This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.cer
File: AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.cer (raw, json)
Hash identifier: Bcw2+b8zzD65r1MhP8v3bDIerZg/iWsQfsMLs0k0RMU=
Subject key identifier: 01:9C:57:AF:35:3A:A8:DD:D6:AE:5D:19:B5:51:EE:04:5E:F0:E4:69
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3AD1
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:24:26 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 328920
IP: 102.219.68.0/22
IP: 2c0f:3100::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15057 (0x3ad1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 02:24:26 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F367278DAF, serialNumber=019C57AF353AA8DDD6AE5D19B551EE045EF0E469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:84:5e:3a:11:64:78:e8:01:1e:fe:e2:88:
61:33:8b:ab:17:09:cb:dd:0a:c8:d3:4a:c3:86:86:
fc:a5:17:57:d3:30:9a:7f:75:8e:9b:8b:c3:a8:19:
9e:e0:39:4e:fa:a8:b5:c5:5f:76:c4:8f:54:fb:4b:
f7:e4:b3:8f:1f:c9:ae:55:5a:8e:14:bd:81:a1:3d:
88:26:83:08:cc:99:28:23:bc:c1:bf:7d:64:99:28:
b2:e1:ba:d3:8d:2d:bb:c0:86:f7:91:d4:b2:07:5b:
26:0f:3a:52:8e:ed:d6:65:44:38:a2:a3:2d:d0:ef:
92:d8:94:f5:a8:a0:8d:ed:08:34:52:ab:2d:1f:0d:
6e:15:7d:7d:66:dd:46:da:c2:25:9c:34:69:29:ad:
dd:34:51:aa:b0:00:db:22:a8:9d:b1:31:9b:af:95:
57:09:43:32:28:de:00:b9:3b:10:05:fc:5c:6a:49:
e0:b5:1f:cb:80:f5:f2:df:94:32:6f:d4:a3:fd:74:
95:b7:c9:bd:93:8d:ee:4e:62:82:0f:14:d9:95:e9:
00:40:ca:03:ec:09:7e:a0:46:29:6e:84:03:2d:77:
98:08:f8:e2:5a:fd:2a:a5:24:eb:04:3a:d4:62:6e:
e4:29:16:7e:34:fb:09:16:7f:61:f0:33:72:2d:67:
5b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9C:57:AF:35:3A:A8:DD:D6:AE:5D:19:B5:51:EE:04:5E:F0:E4:69
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328920
sbgp-ipAddrBlock: critical
IPv4:
102.219.68.0/22
IPv6:
2c0f:3100::/32
Signature Algorithm: sha256WithRSAEncryption
77:aa:0f:c0:0f:0d:f5:7c:66:43:7d:92:d6:dc:35:63:d8:e7:
44:55:7b:38:f1:ab:d1:79:81:fc:c6:27:e8:b1:e1:2d:a9:5f:
6a:7d:08:1e:db:9e:a0:2a:4d:54:e0:2c:b6:89:9b:ed:f0:e1:
b7:aa:73:21:c5:c2:ce:57:2e:d9:55:e3:05:3d:68:e6:bd:e7:
2a:0f:82:a3:77:a9:4f:58:1f:76:66:1f:d8:39:22:24:fc:3e:
3a:76:7a:56:19:e0:d8:22:b3:51:dd:4c:dd:ab:8e:fe:43:04:
08:9e:06:2c:86:03:28:3d:12:80:43:c7:97:bb:be:eb:cc:41:
ec:b6:41:bb:3b:4b:3f:c1:7b:03:62:79:34:fb:2a:75:ed:8e:
f3:3d:84:1f:58:cc:a1:35:fb:dd:c8:54:d5:6b:8e:a0:97:6d:
40:dd:a5:4d:4c:40:63:04:ec:ab:8d:b7:3a:6a:2b:7d:90:00:
db:c3:68:fa:47:7e:c0:a7:d7:0e:5d:07:dd:2b:58:25:45:9d:
95:4f:82:09:24:f1:3f:fa:10:59:0f:4d:f0:fe:cd:87:2e:17:
6b:3d:ba:f3:95:6d:6b:df:b2:fd:b6:34:5f:1f:43:98:55:57:
d7:62:d4:60:c4:85:25:c0:b2:83:8a:43:a4:63:ea:30:b9:d6:
60:d7:c9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:49:34 2026 by rpki-client