Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.cer
File:                     Dl9hWrCudAvgsOpPDZ-F_SGhIzU.cer (raw, json)
Hash identifier:          XI4DVdcU0Hl50Vc24WaWTSoCR9+ZfWDABcqAWoRK1Hg=
Subject key identifier:   0E:5F:61:5A:B0:AE:74:0B:E0:B0:EA:4F:0D:9F:85:FD:21:A1:23:35
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4241
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 11 Sep 2026 13:39:39 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 196.202.160.0/19
                          IP: 197.211.0.0/19
                          IP: 197.220.96.0/19
                          IP: 2c0f:fce0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16961 (0x4241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Sep 11 13:39:39 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36965F1AF, serialNumber=0E5F615AB0AE740BE0B0EA4F0D9F85FD21A12335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f9:62:fa:b0:e5:71:85:df:6a:fa:12:a6:1e:
                    33:f4:2c:5a:e3:75:6f:a7:cb:c0:14:4c:c6:97:ef:
                    00:28:97:f2:ed:8f:84:a2:52:cd:49:18:4e:a6:18:
                    17:6d:22:a3:12:d0:19:54:8c:7e:91:c0:dc:70:86:
                    96:83:50:0d:18:42:9a:45:c5:2b:a1:c6:ce:07:d0:
                    59:71:dd:0d:58:62:d4:a8:ee:fd:f8:71:65:cf:04:
                    fb:24:c1:0c:81:72:d2:47:07:cc:ac:7b:1f:dd:6b:
                    ee:81:a7:96:0f:0c:78:75:33:55:db:e0:52:73:5e:
                    c7:7c:c5:2c:96:9f:04:9b:1c:f4:a3:fd:21:2a:88:
                    3f:7e:83:37:54:f5:c1:13:d4:de:f3:1b:13:89:fe:
                    43:ac:11:d6:94:8b:21:c9:d1:66:69:39:9e:b0:e6:
                    da:d5:24:68:f3:a6:3e:2d:1a:0b:f8:e8:88:25:e2:
                    35:d0:74:12:ad:3c:ed:3e:54:d9:38:9a:18:e5:92:
                    36:43:b4:19:31:5a:a3:89:a8:96:b0:4a:77:89:f1:
                    f7:cf:36:e6:7b:0c:ed:f5:fa:94:9d:78:20:b4:5e:
                    49:a5:e0:f1:11:47:c1:71:cd:ef:67:da:10:cc:a9:
                    46:15:82:95:ee:80:f9:c9:0b:b0:f0:f3:c4:0f:47:
                    b5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5F:61:5A:B0:AE:74:0B:E0:B0:EA:4F:0D:9F:85:FD:21:A1:23:35
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.mft

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.202.160.0/19
                  197.211.0.0/19
                  197.220.96.0/19
                IPv6:
                  2c0f:fce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:37:64:2e:84:bb:22:65:cd:7e:2a:77:0b:42:99:74:2a:fc:
         46:0b:47:f6:26:59:0a:f7:68:c4:83:8f:74:4e:92:68:3a:5c:
         41:ee:02:0a:c4:3f:48:53:9b:8f:ba:82:47:f6:81:60:4e:36:
         e2:79:0a:cb:38:60:29:e1:45:1c:f9:a9:80:69:33:98:14:0c:
         e7:30:1c:b1:74:cc:51:6d:f8:9a:cd:77:30:ac:57:19:f0:85:
         23:b7:ac:65:73:df:72:0b:ff:48:e0:94:19:c0:4d:0d:73:4b:
         3d:21:04:ec:03:68:89:09:24:5f:db:fe:84:71:ee:5c:36:f6:
         07:85:e7:99:f7:c1:13:40:a0:ea:93:2b:39:a7:a5:08:b4:bd:
         17:42:e3:9a:cd:66:1f:5b:2a:79:d0:c8:6e:4f:d3:25:44:c3:
         69:15:4e:98:19:44:9c:b2:b8:56:2a:1b:2f:4e:a9:3d:dc:74:
         e7:51:f2:0e:4a:2f:74:38:4a:e0:04:88:bc:ca:fe:ad:f8:4f:
         6c:03:65:80:e0:ca:61:22:fb:5f:6e:bb:32:4d:31:6c:63:81:
         04:46:a1:44:cf:59:cd:11:d6:3b:e9:19:06:b3:28:30:c1:01:
         ef:db:01:02:46:88:e5:54:b1:b3:28:8a:89:9b:26:c3:05:d3:
         45:df:30:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 10:41:14 2026 by rpki-client