This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/FINhai-2NCU1g2xD_pc41PF-nxI.cer File: FINhai-2NCU1g2xD_pc41PF-nxI.cer (raw, json) Hash identifier: NkZGtYGnAhhKDQHELAy4uuzR9RANKn//LWXPw+x+9Qs= Subject key identifier: 14:83:61:6A:2F:B6:34:25:35:83:6C:43:FE:97:38:D4:F1:7E:9F:12 Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3AF7 Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:29:36 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 37340 AS: 329051 IP: 41.217.0.0/17 IP: 154.118.0.0/17 IP: 154.120.64.0/18 IP: 197.242.96.0/19 IP: 197.255.160.0/20 IP: 2c0f:f5a0::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15095 (0x3af7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 02:29:36 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36E0F10AF, serialNumber=1483616A2FB6342535836C43FE9738D4F17E9F12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:00:f3:1f:31:44:ea:3a:8d:ba:6a:bd:e1:d2: 19:66:74:36:ed:f2:42:18:3a:65:b3:e4:3f:3b:04: 0f:5a:04:c6:cd:71:c5:84:9c:01:5c:28:9d:6e:01: d3:4e:f4:c2:29:4c:e3:1b:4f:d6:d3:ed:8b:a8:5e: ce:8d:65:e5:68:6f:64:11:c5:cf:00:ee:5c:aa:4e: 8d:f6:f7:34:9b:49:92:2c:17:13:10:86:7b:52:d5: 03:9b:1b:68:8e:38:7c:b8:a8:5a:83:10:22:59:a5: 5c:93:fc:93:e2:28:0e:e1:0e:c7:57:c0:46:85:c1: 22:ce:53:9e:2d:8d:99:a2:2e:6a:3b:32:d4:b8:1f: cc:7d:6f:0f:73:46:b6:6e:82:e0:11:68:53:36:da: 77:a7:9d:6a:4d:c8:a7:64:01:bb:6f:1a:4f:41:ce: b9:c8:0c:0f:95:7a:97:f4:eb:6a:4c:4c:8d:00:04: 56:b8:33:c7:4b:92:e0:9b:f2:fe:24:e7:8c:aa:f3: 44:52:84:1d:5e:1b:35:aa:50:0d:53:ed:d1:75:6e: c3:6c:06:08:2b:27:d9:80:91:7c:8a:37:1c:7f:6f: ad:0a:e8:50:79:d8:b2:97:5d:70:5f:be:66:87:e8: a0:30:b6:d8:51:bb:56:97:84:f9:79:0a:e9:76:a5: 27:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:83:61:6A:2F:B6:34:25:35:83:6C:43:FE:97:38:D4:F1:7E:9F:12 X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 37340 329051 sbgp-ipAddrBlock: critical IPv4: 41.217.0.0/17 154.118.0.0/17 154.120.64.0/18 197.242.96.0/19 197.255.160.0/20 IPv6: 2c0f:f5a0::/32 Signature Algorithm: sha256WithRSAEncryption 02:81:f5:8e:60:6d:3d:20:e0:bb:18:fb:5f:e3:0f:49:71:c9: 1c:c3:3f:40:0c:bd:4a:f5:b9:23:27:76:44:9d:4c:ea:cd:79: 16:8a:d5:97:2d:4b:8a:78:96:08:3c:1b:b1:24:13:0c:eb:8c: bd:7f:38:a8:bd:da:33:fb:11:39:59:af:d5:14:cd:c1:b5:14: e9:97:65:05:9e:82:a1:08:59:d3:4b:13:e9:13:5b:4d:dc:14: 5d:a0:94:a9:d7:34:0f:be:93:f8:b8:8e:19:b7:9b:e9:5a:cb: 8f:0c:27:0b:8d:6a:72:c9:8f:a9:a6:66:95:2c:a0:ff:b3:c6: 7f:55:bc:53:ad:42:ae:35:a8:06:9c:cd:ef:a5:1f:de:c0:f3: f8:75:91:95:48:8f:32:4b:1e:5b:4a:7e:59:69:7a:c4:fa:8c: 4a:65:d4:21:c5:ce:a6:1a:32:2d:e3:1a:db:0f:8b:f2:46:41: 2c:54:79:d7:21:95:6b:5d:b8:6a:a6:19:8c:db:fb:be:a4:24: 46:3a:34:eb:01:81:ec:94:4d:bb:76:ce:95:ee:4a:8c:72:0b: dd:07:45:c2:87:0c:91:c7:ba:ce:8c:b2:22:3e:2d:ba:65:e0: 46:00:9d:fd:f6:f7:be:00:21:26:9c:de:7c:7d:70:ea:df:7a: 1e:90:55:21 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgICOvcwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMjI5MzZaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkUwRjEwQUYxMTAvBgNVBAUTKDE0ODM2MTZBMkZCNjM0MjUzNTgzNkM0 M0ZFOTczOEQ0RjE3RTlGMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9APMfMUTqOo26ar3h0hlmdDbt8kIYOmWz5D87BA9aBMbNccWEnAFcKJ1uAdNO 9MIpTOMbT9bT7YuoXs6NZeVob2QRxc8A7lyqTo329zSbSZIsFxMQhntS1QObG2iO OHy4qFqDECJZpVyT/JPiKA7hDsdXwEaFwSLOU54tjZmiLmo7MtS4H8x9bw9zRrZu guARaFM22nennWpNyKdkAbtvGk9BzrnIDA+Vepf062pMTI0ABFa4M8dLkuCb8v4k 54yq80RShB1eGzWqUA1T7dF1bsNsBggrJ9mAkXyKNxx/b60K6FB52LKXXXBfvmaH 6KAwtthRu1aXhPl5Cul2pSd3AgMBAAGjggM3MIIDMzAdBgNVHQ4EFgQUFINhai+2 NCU1g2xD/pc41PF+nxIwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFMEYxMC83NzAxQTBGQ0M0QkMx MUU5OTYzNjhCMTFGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RTBGMTAvNzcwMUEwRkNDNEJDMTFFOTk2MzY4QjExRjhBRUEyMjgvRklOaGFp LTJOQ1UxZzJ4RF9wYzQxUEYtbnhJLm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMAkdwCAwUFWzBGBggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEBynZAAMEB5p2 AAMEBpp4QAMEBcXyYAMEBMX/oDANBAIAAjAHAwUALA/1oDANBgkqhkiG9w0BAQsF AAOCAQEAAoH1jmBtPSDguxj7X+MPSXHJHMM/QAy9SvW5Iyd2RJ1M6s15ForVly1L iniWCDwbsSQTDOuMvX84qL3aM/sROVmv1RTNwbUU6ZdlBZ6CoQhZ00sT6RNbTdwU XaCUqdc0D76T+LiOGbeb6VrLjwwnC41qcsmPqaZmlSyg/7PGf1W8U61CrjWoBpzN 76Uf3sDz+HWRlUiPMkseW0p+WWl6xPqMSmXUIcXOphoyLeMa2w+L8kZBLFR51yGV a124aqYZjNv7vqQkRjo06wGB7JRNu3bOle5KjHIL3QdFwocMkce6zoyyIj4tumXg RgCd/fb3vgAhJpzefH1w6t96HpBVIQ== -----END CERTIFICATE-----Generated at Sun Jan 25 04:20:17 2026 by rpki-client