
Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/9rZiLcWmAFKfv9HBwPfJi_yJClA.cer
File: 9rZiLcWmAFKfv9HBwPfJi_yJClA.cer (raw, json)
Hash identifier: HmN1C0qCYyvDLCAt634kckUe6xwIiPDrEjf+wedJLSY=
Subject key identifier: F6:B6:62:2D:C5:A6:00:52:9F:BF:D1:C1:C0:F7:C9:8B:FC:89:0A:50
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 4194
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 21 Jul 2026 00:03:36 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 328704
IP: 102.214.176.0/22
IP: 102.222.255.0/24
IP: 2c0f:50a0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16788 (0x4194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jul 21 00:03:36 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F366BE85AF, serialNumber=F6B6622DC5A600529FBFD1C1C0F7C98BFC890A50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:d4:67:61:21:21:da:39:a8:1a:98:8d:2d:2d:
46:43:6e:3f:2b:76:a2:a9:2a:16:f5:51:6b:50:66:
48:5b:35:e8:fa:23:18:98:0c:cf:52:33:1d:42:1c:
19:4b:b0:41:9a:9d:d9:82:ab:7c:00:d4:58:6c:d5:
24:b3:ec:93:fa:02:6c:3e:a5:91:11:8e:f9:c4:d1:
0c:70:d6:ef:ca:34:96:f6:e0:47:00:cd:ed:b6:d2:
c0:8b:17:42:a7:18:89:e3:94:95:cc:92:54:e9:ac:
68:92:49:00:ff:c9:f1:58:50:b8:7b:73:cc:89:e8:
ef:4c:33:d1:1e:96:9e:ab:28:3e:55:ab:fb:26:ca:
bb:11:d6:fd:a6:99:80:11:d9:a7:ba:99:41:3e:b5:
3b:47:16:f4:49:c9:96:49:31:d2:7c:a8:d4:1d:a3:
59:df:a2:8f:94:df:9d:67:bb:bc:39:29:45:e7:c7:
82:7a:fe:77:07:c6:9c:60:8d:84:6c:af:57:c1:65:
8a:6e:e7:d7:af:5d:d8:4f:96:69:33:23:87:a9:71:
5b:2f:c4:72:c4:ea:55:8a:26:e1:ab:ea:b7:68:be:
3d:e1:c5:9a:8b:96:7d:ba:4e:ef:68:44:4f:9a:ea:
b9:4d:52:68:a5:e2:b4:aa:ea:40:95:f7:b0:88:ef:
2f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B6:62:2D:C5:A6:00:52:9F:BF:D1:C1:C0:F7:C9:8B:FC:89:0A:50
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328704
sbgp-ipAddrBlock: critical
IPv4:
102.214.176.0/22
102.222.255.0/24
IPv6:
2c0f:50a0::/32
Signature Algorithm: sha256WithRSAEncryption
50:55:00:e6:61:10:22:b7:2e:e3:3c:44:db:47:d6:4d:91:68:
f9:12:22:91:c0:5b:55:dc:5b:27:b5:56:d6:b1:98:66:21:96:
1c:97:07:1b:73:4f:fb:85:7e:58:52:aa:5d:d6:d8:e1:99:65:
49:00:4e:d1:b0:ce:23:7a:48:19:61:be:c5:bd:35:aa:a1:a3:
ef:eb:f9:ed:53:93:84:f9:cf:b1:5e:33:77:8e:44:d6:8b:0e:
af:71:04:f2:78:d5:81:90:47:e4:2e:16:3a:dd:5b:98:d7:36:
8d:6c:57:9c:96:ba:0e:df:e2:1c:a6:cb:b6:0a:69:5f:7e:9b:
af:57:4f:35:b5:66:9f:68:fd:6b:54:77:9a:50:21:6b:48:3f:
f3:b4:b1:cc:43:e3:04:f6:ce:98:fd:ca:ce:43:44:4a:20:d7:
6b:83:aa:bb:31:10:c7:a2:62:aa:54:fc:c5:41:14:99:d1:2e:
db:e4:80:c3:27:6b:61:5a:6f:1d:0b:09:a4:ac:12:dd:68:ee:
2b:4f:d8:b5:9e:bd:94:8e:2f:3d:67:a9:51:f0:70:35:82:8d:
79:fb:69:af:07:95:28:a5:49:a7:2e:42:5f:03:01:63:f7:a6:
d7:7b:01:a1:8c:ec:34:0b:5d:10:42:07:ee:f8:37:41:32:cf:
57:b1:91:16
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:23:49 2026 by rpki-client