Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/gVdGXshx9nfFuXh07KV5IzijWSQ.cer
File:                     gVdGXshx9nfFuXh07KV5IzijWSQ.cer (raw, json)
Hash identifier:          ZtauEvSwMvi1yWWAvTh1c85U8b7WT5pIXlrDl0oUwb0=
Subject key identifier:   81:57:46:5E:C8:71:F6:77:C5:B9:78:74:EC:A5:79:23:38:A3:59:24
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4229
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Wed 09 Sep 2026 10:09:29 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37503
                          IP: 41.76.8.0/21
                          IP: 197.231.128.0/21
                          IP: 2c0f:f890::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16937 (0x4229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Sep  9 10:09:29 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3645EEFAF, serialNumber=8157465EC871F677C5B97874ECA5792338A35924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:35:ec:00:4b:a0:b2:b5:4f:6b:f9:0b:69:72:
                    1a:00:61:85:fc:98:aa:d9:8d:b2:31:6b:36:b8:5d:
                    6c:f4:ca:42:44:65:a7:5f:7f:80:2d:39:45:85:93:
                    c4:a1:5a:0f:73:86:2b:d5:d2:4f:b1:81:3e:f9:0c:
                    f7:5e:fa:02:85:ac:bf:97:8a:61:ef:e0:1e:2d:2d:
                    3d:4b:3e:77:7f:2d:93:5c:5e:3c:8a:58:8a:e6:7c:
                    a0:e7:73:7f:d7:29:de:c0:a9:6b:45:ad:4e:92:df:
                    a0:93:24:80:1d:b7:bd:26:79:e5:df:f5:89:be:fd:
                    7e:a4:c3:e5:b2:b4:50:e4:1b:9b:c8:88:3f:8f:6b:
                    c4:c0:d2:15:1b:ef:04:ac:d9:55:91:c3:98:7a:67:
                    5f:3f:1a:99:7c:fc:8a:e1:7a:c3:66:bc:58:61:5b:
                    04:06:fb:a3:f6:d5:49:ee:bf:b2:cd:43:76:7e:2e:
                    ed:ef:a3:5f:b8:68:76:6b:29:19:73:c1:7d:36:db:
                    a4:27:c8:00:10:f4:40:26:a7:54:c9:94:b0:a9:85:
                    18:0b:12:5b:7d:85:c7:02:a1:59:60:52:5e:1e:50:
                    26:c4:ab:a7:c2:06:07:f7:ab:84:f8:f7:92:d1:a5:
                    ee:1c:86:44:b1:1e:a5:2c:03:63:32:2d:d8:95:7f:
                    d1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:57:46:5E:C8:71:F6:77:C5:B9:78:74:EC:A5:79:23:38:A3:59:24
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645EEF/87197ABEAC3611F18B3B8CB7CE1D38B0/gVdGXshx9nfFuXh07KV5IzijWSQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37503

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.76.8.0/21
                  197.231.128.0/21
                IPv6:
                  2c0f:f890::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:f7:57:95:4f:93:96:7c:86:b8:01:70:7a:eb:51:69:53:4a:
         39:d2:13:e3:0a:f8:a3:60:ae:38:51:a7:c1:ff:4f:7d:86:53:
         a7:5a:74:e3:d9:3e:b0:a9:86:ec:41:9b:23:a2:9a:d6:e7:e3:
         9e:9b:e4:fb:74:ec:43:ff:d5:e4:06:f3:a3:64:89:a4:40:16:
         e5:b8:ac:6e:5d:9b:10:d6:8a:a3:eb:ee:a9:3e:c4:63:ea:9c:
         b0:97:61:8b:25:7a:7c:4d:c3:f7:fd:39:cc:d6:2a:4a:09:2a:
         ad:51:51:c8:c7:93:45:f3:40:65:67:84:d1:84:a3:00:19:e3:
         8e:65:c8:ca:1a:b3:96:1a:3a:ac:e0:a0:c5:d2:2b:a7:c6:32:
         b4:eb:4c:4c:bb:59:cf:47:9e:47:2f:1a:0b:c2:a4:17:dd:89:
         36:52:90:41:2e:03:fd:db:ea:7f:0e:2c:e5:7e:bc:04:0b:64:
         b6:de:8e:6e:9f:f7:0e:7f:cf:15:d3:bd:ae:43:dc:73:fd:af:
         9f:3e:97:80:c4:0a:4c:3d:c8:d8:76:5b:a9:2b:ba:2b:bd:ac:
         60:9d:76:12:fd:f6:70:70:1a:88:6a:40:b6:de:1c:7b:28:f5:
         af:12:d8:7f:67:80:0c:54:16:29:c5:e4:34:6d:45:28:63:d1:
         77:3a:3f:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 19 10:40:27 2026 by rpki-client