Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Peh56gnhe4ORxyjbem-nsnOQS3o.cer
File: Peh56gnhe4ORxyjbem-nsnOQS3o.cer (raw, json)
Hash identifier: H2S/ZEcAeHhe/sMqmUTOBMCMwgt/TZqi4oAevnv2cGg=
Subject key identifier: 3D:E8:79:EA:09:E1:7B:83:91:C7:28:DB:7A:6F:A7:B2:73:90:4B:7A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 40D7
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 12 May 2026 00:06:37 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 328720
IP: 102.202.124.0/22
IP: 102.222.108.0/22
IP: 2c0f:7400::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 May 2026 12:11:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16599 (0x40d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: May 12 00:06:37 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36E6D28AF, serialNumber=3DE879EA09E17B8391C728DB7A6FA7B273904B7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:aa:87:c4:e8:46:34:4f:2f:86:d8:ae:75:b4:
3a:b3:ce:71:83:00:d8:1e:c4:c1:3f:9b:e7:d8:c2:
fa:eb:88:7c:01:5a:6e:cf:28:6a:f8:29:0d:3a:66:
7a:15:38:eb:2b:ea:38:14:2b:b3:2a:a1:0c:6a:eb:
0f:e4:9a:47:5e:91:7b:39:83:28:65:1d:53:5f:ae:
52:04:85:6a:b4:0c:90:b8:fc:b2:d8:e7:da:fc:f2:
13:4f:3b:8d:72:1e:7f:0d:ce:80:a5:4b:0a:4a:fe:
89:05:80:03:11:7d:36:a8:03:9b:20:76:89:b1:f7:
3b:b4:17:33:aa:7e:cf:15:3f:6c:ab:f8:6d:18:9b:
da:0d:26:3e:2d:55:ce:93:0e:f0:37:d6:6c:c0:81:
f4:fa:f4:9a:42:f1:d5:a0:ed:ba:4b:af:f9:34:ea:
e6:a5:80:08:12:05:8a:82:9c:76:f3:6d:bd:2f:fb:
f9:82:87:c4:a7:1f:c6:36:30:9d:02:41:f4:da:8a:
bc:33:40:77:db:48:5e:fc:9d:3b:9a:82:ea:60:03:
17:7a:99:c9:f7:5c:54:10:1a:ea:52:ed:10:88:99:
cc:c6:0a:ef:f5:28:cb:98:f3:e3:75:0a:c5:6a:d2:
f5:c5:19:26:19:11:3f:32:93:87:ac:b6:cb:b5:a4:
ae:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E8:79:EA:09:E1:7B:83:91:C7:28:DB:7A:6F:A7:B2:73:90:4B:7A
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328720
sbgp-ipAddrBlock: critical
IPv4:
102.202.124.0/22
102.222.108.0/22
IPv6:
2c0f:7400::/32
Signature Algorithm: sha256WithRSAEncryption
71:9b:29:ac:6e:fb:7e:d8:96:32:44:e0:6b:ed:98:5e:90:a5:
ce:46:21:b3:99:bc:de:95:3b:e0:e4:44:88:94:2f:29:6e:3f:
12:c0:02:06:61:8c:8e:4b:4c:c9:1e:96:c4:cd:8d:15:5f:f8:
ac:ba:d4:07:5b:8d:77:5d:04:01:8b:e1:bc:97:8d:65:8f:cc:
d8:25:39:9c:85:e1:e0:f6:a0:0f:be:78:06:b3:3a:a5:e9:86:
57:37:78:8f:40:fd:cb:b7:38:e6:24:72:ec:c3:01:5b:d2:d3:
e8:22:68:47:b6:12:49:b7:98:a6:49:a8:87:0c:f7:7f:fc:4c:
86:13:59:55:3f:45:e3:bf:ea:66:b1:ee:c1:83:ea:d7:ea:67:
d1:45:bf:f8:54:a2:89:38:69:3d:7c:b9:6c:64:9d:9c:90:7b:
56:9b:46:aa:06:c0:47:26:f8:89:1d:58:3d:73:f9:9c:62:9b:
bf:4f:fe:d3:ff:ec:e8:16:28:dd:98:90:6d:f6:7d:91:1a:88:
40:44:a0:52:52:90:a6:85:35:91:14:02:2e:c3:d0:5f:77:9b:
bc:30:6a:22:64:c9:04:d0:b3:ba:fd:8f:9e:c0:ec:00:d7:40:
f4:34:e0:f1:97:9a:56:75:73:41:94:6f:e2:56:22:22:a4:0c:
7b:27:71:03
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgICQNcwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjA1MTIwMDA2MzdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkU2RDI4QUYxMTAvBgNVBAUTKDNERTg3OUVBMDlFMTdCODM5MUM3MjhE
QjdBNkZBN0IyNzM5MDRCN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCfqofE6EY0Ty+G2K51tDqzznGDANgexME/m+fYwvrriHwBWm7PKGr4KQ06ZnoV
OOsr6jgUK7MqoQxq6w/kmkdekXs5gyhlHVNfrlIEhWq0DJC4/LLY59r88hNPO41y
Hn8NzoClSwpK/okFgAMRfTaoA5sgdomx9zu0FzOqfs8VP2yr+G0Ym9oNJj4tVc6T
DvA31mzAgfT69JpC8dWg7bpLr/k06ualgAgSBYqCnHbzbb0v+/mCh8SnH8Y2MJ0C
QfTairwzQHfbSF78nTuagupgAxd6mcn3XFQQGupS7RCImczGCu/1KMuY8+N1CsVq
0vXFGSYZET8yk4estsu1pK5pAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUPeh56gnh
e4ORxyjbem+nsnOQS3owHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZFNkQyOC8wMTkyQTdGMkVBMUQx
MUVCQjhCNjlBMEJEOEEwMTRDRS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RTZEMjgvMDE5MkE3RjJFQTFEMTFFQkI4QjY5QTBCRDhBMDE0Q0UvUGVoNTZn
bmhlNE9SeHlqYmVtLW5zbk9RUzNvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBBAwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJmynwDBAJm3mwwDQQC
AAIwBwMFACwPdAAwDQYJKoZIhvcNAQELBQADggEBAHGbKaxu+37YljJE4GvtmF6Q
pc5GIbOZvN6VO+DkRIiULyluPxLAAgZhjI5LTMkelsTNjRVf+Ky61AdbjXddBAGL
4byXjWWPzNglOZyF4eD2oA++eAazOqXphlc3eI9A/cu3OOYkcuzDAVvS0+giaEe2
Ekm3mKZJqIcM93/8TIYTWVU/ReO/6max7sGD6tfqZ9FFv/hUook4aT18uWxknZyQ
e1abRqoGwEcm+IkdWD1z+Zxim79P/tP/7OgWKN2YkG32fZEaiEBEoFJSkKaFNZEU
Ai7D0F93m7wwaiJkyQTQs7r9j57A7ADXQPQ04PGXmlZ1c0GUb+JWIiKkDHsncQM=
-----END CERTIFICATE-----
Generated at Tue May 12 22:24:26 2026 by rpki-client