Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/GkDw4AHOLpPoWMkIWPCvalgLyIY.cer
File:                     GkDw4AHOLpPoWMkIWPCvalgLyIY.cer (raw, json)
Hash identifier:          gKQ65KVSu8i3nxIdFBxKklhketmD7LB1mgOwXUo2vGw=
Subject key identifier:   1A:40:F0:E0:01:CE:2E:93:E8:58:C9:08:58:F0:AF:6A:58:0B:C8:86
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       42C6
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36A3C65/8B37F730C63811F1A0F7FBCCCE1D38B0/GkDw4AHOLpPoWMkIWPCvalgLyIY.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36A3C65/8B37F730C63811F1A0F7FBCCCE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 12 Oct 2026 12:29:26 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37449
                          IP: 197.157.232.0/22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17094 (0x42c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Oct 12 12:29:26 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36A3C65AF, serialNumber=1A40F0E001CE2E93E858C90858F0AF6A580BC886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d2:21:57:ee:2f:aa:58:3f:12:8c:cc:5b:e1:
                    c7:7d:e8:9a:08:94:c3:01:86:0c:1f:eb:6c:36:a5:
                    e3:fc:eb:22:b0:fd:47:88:de:44:29:aa:f4:14:b5:
                    ad:6c:49:ef:90:01:dd:61:8b:e1:07:10:69:06:bf:
                    17:27:42:61:d8:aa:99:2b:28:40:0b:1c:cf:7d:68:
                    86:69:fd:9a:57:6c:51:48:85:2a:a8:53:10:ab:46:
                    29:6b:9a:0a:1f:74:06:a2:9a:51:50:98:3c:1b:59:
                    fe:58:eb:f0:75:80:3e:ba:e9:f8:bd:bf:a7:24:32:
                    76:00:dc:b0:e4:c4:25:5d:65:dc:0b:72:0b:02:7b:
                    e2:f4:b6:65:d6:fa:7f:d7:42:d9:51:d8:68:08:8a:
                    a3:3a:f6:da:eb:e2:80:1b:d7:16:f3:a8:39:2b:78:
                    5f:1a:d6:46:1c:c7:d8:67:a9:e8:9e:a9:71:5b:fd:
                    6b:55:5b:8c:2e:b9:69:39:78:27:71:fa:7b:67:6b:
                    f0:9b:31:4a:20:6f:23:68:97:a5:39:1b:ba:63:47:
                    a6:28:96:fa:e4:a9:1c:b2:ca:eb:31:5d:24:ff:af:
                    40:71:30:51:71:f7:63:59:80:86:66:45:2c:ea:af:
                    83:33:2a:b7:f7:6d:6f:a1:fe:57:ed:05:09:31:e9:
                    17:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:40:F0:E0:01:CE:2E:93:E8:58:C9:08:58:F0:AF:6A:58:0B:C8:86
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3C65/8B37F730C63811F1A0F7FBCCCE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3C65/8B37F730C63811F1A0F7FBCCCE1D38B0/GkDw4AHOLpPoWMkIWPCvalgLyIY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37449

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.157.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:9e:a3:4c:57:d8:d3:17:03:88:11:b9:45:1e:91:38:1d:9c:
         90:d9:f9:31:04:4b:58:4b:aa:4f:d2:f8:29:37:fe:20:93:67:
         bd:29:a9:50:70:2d:05:72:61:f8:43:52:e6:e6:51:85:a8:31:
         b2:36:69:55:82:82:1d:b5:92:d7:9c:f7:08:84:8c:fd:dd:1d:
         29:9f:ee:02:c9:3c:b0:e7:86:a2:4c:fc:7a:a2:87:08:05:87:
         4e:05:60:ed:e9:82:f3:63:cd:3c:6d:aa:c2:f7:73:7e:16:a3:
         af:0c:4b:33:a7:df:bc:98:b0:e0:2b:52:7d:fc:65:81:88:ef:
         ca:69:d2:ba:f9:96:28:24:ad:53:2f:69:6c:23:30:27:78:93:
         c1:43:c8:f0:fa:16:0b:10:df:41:9d:2a:74:4a:b4:01:67:fc:
         df:ba:22:85:ad:e3:d6:51:b2:7c:16:9f:f3:49:12:3b:b7:35:
         f4:fc:39:ff:cd:cd:ee:95:a0:1a:b8:9c:ce:a8:1b:6c:bf:04:
         e0:8c:24:da:ad:d4:49:66:67:fb:3c:75:54:65:3d:59:44:1c:
         50:e4:19:65:cf:5f:8c:4b:50:04:f4:04:92:7c:52:f5:3e:aa:
         48:57:6b:3f:5b:6d:0a:26:02:bd:e5:75:f2:a8:79:93:f3:dd:
         d7:b3:8a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:21:05 2026 by rpki-client