This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.cer
File: pFu73dbj9Gu_MJgQiMsIMMgn7Xg.cer (raw, json)
Hash identifier: JBy/vyhFtScmvk3VPSByz1bav985eKl+d4HhSOl5XEo=
Subject key identifier: A4:5B:BB:DD:D6:E3:F4:6B:BF:30:98:10:88:CB:08:30:C8:27:ED:78
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3D53
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B9E66/D38F68ACCAA211F0868D43E6DAE4EC9C/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B9E66/D38F68ACCAA211F0868D43E6DAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 03:59:08 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 329225
IP: 102.212.88.0/22
IP: 2c0f:3f80::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15699 (0x3d53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 03:59:08 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36B9E66AF, serialNumber=A45BBBDDD6E3F46BBF30981088CB0830C827ED78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:28:90:c2:af:68:77:d9:64:f1:15:cb:cc:92:
96:bd:4a:4a:12:b8:fa:e7:a3:9e:d3:b8:75:9f:7f:
a9:5f:c0:15:cb:ec:b6:6f:80:17:8e:d9:30:9f:84:
07:48:33:af:9b:86:ca:f5:d3:6e:be:00:ce:eb:ac:
8c:d2:63:35:83:90:56:35:90:5a:ab:6e:01:59:55:
d9:44:e2:0d:36:ce:1d:b1:b5:df:4a:04:40:96:ae:
d1:67:8b:23:b4:38:57:dd:92:e0:43:04:f7:22:e6:
20:32:4b:a8:f2:44:7d:57:9d:8f:57:34:75:ac:bb:
a2:3f:48:f6:4e:ea:eb:e4:b8:6e:3b:18:b1:fa:68:
a2:77:41:01:8a:cb:9c:79:21:c1:e5:58:df:2b:61:
2d:69:27:b4:28:80:c0:77:43:48:1b:b5:8f:89:29:
19:fd:81:f0:5d:92:b8:a5:93:77:40:03:37:eb:e6:
c1:29:90:5b:4f:5d:54:90:77:f9:60:43:70:33:ab:
14:27:04:35:09:14:ac:a0:2d:7c:f6:3c:d8:e0:fe:
9c:1b:75:d2:86:83:0d:a3:2f:d8:72:63:23:eb:ba:
9d:06:85:06:42:4b:61:73:b0:8f:8c:2b:c7:e8:4a:
8a:93:4f:e1:a6:bc:2f:cb:38:bd:df:57:7b:4b:14:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5B:BB:DD:D6:E3:F4:6B:BF:30:98:10:88:CB:08:30:C8:27:ED:78
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9E66/D38F68ACCAA211F0868D43E6DAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9E66/D38F68ACCAA211F0868D43E6DAE4EC9C/pFu73dbj9Gu_MJgQiMsIMMgn7Xg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329225
sbgp-ipAddrBlock: critical
IPv4:
102.212.88.0/22
IPv6:
2c0f:3f80::/32
Signature Algorithm: sha256WithRSAEncryption
46:1c:b7:e5:bc:95:17:c7:80:e1:b2:f4:31:3f:de:5d:32:89:
1d:19:96:e0:d1:89:a9:78:f5:6e:8e:98:61:ae:77:8d:ca:c8:
8d:23:91:e5:f8:84:57:e5:27:4a:90:c7:b3:eb:4d:d3:49:9d:
32:38:d0:a3:08:24:4c:1d:a6:33:c3:91:5f:10:1c:f7:fd:6f:
32:af:1c:7e:c0:61:7a:28:8e:48:de:59:b0:20:e4:ef:3b:c7:
17:42:30:76:6f:d8:2c:51:6c:3b:ea:2c:97:d0:e8:02:0f:57:
4d:be:7f:32:00:aa:8e:c2:56:5e:86:4a:19:6e:10:9a:62:5b:
2a:76:5d:08:41:e7:a1:6a:5a:42:6c:c6:dd:f2:bf:f8:34:33:
04:dc:b8:60:da:42:d7:cc:05:3b:3d:08:36:60:22:ef:bd:73:
56:aa:8a:71:61:28:27:91:45:44:87:19:e2:fc:ee:b8:b1:3b:
e1:ea:fa:37:84:05:29:df:c3:e5:c4:be:49:94:ab:5c:80:de:
8d:07:74:b2:7d:08:cf:8a:db:4a:99:7c:1a:c2:22:9d:b8:a6:
4e:20:4e:f1:96:2e:34:77:4b:3a:d4:71:eb:63:21:5c:41:1a:
b6:ba:b9:fa:09:32:bd:2d:6e:db:b6:3f:0c:31:26:28:a6:fd:
0d:73:a4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:18:05 2026 by rpki-client