Certificate
$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/LitWHDC8rUcYNIAaVFhqXCg2Nl0.cer
File: LitWHDC8rUcYNIAaVFhqXCg2Nl0.cer (raw, json)
Hash identifier: 11Yv9wm2iUtBs42HZMalPssYtZgOpih9XvJQFqMHbZY=
Subject key identifier: 2E:2B:56:1C:30:BC:AD:47:18:34:80:1A:54:58:6A:5C:28:36:36:5D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 432A
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
CRL Distribution Point: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3699F17/04188C86D93B11F196F6EC19CF1D38B0/LitWHDC8rUcYNIAaVFhqXCg2Nl0.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3699F17/04188C86D93B11F196F6EC19CF1D38B0/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 05 Nov 2026 17:05:00 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 329829
IP: 102.200.236.0/24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Nov 2026 00:08:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17194 (0x432a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Nov 5 17:05:00 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F3699F17AF, serialNumber=2E2B561C30BCAD471834801A54586A5C2836365D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:c2:e4:47:35:7f:c5:d8:7a:bb:73:6c:a9:
27:52:8a:37:79:6a:00:09:f0:ca:b2:fe:51:50:e1:
2a:29:8f:d9:ee:ce:de:c7:d1:8a:51:91:59:eb:37:
e7:c6:1d:ea:a7:02:27:df:77:ea:2f:3e:94:17:ff:
ed:5b:d5:33:29:ce:8b:ae:b5:8e:23:87:80:1e:42:
b7:a7:d2:38:e3:30:4e:2d:6c:25:87:a3:ae:d7:a6:
5e:62:f4:a1:80:c7:37:87:6d:f4:ff:11:74:c0:fd:
a9:6f:65:42:ec:b7:4d:dd:b4:b5:a2:9d:5d:62:d1:
cb:8e:cc:df:f9:29:80:a7:7a:32:b7:8e:3b:16:04:
8a:14:8e:8f:dd:ef:68:05:b2:99:5a:dc:d6:97:d5:
26:1e:7b:fe:96:14:6b:70:7d:d7:eb:92:e4:51:d0:
3b:ac:bd:a6:fc:39:6c:97:f2:0c:c9:05:eb:9d:80:
da:f1:33:04:6f:44:f6:29:e0:35:40:ca:62:f5:ec:
55:16:85:2d:22:80:4d:17:74:54:1d:94:1d:e3:c1:
9b:f9:7f:41:4e:88:af:4b:d2:74:75:da:3e:61:5e:
95:cd:43:28:d9:a2:a7:6d:8f:6a:de:43:9d:26:de:
49:d3:e0:f6:86:20:30:39:b3:1d:27:d8:23:2d:12:
ec:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2B:56:1C:30:BC:AD:47:18:34:80:1A:54:58:6A:5C:28:36:36:5D
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699F17/04188C86D93B11F196F6EC19CF1D38B0/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699F17/04188C86D93B11F196F6EC19CF1D38B0/LitWHDC8rUcYNIAaVFhqXCg2Nl0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329829
sbgp-ipAddrBlock: critical
IPv4:
102.200.236.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:6a:d9:39:f3:6c:7c:09:a0:49:e1:e2:64:1f:07:e9:1f:04:
04:3b:8c:1a:7a:4a:61:21:84:dd:75:0f:fe:c2:2a:0b:3e:eb:
d5:e5:dd:73:30:50:d0:06:60:60:56:5a:b9:b0:ad:68:14:2f:
70:46:e8:8b:c6:a9:05:53:ff:d0:63:b8:30:93:aa:73:20:52:
c0:f0:8a:9e:22:53:d9:67:f2:b6:2f:0c:7c:b2:27:96:77:b4:
08:dd:43:3b:81:42:47:5d:a9:37:e9:7f:12:39:20:8f:c4:e9:
af:4f:aa:92:41:f3:a7:bc:3a:c1:64:39:e7:fb:9b:f1:e1:4d:
ea:45:97:16:71:29:ef:79:74:66:ef:49:6a:84:09:67:51:72:
fd:8b:4d:12:4a:47:f4:f6:4a:72:a9:6b:95:e4:e9:08:a1:e8:
89:e6:70:52:de:5c:ba:4e:9e:69:ee:e9:25:f9:61:a2:04:ea:
df:f9:81:2c:eb:e9:fc:3d:ec:82:d9:14:d0:dd:f9:39:71:cd:
13:88:56:b5:ac:43:28:0d:bf:1c:04:fd:d1:5e:33:19:af:8c:
2b:6e:02:6f:ca:93:bf:67:67:65:9a:c4:cc:02:a5:10:53:13:
92:e3:18:79:93:bc:c3:da:cb:74:44:0a:42:92:3c:eb:6a:cf:
c5:85:91:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:00:12 2026 by rpki-client