Certificate
$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/IwNslO_0gxN5Xa6gDBKZ4rTk4pM.cer
File: IwNslO_0gxN5Xa6gDBKZ4rTk4pM.cer (raw, json)
Hash identifier: cpABIOJUFGjvPBWIZJxrqwGs6eKiECZRaebhOE/aQdg=
Subject key identifier: 23:03:6C:94:EF:F4:83:13:79:5D:AE:A0:0C:12:99:E2:B4:E4:E2:93
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 422C
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F365A480/1C47C3FCACDC11F1BFBE07A8CE1D38B0/IwNslO_0gxN5Xa6gDBKZ4rTk4pM.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F365A480/1C47C3FCACDC11F1BFBE07A8CE1D38B0/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 10 Sep 2026 05:54:47 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 37109
IP: 41.217.220.0/22
IP: 196.223.160.0/20
IP: 2c0f:f878::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 20 Sep 2026 00:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16940 (0x422c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Sep 10 05:54:47 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F365A480AF, serialNumber=23036C94EFF48313795DAEA00C1299E2B4E4E293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:70:5d:f4:b2:b5:45:4f:7c:00:92:8b:f0:c7:
89:c5:2a:04:3c:65:45:bb:ca:71:10:2c:66:c5:ab:
89:72:93:31:39:a8:32:c8:2f:84:e1:ab:32:56:e7:
8d:06:8f:75:38:73:67:ce:09:11:71:80:ac:b9:ac:
95:68:c8:97:d4:e0:51:38:f9:c0:ab:12:ff:75:39:
7b:24:f3:17:dc:15:13:ea:c4:73:9c:29:0a:01:e1:
d2:ec:3c:66:53:56:24:0c:0f:d9:75:fe:e1:a9:18:
cf:55:aa:c4:cc:ac:96:08:18:6e:42:70:4e:13:86:
26:1a:c7:cb:24:e8:25:47:ba:7e:b8:2c:e8:72:f8:
be:7c:10:58:76:b1:a4:27:09:14:9e:06:a1:e5:97:
38:b9:dc:ce:44:09:25:8c:6d:f5:a9:55:dd:63:16:
22:fb:e5:d7:48:d2:ca:be:b2:c3:67:07:b4:37:4a:
ae:72:cd:a6:e4:72:73:cb:a5:e3:21:d8:67:7c:36:
b1:40:54:62:47:2f:62:78:22:3a:52:87:01:b7:55:
e2:a4:17:95:a5:43:8f:21:63:f9:6d:7e:68:de:59:
54:52:58:e6:c6:89:a4:ad:f8:39:f3:3a:e4:70:a4:
8a:e4:7b:e0:25:82:02:3f:12:ca:ce:4f:e5:4f:fa:
c4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:03:6C:94:EF:F4:83:13:79:5D:AE:A0:0C:12:99:E2:B4:E4:E2:93
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365A480/1C47C3FCACDC11F1BFBE07A8CE1D38B0/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365A480/1C47C3FCACDC11F1BFBE07A8CE1D38B0/IwNslO_0gxN5Xa6gDBKZ4rTk4pM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37109
sbgp-ipAddrBlock: critical
IPv4:
41.217.220.0/22
196.223.160.0/20
IPv6:
2c0f:f878::/32
Signature Algorithm: sha256WithRSAEncryption
9e:e2:2f:16:23:c5:e7:22:bb:e5:1d:32:85:43:e2:0b:d2:fb:
90:d3:04:b8:b9:1b:35:86:d0:31:bd:d2:0d:f6:b8:47:d0:48:
b5:19:0f:a7:d5:9d:09:44:d0:75:0b:83:86:91:08:71:78:3e:
6f:81:84:ae:74:53:60:45:93:fe:f9:57:3a:63:8d:b9:d2:ae:
7d:a4:19:63:19:cf:e9:08:10:42:d9:3b:f5:7a:03:ac:cf:39:
a9:2e:c7:e5:b9:d0:9e:90:05:dd:2d:71:f9:28:79:86:c8:bb:
3e:3e:05:d8:68:1c:25:8c:b9:3d:2f:a7:07:9d:4f:83:a0:f4:
e0:7d:2a:c2:2d:3b:63:c6:13:ab:c7:58:17:66:f3:e7:f2:46:
57:74:27:0d:e5:cf:eb:f0:3a:2f:4c:13:3b:95:49:3c:66:87:
05:66:2d:11:ff:d6:80:c2:72:34:ec:a6:fd:b6:e7:c3:eb:f6:
28:f2:12:b1:12:ce:d9:5d:a7:23:a9:c4:ef:df:5c:b1:15:8c:
41:a4:6d:84:9f:cd:ac:60:8d:c6:e8:41:c3:a1:f5:17:c3:fb:
43:1e:48:72:be:3b:72:cb:84:4f:50:d3:c9:58:3c:82:e4:df:
a3:e5:c7:a8:be:bf:68:ae:e5:a2:1c:05:c4:a2:a7:53:33:a4:
64:95:3b:c9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 19 11:39:48 2026 by rpki-client