This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/P4zuwyrakEaTvUAO9yxqKMfih0g.cer
File: P4zuwyrakEaTvUAO9yxqKMfih0g.cer (raw, json)
Hash identifier: KiyhkJ+eTuHvpK1+LsSNK2BP6sWwMunPLvwMHYWuMrs=
Subject key identifier: 3F:8C:EE:C3:2A:DA:90:46:93:BD:40:0E:F7:2C:6A:28:C7:E2:87:48
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3EFC
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/P4zuwyrakEaTvUAO9yxqKMfih0g.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 05:07:56 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 329104
IP: 102.215.8.0/22
IP: 2c0f:580::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16124 (0x3efc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 05:07:56 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36F550DAF, serialNumber=3F8CEEC32ADA904693BD400EF72C6A28C7E28748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:d6:4c:45:19:db:bc:70:d9:e9:38:65:a0:
7f:a4:f4:6d:50:aa:91:2d:4f:32:63:ff:66:6a:b3:
b2:da:28:c5:b6:c4:22:74:b2:f8:40:e7:9b:9b:be:
c0:29:0f:f6:29:f3:51:5d:0a:7e:0a:2f:1e:88:35:
c2:a8:48:a0:63:8e:72:ca:a1:89:cf:87:80:70:70:
02:7b:14:f6:10:10:95:f8:35:22:81:26:ee:21:27:
37:bb:96:e4:68:c7:f9:a4:e8:87:dc:5c:5e:86:9e:
81:49:5f:17:b0:32:7c:7e:ca:7a:45:fa:e0:2d:ba:
a2:d5:74:ff:57:1a:4d:31:66:66:4e:c9:05:d0:d4:
b7:b4:b3:c0:9e:d6:7b:ec:f7:23:42:b8:3e:af:39:
d6:18:0b:5b:e0:5d:a5:42:1a:1f:67:23:25:fd:74:
d7:ba:9f:bc:18:16:bd:5a:bb:ca:6e:7f:d2:07:61:
6d:96:af:82:a8:47:61:fe:5e:5d:18:46:f1:f8:0b:
df:62:69:4e:48:92:ef:ab:04:73:b1:dc:36:69:c4:
cf:04:4a:2a:b4:ef:c6:39:f2:7c:17:cb:00:d4:ba:
bb:db:be:ec:63:10:3c:39:62:89:66:1c:45:f5:0b:
ba:c7:62:8d:f3:a2:0f:95:79:56:16:a4:52:1e:38:
e0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8C:EE:C3:2A:DA:90:46:93:BD:40:0E:F7:2C:6A:28:C7:E2:87:48
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/P4zuwyrakEaTvUAO9yxqKMfih0g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329104
sbgp-ipAddrBlock: critical
IPv4:
102.215.8.0/22
IPv6:
2c0f:580::/32
Signature Algorithm: sha256WithRSAEncryption
14:cf:31:3f:18:80:37:24:1e:15:45:63:8a:9b:cc:5b:ed:67:
39:22:6b:34:7c:a7:b4:1a:3d:92:8c:c2:3d:82:37:3d:0b:c2:
2a:d9:d6:4d:a6:11:ae:da:df:4e:fa:eb:86:65:4d:8f:09:0c:
e8:50:5f:d4:0c:f6:9a:0a:be:4e:0d:08:65:69:d3:78:b3:9f:
12:bc:47:69:69:37:0d:1d:46:70:d7:f7:29:9a:17:c9:0f:73:
85:a5:75:48:63:26:7b:d4:2c:b3:77:25:bb:39:a3:53:55:d0:
fa:e9:c9:a4:4e:c9:7f:17:1e:f0:de:47:b3:a0:d4:c1:35:8b:
1c:6b:ee:80:4a:cf:6d:d9:56:33:01:ff:27:18:3a:c7:02:fb:
e2:97:45:5c:46:73:9e:04:75:c0:7e:be:f6:e8:08:a4:90:8c:
9c:cd:f0:5c:ab:df:26:b3:96:4e:47:8d:17:be:b7:66:bf:48:
34:81:a4:df:b6:89:08:6b:9d:ee:e7:54:f3:17:de:31:7a:1f:
fd:1c:7c:60:8f:e4:d5:c3:04:e4:a7:a0:e1:af:92:e6:f8:59:
a4:82:49:30:70:86:fd:04:1e:fd:0c:9b:ce:fb:7c:0e:48:06:
06:15:7e:b4:ee:65:9c:13:9a:fc:27:7e:d9:3c:3d:60:c7:33:
3d:48:ec:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:51:13 2026 by rpki-client