Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/D4kdL9FUeF3D5rPHlmdkbAu09W0.cer
File: D4kdL9FUeF3D5rPHlmdkbAu09W0.cer (raw, json)
Hash identifier: de4TstxGmP35/9cndbvuYpH3H1ya1BVEepIdy/d7CtM=
Subject key identifier: 0F:89:1D:2F:D1:54:78:5D:C3:E6:B3:C7:96:67:64:6C:0B:B4:F5:6D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 401B
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Fri 06 Mar 2026 08:34:59 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 327870
IP: 197.215.220.0/22
IP: 2c0f:ebb0::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 25 Mar 2026 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16411 (0x401b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Mar 6 08:34:59 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F3641110AF, serialNumber=0F891D2FD154785DC3E6B3C79667646C0BB4F56D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:3c:e2:18:1a:9a:8e:dc:1d:c3:8f:01:39:
ec:59:93:0b:ce:0c:25:f2:22:7e:18:1c:4a:dc:bf:
e0:74:88:8b:69:2c:e2:e5:0d:32:df:e1:4d:ff:e6:
0d:af:66:aa:36:de:6f:cd:4e:bf:52:c7:6d:ce:42:
f9:6f:24:c6:98:53:2f:4d:19:48:04:a6:d8:08:1f:
87:9e:9b:b8:02:13:f0:27:ec:ff:67:6c:b8:1e:5e:
8a:4c:e5:47:ec:51:22:da:28:6c:ed:5a:d2:98:ff:
58:ad:f1:24:a6:69:9c:64:f7:1d:88:bf:24:4c:9e:
92:40:8f:d8:8b:f0:07:9e:02:be:8a:83:a4:fc:0a:
b3:19:a7:0f:7b:3c:03:71:eb:3f:e7:13:ab:4f:6d:
78:3a:c5:8e:6d:68:fe:66:7e:a2:88:6c:9b:63:ee:
3f:4b:1c:10:e0:20:c1:12:c3:8e:3e:6b:e9:46:de:
84:06:d1:14:08:e0:bf:da:41:a1:12:4e:fa:94:49:
2b:ab:b5:d5:9a:5c:c9:18:c5:0a:32:22:0b:fb:27:
81:e2:8a:cf:61:98:7e:20:59:68:c0:a2:2b:6e:0f:
94:4e:85:3a:e8:d9:49:14:6c:47:93:1f:98:b2:ac:
b4:76:08:66:53:f4:16:6a:ff:f0:c9:e5:cd:f8:c6:
35:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:89:1D:2F:D1:54:78:5D:C3:E6:B3:C7:96:67:64:6C:0B:B4:F5:6D
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327870
sbgp-ipAddrBlock: critical
IPv4:
197.215.220.0/22
IPv6:
2c0f:ebb0::/32
Signature Algorithm: sha256WithRSAEncryption
01:65:86:c8:2c:1f:70:33:4a:1d:36:08:b0:7d:cc:ea:54:b6:
44:5f:86:9c:17:76:4d:ca:4d:de:64:f4:c1:ea:b1:44:79:b3:
d3:cd:a7:b7:d8:a2:11:b8:bc:53:76:35:87:dd:62:0a:b0:f6:
cf:4d:e6:05:9d:81:c2:1e:94:d8:c4:f9:d2:d4:14:ae:f6:9f:
e2:9b:c6:a8:8e:d6:6d:db:9b:17:b0:e4:0e:ff:c9:c9:d1:ba:
15:93:88:6b:ae:93:dd:01:b0:bf:00:f5:0c:87:35:ea:4f:2d:
98:5a:c9:73:e5:17:17:4a:37:8a:44:3c:87:33:d1:f5:6f:fa:
d6:19:6a:c1:a8:a6:33:bc:fe:76:82:fe:f6:38:f4:de:cb:d0:
bf:b6:1b:e1:fb:6e:58:ec:8e:3a:1a:63:ef:01:55:5a:f2:ce:
1f:a8:cb:3b:c9:ee:ac:7b:71:71:cb:45:85:22:52:dd:44:6b:
1b:5e:bb:91:dc:3b:4d:a6:95:da:63:57:c3:89:87:2a:f6:85:
9b:21:d5:62:a2:2f:b4:97:1f:49:e7:5d:aa:4b:5e:9f:fe:8d:
c9:28:d2:42:84:37:2b:ef:cd:3f:8b:46:7b:1e:97:0a:bf:e6:
da:4d:d1:79:2b:6b:e9:2f:d6:c5:38:78:89:29:d0:5d:11:90:
75:9b:bf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 08:54:09 2026 by rpki-client