Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/gAEXeatK0jDEfjKtDyaMBltYJzk.cer
File:                     gAEXeatK0jDEfjKtDyaMBltYJzk.cer (raw, json)
Hash identifier:          1vl8+GLx174AHiuQTDRZmtWI1qlmwMazmkFvvZXOIoQ=
Subject key identifier:   80:01:17:79:AB:4A:D2:30:C4:7E:32:AD:0F:26:8C:06:5B:58:27:39
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       41BB
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 31 Jul 2026 13:56:00 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 329780
                          IP: 102.201.208.0/23
                          IP: 2c0f:5120::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16827 (0x41bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jul 31 13:56:00 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3678405AF, serialNumber=80011779AB4AD230C47E32AD0F268C065B582739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1c:91:0f:c7:18:15:50:ed:8b:00:84:4b:67:
                    2e:6c:44:bf:11:b6:9a:a8:14:77:a0:85:cd:46:44:
                    fd:19:50:17:33:35:21:11:96:00:f0:ae:dc:60:2e:
                    33:fa:eb:95:90:52:fb:4c:1c:fb:1e:96:94:8a:30:
                    58:b7:74:5c:47:fe:c7:f6:f4:b0:64:75:c3:27:ea:
                    ce:48:be:29:1b:f5:f9:d8:3f:e6:25:34:0b:f5:a4:
                    58:38:20:6c:a4:a5:73:b6:c2:4d:a8:fe:75:1c:fd:
                    49:ed:f3:b9:4c:b7:91:a1:9f:5e:d6:2d:0e:de:f8:
                    11:af:b6:24:13:97:72:41:9b:14:89:7c:2f:00:fc:
                    ea:9e:17:2a:2d:93:0f:66:c4:67:a2:21:d1:9f:0a:
                    8e:e1:2e:65:bc:76:7f:4a:c1:c4:ff:b3:1f:1a:43:
                    69:c8:8b:cc:67:b5:bc:aa:09:82:79:88:4b:a4:04:
                    65:30:33:29:62:b3:21:be:9a:e7:d7:b5:b3:79:a6:
                    88:f6:60:9d:6e:4c:0e:55:ca:98:19:ba:33:76:df:
                    56:bd:52:3d:f3:b2:fb:c9:ef:a6:a1:2e:26:09:e5:
                    2e:fa:e3:77:20:6e:61:5c:6d:33:76:1e:0f:85:c4:
                    ef:80:ae:fa:cb:59:d7:01:1b:95:79:90:3d:fe:a4:
                    12:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:01:17:79:AB:4A:D2:30:C4:7E:32:AD:0F:26:8C:06:5B:58:27:39
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  329780

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.201.208.0/23
                IPv6:
                  2c0f:5120::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:3d:d9:e0:3b:b4:85:64:f6:11:d3:17:e1:c8:57:78:db:e5:
         c3:55:31:05:ed:fa:24:dc:d6:0a:2b:4f:46:32:7e:a1:0d:bb:
         b4:1e:15:08:44:bd:f9:ba:70:e3:e4:c8:67:e9:b0:c9:b2:89:
         e3:8b:8f:22:c9:d5:46:35:0c:bf:78:41:ba:07:81:01:70:1d:
         2d:eb:f3:23:77:cf:a4:b0:8f:95:6c:c9:00:00:fc:e6:98:54:
         38:7e:88:d5:fb:e0:37:f9:0b:29:63:f2:1b:fb:6e:6a:06:ae:
         e9:e4:6f:84:26:0d:4e:74:8b:99:60:69:b5:e6:e6:c7:14:5f:
         16:ea:de:9c:c1:37:56:41:b3:14:59:b1:0a:92:d2:e6:17:fc:
         5a:0a:1c:03:c3:53:1b:d7:e1:7a:5b:95:1a:f7:2e:f2:08:83:
         57:3f:9e:71:3e:7e:34:45:85:88:bb:63:7a:6c:3a:9d:06:40:
         e3:75:42:ca:16:43:3b:01:25:04:2c:38:f7:f2:e9:fe:9d:c3:
         35:25:18:d5:5c:89:76:65:8c:5e:e7:e0:bd:bf:59:3f:e0:63:
         27:ae:ef:ac:a9:c8:db:c0:92:59:62:81:8f:94:5e:51:50:27:
         95:dd:5f:17:1e:1f:07:f5:12:e7:ab:e8:c7:3d:39:1e:dc:3e:
         85:a9:b9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 10:33:22 2026 by rpki-client