Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/yfme5j28AsDEecoXeykoIBKCLro.cer
File:                     yfme5j28AsDEecoXeykoIBKCLro.cer (raw, json)
Hash identifier:          ZkyOqiAhPv/sUnAQDKzeXZ4XyUMKueB8wdPG43qzIn0=
Subject key identifier:   C9:F9:9E:E6:3D:BC:02:C0:C4:79:CA:17:7B:29:28:20:12:82:2E:BA
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4349
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
CRL Distribution Point:   rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36DCA7D/1D45FF0E3CB511F19206CDBBCE1D38B0/yfme5j28AsDEecoXeykoIBKCLro.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36DCA7D/1D45FF0E3CB511F19206CDBBCE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Sat 14 Nov 2026 00:06:55 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329710
                          IP: 102.204.96.0/24
                          IP: 2c0f:5c20::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17225 (0x4349)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Nov 14 00:06:55 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36DCA7DAF, serialNumber=C9F99EE63DBC02C0C479CA177B29282012822EBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:19:2d:81:18:db:27:df:99:5d:9a:7a:3f:c3:
                    43:7c:57:c7:00:ea:c3:ce:d6:ec:ff:48:3e:89:f6:
                    7c:b6:f6:c4:a6:c2:ab:59:83:ed:63:4c:e2:59:3f:
                    ac:8e:e6:63:19:25:62:11:69:a4:4e:e9:4a:54:c5:
                    e7:ee:e8:70:e7:1c:69:22:f6:d7:f8:ea:39:85:0b:
                    43:5a:74:04:1f:19:3c:5b:b2:68:9c:0d:a9:91:20:
                    ca:ce:1f:0c:36:0e:9e:18:d3:ed:d8:b7:f8:99:c7:
                    f1:3d:e4:2b:66:d0:a8:5b:d9:5a:cf:6a:97:84:0a:
                    e3:18:c2:e4:a3:69:7c:08:13:99:74:0d:3a:c4:64:
                    96:93:9f:2c:6c:68:de:26:a3:df:43:45:bb:be:29:
                    26:c6:fb:69:63:33:c9:6d:30:fd:5a:fa:58:d8:6e:
                    44:00:ce:96:c2:29:81:18:4d:0c:b5:f5:d1:8f:56:
                    83:91:6d:90:8b:cc:e7:a1:41:1b:cf:c3:e2:91:61:
                    85:c9:7b:62:c0:16:be:bc:8e:3d:2b:f8:d1:8e:4a:
                    1d:ff:e8:8c:bb:59:82:4a:eb:6e:c3:27:87:ae:c1:
                    a8:9a:63:09:af:63:05:13:d8:59:ee:c4:06:e8:78:
                    f6:83:e6:08:b1:e2:22:19:6f:8f:60:d0:6f:9f:64:
                    bf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F9:9E:E6:3D:BC:02:C0:C4:79:CA:17:7B:29:28:20:12:82:2E:BA
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DCA7D/1D45FF0E3CB511F19206CDBBCE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DCA7D/1D45FF0E3CB511F19206CDBBCE1D38B0/yfme5j28AsDEecoXeykoIBKCLro.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329710

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.204.96.0/24
                IPv6:
                  2c0f:5c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:41:ee:84:45:25:9d:bb:c3:c5:e0:e1:fe:d6:4f:06:d4:bf:
         b4:07:7e:59:59:28:36:1b:6b:1f:9a:c3:97:46:65:97:de:20:
         7f:78:90:c8:9b:bb:50:ac:c9:cf:89:35:3f:2c:ce:ec:83:60:
         d3:d9:e4:7f:d0:a0:68:96:d9:74:a7:58:e1:ee:15:1a:66:af:
         7e:ac:5d:f4:75:80:28:3e:a0:be:af:71:ab:89:f3:ec:21:00:
         9d:1f:ba:bf:71:47:a0:1b:38:b0:d1:2f:2c:9f:b6:22:b1:6b:
         d3:11:9a:07:8e:0f:29:37:c6:2f:e7:19:fa:14:27:fe:06:cf:
         ec:06:4e:a3:a1:bd:7a:74:ab:93:ff:71:50:6f:89:48:4f:5d:
         3f:5e:06:e9:3e:ff:ca:11:85:d2:d8:21:61:a2:4f:dc:2b:cb:
         b9:f7:90:d2:b9:34:01:e4:1e:64:a2:88:bc:64:49:13:34:f9:
         84:81:12:e1:f3:b5:84:34:4c:48:9f:d4:92:86:ee:08:71:bb:
         82:d7:87:dc:13:fe:ef:40:eb:be:6c:c5:52:cb:7a:02:98:0a:
         83:f0:83:6a:55:32:f0:bb:47:52:cf:4b:f4:a3:bf:61:10:e4:
         5c:a6:d7:59:4e:2f:9d:e9:f9:f2:fd:c3:98:39:45:57:76:9a:
         0e:ae:c0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:18:51 2026 by rpki-client