Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Cc973KOmkZDCJAUZkQFoaVT0_ek.cer
File:                     Cc973KOmkZDCJAUZkQFoaVT0_ek.cer (raw, json)
Hash identifier:          PSR77WWR6OsJ9CxCFEmucxBZiKVkxqi8xhxQN9o1YYA=
Subject key identifier:   09:CF:7B:DC:A3:A6:91:90:C2:24:05:19:91:01:68:69:54:F4:FD:E9
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       365E
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F369E91F/43334A8A9D2011F09807D590DAE4EC9C/Cc973KOmkZDCJAUZkQFoaVT0_ek.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F369E91F/43334A8A9D2011F09807D590DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 29 Sep 2025 10:37:22 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 329418
                          IP: 102.209.153.0/24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13918 (0x365e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Sep 29 10:37:22 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F369E91FAF, serialNumber=09CF7BDCA3A69190C22405199101686954F4FDE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1e:fb:f1:0c:b8:53:7a:fd:ca:eb:45:e8:69:
                    3c:dd:6f:b5:3b:05:8b:3f:ae:0a:de:84:27:81:5c:
                    a8:46:1c:74:31:6d:b0:fc:ee:a2:ed:c4:a5:67:be:
                    16:dc:1c:f2:be:e6:d8:e2:49:f7:d1:5b:2b:d4:23:
                    78:db:92:f0:1a:c3:ed:2b:0e:05:cb:3c:06:3b:8d:
                    13:88:ae:eb:c8:54:b9:04:6e:51:f5:e0:4d:2f:9b:
                    73:04:e8:ac:ec:0d:0f:4d:34:4b:25:64:16:52:bf:
                    50:19:71:49:e9:71:fe:15:ce:a3:54:c8:c4:4c:19:
                    95:92:e1:ab:bf:67:b1:26:17:e2:31:3f:eb:f4:92:
                    ad:73:69:f2:e8:a9:05:11:bb:df:29:27:52:c4:9f:
                    fc:64:2b:ac:48:95:6f:e7:e0:ed:d1:06:3f:b9:c7:
                    4d:18:0f:f4:a2:9b:f9:10:64:25:95:95:ab:5a:a7:
                    27:30:06:c4:9a:6a:43:57:31:b0:f0:65:7d:9f:d5:
                    cf:f0:c5:7e:94:79:e6:97:fc:7f:ed:5f:e7:eb:46:
                    00:2e:8b:14:8f:c0:4e:85:ec:47:c4:32:be:28:17:
                    14:ca:10:62:e2:d1:07:37:43:c6:9e:b8:5a:5a:3d:
                    7c:ac:8b:cc:07:a2:ad:5d:b0:1f:80:4b:12:bd:cd:
                    ee:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CF:7B:DC:A3:A6:91:90:C2:24:05:19:91:01:68:69:54:F4:FD:E9
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E91F/43334A8A9D2011F09807D590DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E91F/43334A8A9D2011F09807D590DAE4EC9C/Cc973KOmkZDCJAUZkQFoaVT0_ek.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329418

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.209.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:ac:39:af:bc:04:e9:d5:ec:48:b3:9b:3f:99:1e:79:69:c0:
         7d:27:f3:11:a7:9b:4b:58:16:29:c6:96:66:08:fa:8f:ab:d8:
         0f:13:5d:ab:65:02:51:a8:43:c8:9f:16:00:ba:bd:c5:1a:37:
         fa:9a:16:43:3b:1b:14:19:81:7e:50:6b:ea:8e:42:7b:36:d9:
         46:61:9f:4a:a3:62:fc:5f:b7:6e:8e:6c:e1:f2:aa:db:b1:2a:
         f3:1c:91:95:8f:65:04:64:87:ca:14:78:31:a8:fe:07:b7:04:
         d7:d8:e5:e5:fd:a5:cb:cf:c7:9c:f7:af:74:ab:dc:72:d5:cf:
         30:00:ed:77:dd:48:ab:e0:0f:e6:55:10:90:fe:c7:dd:75:76:
         24:b7:93:6c:9e:f1:0b:f3:b2:b5:33:8b:8c:bc:a1:ac:27:cf:
         ab:e5:02:82:dd:16:a5:a3:1a:56:63:d8:59:fd:da:18:f4:32:
         27:eb:43:ea:30:e5:7c:83:6f:d0:57:dd:06:a0:e0:48:bc:b2:
         3d:95:43:4b:67:91:d7:8f:73:93:ec:c1:6f:cd:f0:88:03:d9:
         e6:23:22:68:9d:e5:65:fd:c4:28:fd:3f:2b:e2:99:2b:7c:30:
         e1:70:4e:f4:2d:a3:09:9a:da:9d:b4:f4:32:89:0f:3b:09:7f:
         f5:75:6a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:22 2025 by rpki-client