Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/uHhAHkl1TlCh8pefEijlQVr3hcs.cer
File:                     uHhAHkl1TlCh8pefEijlQVr3hcs.cer (raw, json)
Hash identifier:          gBsPq8MLYIjfVNeJm3BJNNV8d+hNhZtUtNqANAA/rg8=
Subject key identifier:   B8:78:40:1E:49:75:4E:50:A1:F2:97:9F:12:28:E5:41:5A:F7:85:CB
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4270
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 22 Sep 2026 00:07:27 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329390
                          IP: 102.210.24.0/22
                          IP: 2c0f:17a0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17008 (0x4270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Sep 22 00:07:27 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36D06FDAF, serialNumber=B878401E49754E50A1F2979F1228E5415AF785CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b5:46:b7:b8:97:e4:04:fb:f1:cc:85:cf:fd:
                    a3:4d:0d:67:06:76:04:9c:b6:b7:9d:6a:9d:ed:0e:
                    f2:e0:80:7a:99:f1:cc:85:a1:2c:68:b1:e9:61:cb:
                    28:52:07:38:1b:ef:79:7f:e0:44:86:ad:3a:77:86:
                    8d:2d:60:a7:9a:e0:b5:20:25:11:c9:11:22:89:a1:
                    31:1e:a2:79:3a:c1:9f:8f:f1:f8:c5:bc:08:8f:00:
                    8a:71:83:75:ec:a3:f9:5b:c1:45:91:a8:a6:9b:55:
                    a3:52:3c:04:73:b5:ad:4c:21:85:60:28:4c:ae:6a:
                    12:2a:f8:70:d6:66:f3:51:d3:cf:08:06:9c:43:b7:
                    9c:cb:bb:0e:e1:64:7c:04:8d:63:3f:4b:97:ad:5e:
                    3a:65:51:65:7a:d7:8f:21:cc:cd:da:53:5a:45:10:
                    42:78:77:4f:8f:55:76:7a:f2:53:6a:a8:82:50:7b:
                    40:78:66:7d:9c:59:4b:75:ec:11:3e:0f:ba:34:4d:
                    d9:f3:89:b1:b9:43:73:4a:fe:70:6f:db:06:42:85:
                    77:f0:dd:59:bb:a9:ae:6c:0d:c3:1b:d3:78:46:f3:
                    a4:d4:52:4f:2c:82:06:3c:c2:5d:c0:ef:f3:34:75:
                    85:c3:d0:4e:01:a1:cc:db:60:d5:7f:ee:58:ed:41:
                    a7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:78:40:1E:49:75:4E:50:A1:F2:97:9F:12:28:E5:41:5A:F7:85:CB
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329390

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.210.24.0/22
                IPv6:
                  2c0f:17a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:84:08:ea:3f:38:71:3f:e2:f5:60:88:7c:15:2d:36:c5:a8:
         fc:61:30:fa:b4:ae:cb:a7:6e:34:1a:38:2a:a4:98:d4:3e:1a:
         35:78:bd:a4:80:4f:40:f0:ed:4a:49:d6:4a:f6:92:14:d9:f5:
         38:a3:94:78:ec:31:60:b4:d6:e6:65:cb:59:4a:09:3c:10:53:
         73:63:d2:d0:50:7a:36:a7:02:94:87:60:02:ef:93:d9:f8:9e:
         dc:55:f8:a1:5b:a7:3a:a4:a5:ad:ad:3d:e6:a4:75:16:02:11:
         3a:3f:fa:d7:10:c1:34:e7:b9:c1:8a:34:10:9c:b6:f7:f5:e4:
         c7:17:e5:1e:1a:c7:81:80:b9:ad:9a:f4:65:1e:3d:ed:b0:36:
         6f:2c:38:43:ae:2b:84:38:3a:71:1c:bd:8c:f0:9b:de:e7:36:
         84:e7:36:bb:d5:e8:47:37:07:f5:4a:d6:8f:8c:ac:69:dd:74:
         b7:28:98:fc:e6:36:1c:7a:65:8f:47:6f:17:0e:ec:44:03:23:
         83:24:4a:27:7e:b1:f6:eb:34:96:80:c4:c5:d3:b2:08:25:9e:
         29:c4:35:53:ac:c0:c2:12:63:5e:33:ce:58:2a:a8:61:32:45:
         24:e4:9a:34:d5:12:ad:f5:03:e4:3b:db:57:e2:66:ed:6d:37:
         f5:71:4e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:54:07 2026 by rpki-client