This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/_lkJnrBGBmU3CfmlmpxGdQcb7L0.cer File: _lkJnrBGBmU3CfmlmpxGdQcb7L0.cer (raw, json) Hash identifier: fdnHOwblqTLuoB01idPojR9Gcx6+eshg8myMngeCcRg= Subject key identifier: FE:59:09:9E:B0:46:06:65:37:09:F9:A5:9A:9C:46:75:07:1B:EC:BD Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Certificate serial: 3C9B Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/ Notify URL: https://rrdp.afrinic.net/notification.xml Certificate not before: Thu 01 Jan 2026 03:30:29 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 328538 IP: 102.36.152.0/22 IP: 2c0f:6380::/32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15515 (0x3c9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80 Validity Not Before: Jan 1 03:30:29 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=F36A141DAF, serialNumber=FE59099EB04606653709F9A59A9C4675071BECBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:de:e6:d0:60:7b:6b:29:4e:00:7f:ef:94:48: c7:67:63:a7:dc:77:3c:e5:1c:34:0b:6f:0d:aa:80: 1d:a4:07:08:e6:d0:c4:5f:6b:a9:ba:b0:aa:39:d9: c7:a8:4a:85:b9:63:5f:b8:36:a0:d5:78:ce:54:8b: 3b:56:e6:42:1d:89:e5:18:a7:c7:9d:af:92:36:76: 08:9a:62:33:ee:de:fd:06:04:12:63:85:75:97:9b: c2:c1:6b:ae:40:77:0c:68:43:9f:cc:60:37:07:28: d9:29:6c:a9:65:1c:94:e4:b0:7f:f5:51:e1:0e:33: 63:dc:ce:0c:83:72:61:86:e4:fc:73:f3:ea:9c:19: 8c:90:0d:44:1a:df:be:51:a7:17:f3:cf:e1:c9:fa: 6e:f7:6d:a1:e0:de:95:65:f9:ee:a3:ea:81:10:86: 73:39:3d:7a:5d:ed:db:9b:29:17:e7:63:be:92:e7: b8:43:c0:18:94:ac:f4:73:ce:d3:87:91:71:92:90: 08:8c:ef:be:a7:00:d5:7a:f0:48:55:eb:c8:82:dd: 54:5f:bf:1f:06:8e:e9:a5:c5:73:2b:3f:02:2c:7a: 20:2f:31:44:ad:43:46:cb:48:4c:19:0b:5f:f0:fb: ca:46:b8:dd:eb:d1:f2:67:cf:76:25:bc:cc:a9:f4: cb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:59:09:9E:B0:46:06:65:37:09:F9:A5:9A:9C:46:75:07:1B:EC:BD X509v3 Authority Key Identifier: keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/ RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: 328538 sbgp-ipAddrBlock: critical IPv4: 102.36.152.0/22 IPv6: 2c0f:6380::/32 Signature Algorithm: sha256WithRSAEncryption 5b:f5:eb:46:fe:0c:ed:a5:0d:cc:cb:39:be:3a:1f:aa:93:9d: a5:16:6f:a6:92:69:d6:60:fb:68:04:ac:a7:39:11:13:53:73: be:93:5d:cc:c6:fd:d7:2d:eb:89:8c:37:cf:59:e5:1b:48:c8: 8d:41:7c:6d:29:6f:4e:5d:b3:cd:83:38:ba:52:c3:6f:21:9e: 0d:09:76:ff:f4:0d:c9:5a:d2:6b:2c:a1:f5:07:7d:0a:7c:73: ee:d2:7c:28:fc:7c:df:5b:28:12:fd:b2:36:f8:6b:b3:1b:88: f5:ee:4f:d3:b1:48:a6:09:99:9c:26:dd:38:ee:80:ec:f0:3e: 07:4f:4d:36:5e:53:26:78:dd:b6:4b:1d:90:68:e6:41:e7:7c: 1b:98:8b:ba:10:bf:d4:0f:4c:c0:be:11:6d:8e:20:fe:27:c0: 00:e3:ce:1f:dd:97:49:2f:6b:88:95:49:3c:a2:96:ff:ce:c5: fc:c1:ec:1f:55:56:a6:fe:b4:0d:26:30:09:f9:ed:c8:f7:c9: 2d:90:04:c3:97:7e:41:cc:e8:37:ed:0e:e4:70:d2:62:af:96: 79:4d:9a:a8:a2:a9:09:55:ef:96:dc:91:ae:c1:a4:9b:c7:d2: 07:62:45:7f:b1:3b:bb:e2:de:be:75:8b:46:d3:c3:51:4c:6f: f1:57:93:48 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgICPJswDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz NEE5OEY4MDAeFw0yNjAxMDEwMzMwMjlaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV BAMTCkYzNkExNDFEQUYxMTAvBgNVBAUTKEZFNTkwOTlFQjA0NjA2NjUzNzA5RjlB NTlBOUM0Njc1MDcxQkVDQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL3ubQYHtrKU4Af++USMdnY6fcdzzlHDQLbw2qgB2kBwjm0MRfa6m6sKo52ceo SoW5Y1+4NqDVeM5UiztW5kIdieUYp8edr5I2dgiaYjPu3v0GBBJjhXWXm8LBa65A dwxoQ5/MYDcHKNkpbKllHJTksH/1UeEOM2PczgyDcmGG5Pxz8+qcGYyQDUQa375R pxfzz+HJ+m73baHg3pVl+e6j6oEQhnM5PXpd7dubKRfnY76S57hDwBiUrPRzztOH kXGSkAiM776nANV68EhV68iC3VRfvx8GjumlxXMrPwIseiAvMUStQ0bLSEwZC1/w +8pGuN3r0fJnz3YlvMyp9MsbAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQU/lkJnrBG BmU3CfmlmpxGdQcb7L0wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBMTQxRC9GNTQ4OEVGNDQwQzcx MUVFQjU5QTRENTM0QUQ5RTZGQy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2QTE0MUQvRjU0ODhFRjQ0MEM3MTFFRUI1OUE0RDUzNEFEOUU2RkMvX2xrSm5y QkdCbVUzQ2ZtbG1weEdkUWNiN0wwLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMFA1owLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmJJgwDQQCAAIwBwMF ACwPY4AwDQYJKoZIhvcNAQELBQADggEBAFv160b+DO2lDczLOb46H6qTnaUWb6aS adZg+2gErKc5ERNTc76TXczG/dct64mMN89Z5RtIyI1BfG0pb05ds82DOLpSw28h ng0Jdv/0Dcla0mssofUHfQp8c+7SfCj8fN9bKBL9sjb4a7MbiPXuT9OxSKYJmZwm 3TjugOzwPgdPTTZeUyZ43bZLHZBo5kHnfBuYi7oQv9QPTMC+EW2OIP4nwADjzh/d l0kva4iVSTyilv/OxfzB7B9VVqb+tA0mMAn57cj3yS2QBMOXfkHM6DftDuRw0mKv lnlNmqiiqQlV75bcka7BpJvH0gdiRX+xO7vi3r51i0bTw1FMb/FXk0g= -----END CERTIFICATE-----Generated at Sun Jan 25 05:58:56 2026 by rpki-client