Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
File:                     ksorQe7D4BoZOJ4iIIisP8OhSO0.cer (raw, json)
Hash identifier:          OVLNYWb8Lm2RRcjZboqeX4oFhHKenVKz9/Ur+13ZQ7Q=
Subject key identifier:   92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       426A
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 22 Sep 2026 00:00:47 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329254
                          IP: 102.212.11.0/24
                          IP: 2c0f:57a0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 14:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17002 (0x426a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Sep 22 00:00:47 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3624132AF, serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:86:c2:31:cf:3d:bb:de:ef:9d:00:f9:9a:2c:
                    a6:44:7f:a1:3c:10:84:f6:d9:f7:a2:58:65:ff:8c:
                    55:31:27:bd:d1:01:0f:45:c3:39:d6:74:c4:3c:4d:
                    8b:52:8c:f8:3a:fa:7b:85:56:f6:59:14:ac:ad:08:
                    01:56:38:71:2e:1e:9b:68:2a:8e:fb:e9:dd:3e:70:
                    24:c4:91:88:83:2c:f7:79:aa:5d:71:32:34:83:0b:
                    5f:b5:bb:f4:ba:3b:ba:5a:4b:e4:dd:b9:45:2f:72:
                    8e:40:ee:50:0c:94:80:ea:58:2b:d7:32:b3:c4:65:
                    1e:35:a7:7b:ae:b5:ad:14:d7:6e:72:14:a6:4e:9a:
                    6c:f2:59:25:6c:88:74:3f:f5:93:4c:04:a0:a9:c6:
                    e8:2f:5b:84:6d:a4:ce:3b:a3:d3:25:ee:ba:bc:f7:
                    41:8a:ae:b4:e1:9e:57:93:91:2c:14:c3:e8:01:ab:
                    75:52:59:cb:9a:1f:9e:26:16:55:e9:6f:e0:db:3e:
                    22:b7:19:7b:24:26:d0:d9:64:ef:b8:3a:8c:e1:e9:
                    05:e4:ff:80:ce:8e:7d:61:8a:9d:9a:f0:f3:11:db:
                    8d:48:f7:8f:8e:2f:25:3e:be:4b:f2:bc:06:20:72:
                    c2:49:06:63:80:e6:10:8c:b2:91:2a:c8:e6:eb:a5:
                    dd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329254

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.212.11.0/24
                IPv6:
                  2c0f:57a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:3a:c2:3e:1d:2f:3b:ba:66:74:58:99:70:e7:47:d5:00:d2:
         c2:d5:b5:88:91:94:3e:05:cb:6b:87:86:b0:d5:a9:de:35:3b:
         f0:62:73:67:7a:61:d3:2f:a9:d0:38:5c:37:45:e1:58:cf:8e:
         8c:77:aa:73:98:bc:4b:7c:1a:7e:ad:70:ed:95:f1:9b:38:c9:
         4c:98:8a:d8:17:b7:0b:48:6d:ac:91:29:1e:bc:41:a3:24:7c:
         22:ca:c8:f6:9b:8e:ec:1a:9f:2e:14:96:cd:4b:a0:b1:a7:21:
         14:69:f9:df:0b:05:5b:46:13:4c:66:0e:d7:1d:da:f1:2d:86:
         cb:54:5c:85:e7:0d:25:fd:cf:39:e3:e9:1d:0e:aa:54:77:d3:
         d2:a6:f9:62:24:23:03:1b:39:c1:ee:f1:8f:9e:67:2f:07:b5:
         26:1f:a6:3f:ff:46:71:d9:89:fb:cc:af:14:28:3b:1a:a9:ec:
         56:88:db:96:8b:4c:37:cc:36:79:42:98:91:8b:f6:61:2c:b1:
         54:5c:27:6d:ad:0b:e1:83:52:9b:ef:dc:9b:76:f1:e0:00:12:
         20:25:91:f7:82:22:2a:32:4c:0f:8b:d7:e6:ff:46:d1:61:ae:
         67:b3:85:d9:82:24:87:6b:0a:31:a1:8b:df:96:8e:07:28:2b:
         f9:1d:1c:55
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICQmowDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjA5MjIwMDAwNDdaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjI0MTMyQUYxMTAvBgNVBAUTKDkyQ0EyQjQxRUVDM0UwMUExOTM4OUUy
MjIwODhBQzNGQzNBMTQ4RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDOhsIxzz273u+dAPmaLKZEf6E8EIT22feiWGX/jFUxJ73RAQ9FwznWdMQ8TYtS
jPg6+nuFVvZZFKytCAFWOHEuHptoKo776d0+cCTEkYiDLPd5ql1xMjSDC1+1u/S6
O7paS+TduUUvco5A7lAMlIDqWCvXMrPEZR41p3uuta0U125yFKZOmmzyWSVsiHQ/
9ZNMBKCpxugvW4RtpM47o9Ml7rq890GKrrThnleTkSwUw+gBq3VSWcuaH54mFlXp
b+DbPiK3GXskJtDZZO+4Oozh6QXk/4DOjn1hip2a8PMR241I94+OLyU+vkvyvAYg
csJJBmOA5hCMspEqyObrpd1dAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUksorQe7D
4BoZOJ4iIIisP8OhSO0wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyNDEzMi84QkZCRDk1MkQxQUMx
MUVGQTVEMTE2NTU3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MjQxMzIvOEJGQkQ5NTJEMUFDMTFFRkE1RDExNjU1NzYyRTk1MUEva3NvclFl
N0Q0Qm9aT0o0aUlJaXNQOE9oU08wLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBiYwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBABm1AswDQQCAAIwBwMF
ACwPV6AwDQYJKoZIhvcNAQELBQADggEBAGs6wj4dLzu6ZnRYmXDnR9UA0sLVtYiR
lD4Fy2uHhrDVqd41O/Bic2d6YdMvqdA4XDdF4VjPjox3qnOYvEt8Gn6tcO2V8Zs4
yUyYitgXtwtIbayRKR68QaMkfCLKyPabjuwany4Uls1LoLGnIRRp+d8LBVtGE0xm
Dtcd2vEthstUXIXnDSX9zznj6R0OqlR309Km+WIkIwMbOcHu8Y+eZy8HtSYfpj//
RnHZifvMrxQoOxqp7FaI25aLTDfMNnlCmJGL9mEssVRcJ22tC+GDUpvv3Jt28eAA
EiAlkfeCIioyTA+L1+b/RtFhrmezhdmCJIdrCjGhi9+WjgcoK/kdHFU=
-----END CERTIFICATE-----
Generated at Wed Sep 23 18:07:37 2026 by rpki-client