Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/NfEnWyh-nA-Oo6hLizVKsCS3aXI.cer
File:                     NfEnWyh-nA-Oo6hLizVKsCS3aXI.cer (raw, json)
Hash identifier:          1/LlApXxmYP/xBJo58rxH9iJKAWGFL5jJef0S7FU11Q=
Subject key identifier:   35:F1:27:5B:28:7E:9C:0F:8E:A3:A8:4B:8B:35:4A:B0:24:B7:69:72
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4049
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 24 Mar 2026 18:38:48 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329707
                          IP: 102.203.44.0/22
                          IP: 2c0f:720::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16457 (0x4049)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Mar 24 18:38:48 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36C67A4AF, serialNumber=35F1275B287E9C0F8EA3A84B8B354AB024B76972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:40:dc:05:e2:fc:ce:26:e0:4a:b9:76:29:61:
                    9a:69:88:48:d6:68:fe:ed:01:33:5e:21:ab:2a:f2:
                    ea:97:91:51:aa:86:a2:df:c3:a4:89:de:a9:3e:66:
                    92:a4:16:ee:2c:22:4b:35:46:dd:21:70:ad:af:b0:
                    86:6d:57:8e:8e:3c:2b:f6:d8:2c:fe:5a:b1:34:4a:
                    f1:87:24:5c:b3:18:65:90:0f:28:4e:7e:b8:e9:02:
                    47:d6:14:16:e5:26:ad:5b:1c:21:89:1f:a3:6c:a3:
                    19:16:4c:3a:bf:a6:ee:09:2d:e5:61:66:50:2e:e6:
                    6c:8e:b8:ad:be:b3:6f:d2:aa:c1:2d:23:13:28:2e:
                    12:95:53:2b:c5:06:a9:13:7e:16:9a:de:9e:f7:d5:
                    2e:ae:63:ec:28:a1:0a:59:a1:31:20:12:20:c9:ae:
                    03:fd:ee:3d:42:7c:c6:dc:2f:1b:a9:a0:91:67:1c:
                    23:71:09:bc:e7:d5:13:6d:d5:20:38:c6:dd:81:30:
                    77:e6:e0:fd:48:11:3e:9d:39:89:29:41:72:ce:b2:
                    dc:18:67:a6:01:04:02:1c:c8:8a:01:a7:25:78:e9:
                    9c:8b:28:04:bd:6a:d8:1b:51:43:38:bb:de:15:60:
                    ea:6f:ee:c0:2f:db:51:dd:df:8d:2b:af:a4:1f:4f:
                    7c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F1:27:5B:28:7E:9C:0F:8E:A3:A8:4B:8B:35:4A:B0:24:B7:69:72
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329707

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.44.0/22
                IPv6:
                  2c0f:720::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:6c:db:41:b8:07:e3:c2:29:b4:a2:4a:0e:23:9b:d6:fc:80:
         27:5f:ec:81:c1:55:6c:3b:bc:4b:b6:90:4b:89:51:12:97:e9:
         1c:51:97:ec:cb:fd:d7:9b:ac:fb:c6:de:57:be:f5:53:0b:f9:
         8b:a8:8f:7b:4a:5d:d1:d6:c5:36:25:15:f8:05:06:9f:85:2a:
         c0:8f:0f:b8:b2:fe:e5:3c:f2:04:62:e9:4d:8a:d1:64:01:b1:
         e5:ae:84:7d:46:61:24:a0:9e:d4:e3:f0:d8:0d:74:1a:8c:5e:
         e8:dd:2e:ec:cd:77:ba:1c:55:5a:8f:8e:36:e2:82:d7:da:d1:
         08:1a:cf:9c:d0:bd:9a:cf:71:88:69:4d:50:7a:af:51:cc:12:
         91:4e:2e:e2:dc:cc:d2:53:91:e6:ee:f0:18:a9:bc:e9:32:66:
         f7:3b:92:56:9e:93:17:27:7f:84:1f:39:76:a1:4c:23:e5:7a:
         3f:f9:0d:6b:aa:06:5e:b0:69:cb:e7:e4:6b:e2:dc:49:65:c2:
         dc:a4:5c:46:fb:8e:fe:38:e7:2c:38:5c:21:70:fa:6e:9e:1f:
         7e:af:6d:23:c8:24:6e:af:11:31:c2:2e:f0:34:0e:36:2d:ce:
         04:de:11:a1:af:a8:d5:ba:74:56:ad:da:97:aa:92:66:1d:93:
         ac:c9:65:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:19:39 2026 by rpki-client