Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.cer
File:                     UK4Utn4Kmv8ooC9FbH4vOj1s0oI.cer (raw, json)
Hash identifier:          tya5s92sR27CI80ClUILJIPOqsQddI1PYTZ+KrKvfBI=
Subject key identifier:   50:AE:14:B6:7E:0A:9A:FF:28:A0:2F:45:6C:7E:2F:3A:3D:6C:D2:82
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       35D0
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 06 Aug 2025 12:46:27 +0000
Certificate not after:    Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources:    AS: 329597
                          IP: 102.205.28.0/22
                          IP: 2c0f:6ec0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13776 (0x35d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Aug  6 12:46:27 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=F364EFD6AF, serialNumber=50AE14B67E0A9AFF28A02F456C7E2F3A3D6CD282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f5:c3:11:27:75:fa:7a:ea:43:d5:7b:d6:db:
                    12:a3:16:0f:91:ba:d7:31:cd:74:94:3e:04:12:ab:
                    7e:f5:9d:16:c9:c2:d8:c4:91:1f:c1:8e:cb:fb:87:
                    23:bb:42:68:bb:62:eb:90:17:eb:52:aa:79:37:e6:
                    8b:73:2b:55:2c:02:e6:b6:47:94:ba:4f:86:68:e1:
                    b5:e4:a8:c4:09:0b:23:de:23:30:0c:20:1e:5b:d6:
                    d2:f8:89:cd:91:89:a6:da:4f:7f:b4:63:5e:c2:67:
                    fc:fe:18:12:bc:45:f0:bd:94:4d:0f:d5:83:4f:78:
                    ca:5e:fe:40:4a:ac:15:d8:43:a3:8e:e7:95:3d:a1:
                    39:da:e5:ea:f9:f3:c0:0f:e5:8b:4f:a3:21:74:5f:
                    d8:73:13:4b:60:7e:d6:f1:94:19:ce:5a:20:6d:9a:
                    3d:5d:56:9d:b2:62:1e:a2:80:ae:ce:d8:ea:16:1b:
                    34:c4:5e:2a:0f:a3:4c:35:32:50:46:1b:47:47:24:
                    de:95:35:77:7d:83:88:a8:72:cd:af:29:eb:3a:30:
                    52:fb:7c:c5:8b:65:8e:87:0a:26:55:14:ac:fd:ae:
                    6c:fa:14:c1:a7:0c:00:19:89:eb:97:bb:7c:3b:57:
                    78:ba:4b:f7:88:7a:74:b0:6a:91:54:8f:7a:2d:98:
                    1b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AE:14:B6:7E:0A:9A:FF:28:A0:2F:45:6C:7E:2F:3A:3D:6C:D2:82
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329597

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.205.28.0/22
                IPv6:
                  2c0f:6ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:ea:aa:49:64:1a:e6:9c:4d:07:35:55:80:17:3a:d2:8c:df:
         0a:3a:7b:43:e2:5c:73:1d:a6:c3:07:bc:5a:17:e5:e2:34:28:
         52:e4:c5:e9:eb:c4:69:c2:a4:ac:79:95:13:de:92:24:d7:16:
         59:36:92:5b:09:bf:b0:5f:a0:ea:cb:3e:d1:89:7f:0e:a1:9c:
         ac:01:c8:c2:be:8b:b1:bd:4f:60:87:fa:01:09:b8:11:eb:7a:
         98:af:ce:a2:d7:46:30:12:7d:41:02:1d:71:8b:67:70:8d:e7:
         d7:7b:a9:2e:15:8a:15:f8:bb:c5:be:56:e0:e0:8b:ab:59:db:
         d6:3e:b8:05:91:20:fc:88:d0:77:36:71:89:4d:5b:b8:02:5f:
         6b:ad:a0:17:5b:dd:e3:38:1d:81:e6:9a:29:6a:88:cd:b2:82:
         ef:be:2d:b7:1b:45:5e:fe:0c:de:d2:39:26:ef:9f:27:bc:01:
         c3:86:2c:c5:f5:25:6a:13:78:5b:b1:b0:50:eb:12:9d:81:60:
         ee:45:30:61:d0:4b:97:12:f9:1e:81:9b:bb:64:db:29:be:c3:
         f3:2d:92:02:1e:91:f7:ef:54:fe:c3:96:9a:ed:84:50:11:7a:
         d8:cb:5b:f3:c2:ec:be:a6:bd:43:1c:74:7a:29:ae:59:90:be:
         46:32:73:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:18:21 2025 by rpki-client