSWQwDQQC
AAIwBwMFACwP6AAwDQYJKoZIhvcNAQELBQADggEBAFfcWQ8FVhy6k/k93X7Jn2DE
HBdGl10cB8w0iuf1z9qSKK+57XUes6yv00ZA54Oqyabg5hdcYjElJOayO/3zSEW5
tMY6pmcBt1o8MJz0fcCvqXZ1wuTsaeQVfEpkG6Onx3ICEsJd+iUlLmVqqKnV7ySq
+TN49uCoyHZBiECsQo5YSuXXsdTgPVECkobhenS0X5FFfoGUYgEq59ccbtgpbTYN
SovpQvYZRnAIbYimHwwR9yqMhqknZOOpLZyuOYftMluj42elBRuzHRMxLiZP8wGh
YDD0R8DS4W9OGBKp/Gu8+Rsg+CAz4RE4R2tX0s05ZWDXwt6Ys7cNlzq+6PIwFvg=
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:07 2026 by rpki-client