Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/fNqtCTuAO-_K3VZgg3NSIY-k2o0.cer
File:                     fNqtCTuAO-_K3VZgg3NSIY-k2o0.cer (raw, json)
Hash identifier:          HBvDBvn5aMnaY8c0vG7E6+ZijgeIFW3nJ33wW30J3eY=
Subject key identifier:   7C:DA:AD:09:3B:80:3B:EF:CA:DD:56:60:83:73:52:21:8F:A4:DA:8D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4345
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
CRL Distribution Point:   rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36599FB/3514D6B6DF4C11F1A51AFFC4CE1D38B0/fNqtCTuAO-_K3VZgg3NSIY-k2o0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36599FB/3514D6B6DF4C11F1A51AFFC4CE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 13 Nov 2026 10:23:10 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329655
                          IP: 102.204.44.0/24
                          IP: 2001:43fc:e800::/48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17221 (0x4345)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Nov 13 10:23:10 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36599FBAF, serialNumber=7CDAAD093B803BEFCADD5660837352218FA4DA8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9c:92:18:f4:ee:a2:c3:cd:11:35:6e:c1:c7:
                    31:dd:2b:00:0a:64:ca:2e:09:e3:ec:f3:a7:0d:6a:
                    7e:dc:c9:6e:d0:a9:fd:d6:28:fc:ea:48:ab:0a:06:
                    1e:58:43:d7:48:ef:d4:0c:32:71:dc:25:75:f5:02:
                    9a:9a:b5:0d:3a:6c:ac:12:f7:d1:c4:f8:64:1b:55:
                    16:bc:b3:ee:88:c7:2b:51:0c:96:72:ce:20:03:9a:
                    c0:ec:3b:4b:5f:9b:48:b8:50:ea:0e:39:e3:72:ec:
                    21:f1:f7:5c:36:a1:14:f6:b8:ef:c9:09:4f:15:f7:
                    d3:9f:9d:82:3c:86:b0:a7:62:b2:27:c6:5b:d4:17:
                    fb:b6:2c:31:de:2d:ae:80:76:ac:54:b3:d6:95:79:
                    bb:a1:cb:e2:6e:a2:b3:46:1b:ac:4b:65:43:0b:d5:
                    e1:52:8e:14:41:26:68:53:9c:00:24:0a:ab:b8:d4:
                    e6:99:25:47:91:db:22:83:70:23:55:cb:a8:af:41:
                    62:5c:10:c7:53:2f:4a:ab:ea:7d:a1:33:f3:a2:94:
                    6e:37:fb:d6:31:82:86:5f:66:aa:37:7b:96:48:12:
                    7f:2e:72:c7:5f:3b:8c:4f:7b:d6:ed:2c:94:af:82:
                    af:2a:39:f6:e5:3d:64:27:21:05:81:f6:0b:3c:03:
                    fc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DA:AD:09:3B:80:3B:EF:CA:DD:56:60:83:73:52:21:8F:A4:DA:8D
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36599FB/3514D6B6DF4C11F1A51AFFC4CE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36599FB/3514D6B6DF4C11F1A51AFFC4CE1D38B0/fNqtCTuAO-_K3VZgg3NSIY-k2o0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329655

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.204.44.0/24
                IPv6:
                  2001:43fc:e800::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:af:5c:10:8d:c8:b7:fd:a2:4d:b3:61:85:54:d0:46:f5:82:
         3a:01:3c:67:a1:2b:5e:55:22:61:ef:e6:79:d1:a7:0b:9f:40:
         c1:95:4e:5a:80:54:ba:c0:02:fd:45:23:dc:00:ce:68:e2:e6:
         73:66:6f:86:0f:0c:01:ff:9a:10:d5:7e:45:a8:77:83:31:2c:
         d8:14:f8:7e:a4:fa:2c:d0:21:ae:cb:1c:17:5d:6e:f1:f7:6e:
         7e:3b:e7:7e:e5:68:53:34:47:e3:2e:6c:2d:9f:af:85:35:56:
         3c:79:4e:0c:66:80:af:15:98:67:39:13:72:79:65:2e:f6:77:
         c0:ee:ee:70:48:8c:6a:04:4d:32:41:46:0a:b6:61:d6:a4:e7:
         41:41:88:e1:c0:32:33:2d:56:7f:9a:e3:d2:82:4c:bf:f4:ce:
         a9:37:27:5c:4e:6c:67:06:c8:f2:f4:81:a3:3c:56:50:49:db:
         96:3c:b7:69:22:3e:06:64:bf:b7:25:e7:be:25:7f:a8:c3:f5:
         93:d6:a9:1c:69:27:69:88:0a:93:f1:2f:10:9a:0e:4f:f0:b1:
         12:6a:86:45:35:fe:bd:d1:11:39:a8:48:4f:44:fb:c3:5c:f8:
         52:2e:95:49:48:7a:40:d3:ff:38:2c:23:99:3c:6f:05:4a:ef:
         e7:f8:23:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:12:36 2026 by rpki-client