This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
File: pfCiu4t57dbTfAd63-oIJRTAQg8.cer (raw, json)
Hash identifier: 15MLZ8kS4qU/OVzSyMZaXUONlkXDx5fAUH0csPx07zs=
Subject key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3DE5
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:22:08 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 37577
IP: 102.178.0.0 -- 102.180.255.255
IP: 197.239.64.0/18
IP: 2c0f:f138::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15845 (0x3de5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 04:22:08 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36CB1BEAF, serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:de:fa:df:d7:b2:8d:e6:42:bf:be:23:34:
3d:b5:80:c8:63:e8:04:69:e7:a2:ab:32:aa:2a:84:
e3:a2:71:68:69:d0:1e:42:21:8a:e6:85:3e:dd:88:
45:53:be:6b:5e:33:d8:cf:fe:3b:91:08:f7:82:15:
49:d9:cc:22:39:15:22:be:e2:3f:75:c7:ca:34:29:
7a:99:67:45:45:67:e0:5e:3f:08:8d:fd:65:59:fc:
ea:86:d5:a8:3e:3f:ec:af:9a:cb:af:76:6e:95:02:
e9:62:40:81:1f:5d:dd:a6:f8:fd:03:84:2c:76:d4:
ba:0a:a2:b2:f8:37:ab:aa:6e:9a:00:f0:a9:69:9c:
0c:83:99:7c:86:cd:73:ef:75:1f:f0:f6:96:48:a4:
d2:a4:30:76:cd:84:f2:0a:28:c4:75:99:e2:b6:6f:
79:8a:98:57:b6:72:0b:d5:71:5e:42:e2:bb:bf:1b:
e0:f5:37:0e:54:bc:7a:63:8a:09:6f:13:7f:9b:ee:
56:79:d0:18:f4:6d:e0:4a:a0:f7:eb:09:40:ed:06:
67:f2:86:a7:3e:8a:f7:f4:b5:a5:ef:71:3b:3c:1c:
4a:b5:46:92:51:c7:8a:b3:31:47:ac:c7:f3:e8:9e:
c3:ca:37:fc:f4:11:58:29:c8:48:38:f3:a0:37:2a:
1e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37577
sbgp-ipAddrBlock: critical
IPv4:
102.178.0.0-102.180.255.255
197.239.64.0/18
IPv6:
2c0f:f138::/32
Signature Algorithm: sha256WithRSAEncryption
00:64:1d:36:94:4d:e5:86:d0:e6:8c:1a:ee:be:26:e3:b7:34:
70:c8:d3:2f:fc:db:21:5f:cf:53:3e:9a:d6:50:36:dc:a5:e6:
6f:ed:56:1e:14:f1:35:8f:4e:7b:13:04:3d:27:56:ca:de:c5:
c2:52:8a:a3:81:23:3f:8f:60:26:07:f8:68:3c:03:65:bb:94:
22:81:45:a9:77:7d:29:38:cb:27:1b:1e:79:72:ba:79:d5:55:
b1:3a:89:dd:b6:79:bd:77:98:25:85:8a:43:bd:e3:f6:7b:8a:
19:c8:ba:ea:52:8c:7a:67:5e:66:14:ad:93:2f:69:30:fb:c7:
84:03:06:dd:81:25:5d:01:09:3c:6f:8e:9c:78:d1:44:62:78:
63:2e:00:c3:10:3d:76:3b:28:10:49:45:40:99:c7:e9:02:dc:
de:1d:34:d4:6e:5b:36:9e:a7:50:f8:e3:a2:5d:bc:07:79:da:
84:6a:db:04:3d:9a:c6:e4:cd:4e:96:5d:02:d1:ad:27:c9:9c:
dc:0c:ea:a3:5f:dd:bc:f3:c2:8f:fc:e8:3a:05:e7:57:45:1b:
63:d3:7e:c8:72:86:61:0d:bb:a0:f1:b6:19:26:4a:89:63:35:
75:bc:ad:23:b6:b8:34:e1:9a:73:56:25:7e:d5:37:03:33:eb:
c2:d3:91:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:58:08 2026 by rpki-client