Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Cuxoo6mCi7CDSumnpdfndEWI1LI.cer
File:                     Cuxoo6mCi7CDSumnpdfndEWI1LI.cer (raw, json)
Hash identifier:          L0BfHF/JQ5hrw08I+mtIQgNiaQD4grAjv94sKVtjh4U=
Subject key identifier:   0A:EC:68:A3:A9:82:8B:B0:83:4A:E9:A7:A5:D7:E7:74:45:88:D4:B2
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       3675
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364F714/2E9B8574A38311F08B607579DAE4EC9C/Cuxoo6mCi7CDSumnpdfndEWI1LI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364F714/2E9B8574A38311F08B607579DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 07 Oct 2025 13:40:34 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 329614
                          IP: 102.204.253.0/24
                          IP: 2c0f:72c0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13941 (0x3675)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Oct  7 13:40:34 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F364F714AF, serialNumber=0AEC68A3A9828BB0834AE9A7A5D7E7744588D4B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:36:85:2f:84:17:01:db:70:ac:92:c6:12:
                    4e:97:af:17:c8:af:5c:92:1f:9f:bf:55:d3:1e:6f:
                    29:ad:5c:e9:cc:cf:51:72:04:84:e3:03:6c:5f:be:
                    f8:ef:1f:07:32:03:c9:c8:be:2a:a3:79:4c:cc:f3:
                    59:7f:76:ea:ba:74:9d:97:c4:d1:0f:47:b0:10:69:
                    e4:59:d0:74:bf:09:47:45:00:46:b1:0f:02:f0:33:
                    0e:40:40:eb:c6:33:c7:86:94:4f:c2:07:c1:89:66:
                    ed:c5:2c:56:74:51:43:b6:84:a3:b9:86:9d:21:b8:
                    d9:38:d1:93:32:f0:96:73:8c:37:d6:25:2b:a8:77:
                    ca:5c:64:47:20:fb:4d:8b:50:17:59:d8:99:c1:e9:
                    34:0b:2e:60:7d:15:42:cb:09:5c:08:f9:b3:50:5b:
                    2a:82:37:e1:47:c0:98:19:d1:c8:c2:34:a6:fb:55:
                    77:58:9b:62:c5:55:fb:88:0b:1b:a0:e1:70:03:f6:
                    7c:0b:fc:aa:e2:ea:52:49:1c:ca:b5:f5:ee:c6:75:
                    45:55:b2:10:51:2b:82:71:af:0b:a9:bd:c0:8e:77:
                    68:c8:9a:56:94:9e:a9:f9:b1:39:bd:53:c3:16:2e:
                    92:d7:28:5c:ac:fa:2f:86:00:a2:d7:44:02:6c:a7:
                    5a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EC:68:A3:A9:82:8B:B0:83:4A:E9:A7:A5:D7:E7:74:45:88:D4:B2
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364F714/2E9B8574A38311F08B607579DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364F714/2E9B8574A38311F08B607579DAE4EC9C/Cuxoo6mCi7CDSumnpdfndEWI1LI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329614

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.204.253.0/24
                IPv6:
                  2c0f:72c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:73:1d:fa:5e:e3:6d:29:a1:a7:41:a1:4e:4e:e6:64:cb:3b:
         4d:e4:29:a0:65:37:2e:96:04:44:06:3f:f4:cd:3b:3d:e6:5c:
         90:ec:69:5a:54:24:a9:70:1c:ba:35:51:8a:ef:c8:a6:fe:14:
         8b:36:9e:08:74:9e:69:50:49:8a:a1:6d:f3:fd:2d:48:00:e4:
         f6:a1:56:f1:30:74:57:d4:11:78:52:00:cb:53:cc:e6:b4:3c:
         3e:4c:a8:3e:92:7d:bd:52:a4:64:0e:9d:76:51:97:07:8f:53:
         8a:08:13:4e:6a:82:25:b1:1e:77:4c:91:ab:de:ad:5d:d0:bf:
         e0:13:7a:b9:ba:7e:34:c0:1a:9f:db:05:a9:a0:46:fa:f4:94:
         c9:73:91:1b:bb:88:bd:f2:45:0b:ce:43:ee:be:06:d5:f3:c1:
         c8:ac:28:a9:b4:30:5d:5c:0a:7f:ff:24:83:c0:4a:f1:74:6f:
         6f:49:7e:0b:b0:9b:f1:fa:6d:3b:54:7a:ab:74:09:bc:28:d0:
         0a:6d:3a:4f:a1:85:a3:af:01:74:5d:b7:72:ad:e3:d7:f1:1e:
         a2:52:f4:8a:d4:5d:2b:0a:74:88:a5:28:d6:37:1a:26:ea:75:
         56:1a:b8:a2:25:3b:4d:01:67:35:31:c1:bb:b9:dc:f9:14:bf:
         d6:bf:40:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:20:37 2025 by rpki-client