Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/PlgMUwpAQ9QcCXH5Ia3eBA9lCog.cer
File:                     PlgMUwpAQ9QcCXH5Ia3eBA9lCog.cer (raw, json)
Hash identifier:          ZNBwg2EWrGkfMxHNF08u6LwlW6cliVwNKHibbte9rpY=
Subject key identifier:   3E:58:0C:53:0A:40:43:D4:1C:09:71:F9:21:AD:DE:04:0F:65:0A:88
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4047
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FC79D/64C01760275811F1AD5D3BB6DAE4EC9C/PlgMUwpAQ9QcCXH5Ia3eBA9lCog.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FC79D/64C01760275811F1AD5D3BB6DAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 24 Mar 2026 08:06:51 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 328952
                          IP: 102.218.8.0/23
                          IP: 2c0f:4d40::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16455 (0x4047)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Mar 24 08:06:51 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36FC79DAF, serialNumber=3E580C530A4043D41C0971F921ADDE040F650A88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c0:24:ed:f9:64:94:51:59:16:86:f5:86:b3:
                    41:d1:dd:a3:9a:1d:20:69:d9:c3:0e:c8:26:e0:a9:
                    05:fb:13:11:58:b4:bc:78:86:d1:39:21:25:cf:9b:
                    b7:ab:57:f7:52:be:09:7a:1e:1c:d7:b9:03:b1:e5:
                    7d:6b:6b:64:18:da:6f:72:bb:ff:7b:3c:ed:23:fb:
                    d0:33:96:8f:09:36:8f:01:fc:52:fe:c3:36:8c:36:
                    eb:8a:66:b5:3f:41:81:3e:30:b2:e3:1c:6f:de:07:
                    3a:48:34:b5:09:8a:70:e8:2e:11:05:65:6c:ca:aa:
                    d3:d3:26:09:51:19:fd:77:db:5b:8b:68:93:51:2e:
                    d1:3f:02:ff:34:bf:82:e0:92:dd:5e:19:39:e8:a3:
                    d1:cf:46:11:77:f8:e7:0d:7e:f3:a1:38:ac:89:a6:
                    b7:75:2e:83:5c:05:d8:b1:30:55:82:e6:ec:a3:df:
                    15:40:46:b0:f3:67:58:75:45:b1:f9:ce:40:0d:9e:
                    2f:2f:58:cc:af:63:4b:00:1b:2f:82:5e:97:54:95:
                    28:39:1a:e9:85:96:87:9f:e9:9e:26:12:4d:da:a4:
                    f5:98:51:c3:d0:af:10:09:ee:47:e1:65:f1:c2:f5:
                    73:a0:e5:51:70:61:df:29:e2:57:dd:a4:8a:f1:20:
                    e4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:58:0C:53:0A:40:43:D4:1C:09:71:F9:21:AD:DE:04:0F:65:0A:88
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC79D/64C01760275811F1AD5D3BB6DAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC79D/64C01760275811F1AD5D3BB6DAE4EC9C/PlgMUwpAQ9QcCXH5Ia3eBA9lCog.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328952

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.8.0/23
                IPv6:
                  2c0f:4d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:93:80:bf:ae:90:f4:31:ce:ed:b0:70:a5:a4:cb:c5:72:f3:
         90:ab:86:62:bc:c7:09:a0:75:14:e0:65:06:c3:86:8f:9d:84:
         32:9e:0c:94:ca:51:36:d0:e7:ec:4e:c7:7f:0b:db:e8:db:0e:
         cb:6d:91:7b:f3:f3:d3:5d:bd:12:68:f5:fd:6c:06:f9:01:7a:
         25:81:77:b2:b1:a8:12:60:50:3e:54:b9:c3:8a:21:6f:c1:f5:
         47:d9:cb:d8:58:1f:21:2f:e9:97:15:eb:0f:d6:48:e3:0e:9c:
         20:6e:5f:46:ef:d8:55:81:b8:a1:d8:15:7c:33:eb:30:a7:e9:
         f4:10:5d:c0:30:28:7b:82:f4:0e:53:21:42:95:4b:6b:76:80:
         89:10:69:ba:f7:59:72:7f:08:c2:58:94:c3:39:4a:37:3f:c4:
         75:e9:4b:7a:54:12:f8:f1:17:97:68:c5:03:02:06:39:88:af:
         5a:d6:50:8b:ad:47:df:02:78:20:78:76:b3:54:aa:f0:07:60:
         9d:41:3a:f9:13:b9:4b:62:1d:45:b8:74:e9:a8:8a:a6:fc:5c:
         9e:6f:30:83:31:f4:90:2f:f0:ac:f5:13:70:5d:3b:1f:7c:ed:
         b3:4f:39:32:e2:ad:9d:35:e1:d6:12:be:19:78:d2:bd:d3:db:
         04:83:25:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:19:51 2026 by rpki-client