Certificate
$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/tMdZdvpSJ85uClDKwIgL6Jbo_S4.cer
File: tMdZdvpSJ85uClDKwIgL6Jbo_S4.cer (raw, json)
Hash identifier: NmXEP5pVEttMDOWmPbdBNeXPHF/EHGx65lSCNAJFUyE=
Subject key identifier: B4:C7:59:76:FA:52:27:CE:6E:0A:50:CA:C0:88:0B:E8:96:E8:FD:2E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 4295
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3642481/0F3F4538BE5011F1A7F42E1ECF1D38B0/tMdZdvpSJ85uClDKwIgL6Jbo_S4.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3642481/0F3F4538BE5011F1A7F42E1ECF1D38B0/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Fri 02 Oct 2026 10:57:36 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 328258
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 26 Oct 2026 00:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17045 (0x4295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Oct 2 10:57:36 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F3642481AF, serialNumber=B4C75976FA5227CE6E0A50CAC0880BE896E8FD2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:3e:d4:36:b4:51:07:64:34:ab:c2:0e:c3:
d1:a4:00:8f:c1:88:37:0d:84:10:3a:23:d9:b3:35:
42:8d:21:2f:92:9d:e9:19:95:b6:6f:a9:21:33:4d:
19:52:45:2b:6e:20:8f:db:fa:88:a6:f3:0a:44:82:
9c:95:68:b8:ee:2b:49:46:a3:42:d2:73:f1:b8:36:
ba:0b:3d:d6:50:21:aa:b0:4c:a7:d3:98:f3:cc:d2:
61:73:66:d5:ce:aa:21:9d:ad:8f:23:f6:6e:7a:81:
bf:f7:0f:c5:f8:cc:54:b1:b3:b2:f9:15:e4:e9:5e:
ab:7c:f8:06:ac:a6:1a:73:74:18:9c:36:a0:57:9f:
fa:32:61:66:4d:5a:7a:ad:13:3b:47:04:fa:c4:57:
a1:98:18:81:06:af:bd:dd:07:7b:eb:e2:d9:c8:e7:
2e:88:8d:ac:25:03:81:50:1e:46:7a:4c:6c:8d:ce:
49:97:4a:f0:2f:2a:42:0f:e5:13:7c:3d:58:c7:2c:
1e:73:51:4e:e4:db:e5:73:9b:05:35:64:b3:1e:3d:
58:cc:b8:c5:20:54:54:0a:c1:31:a7:6a:d5:0b:71:
9e:c8:bc:4f:67:d5:b4:97:06:89:b3:2e:b8:08:17:
6d:3b:d5:2c:d5:b4:db:55:f8:ee:2f:79:d6:ef:86:
41:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C7:59:76:FA:52:27:CE:6E:0A:50:CA:C0:88:0B:E8:96:E8:FD:2E
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642481/0F3F4538BE5011F1A7F42E1ECF1D38B0/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642481/0F3F4538BE5011F1A7F42E1ECF1D38B0/tMdZdvpSJ85uClDKwIgL6Jbo_S4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328258
Signature Algorithm: sha256WithRSAEncryption
78:02:b6:ab:90:28:ac:77:d1:24:3d:11:61:33:27:49:37:9b:
76:76:37:28:8e:44:7b:bd:93:76:ef:31:75:da:b2:d6:7c:08:
07:7c:32:a6:f0:02:68:25:60:4f:e7:8f:95:2b:6b:ad:99:d2:
97:e1:8f:18:5f:55:3b:3f:15:c5:c4:18:cb:3f:7a:fe:3c:b3:
d5:57:28:99:3d:78:7c:fd:6c:e4:4f:cf:79:1a:40:cc:ee:91:
8e:f8:a0:bc:75:68:c7:7f:63:13:8b:18:b6:74:c5:b9:ba:bb:
d1:6d:13:5f:ab:95:08:21:10:d5:4f:73:0c:2c:19:82:dc:ac:
54:7f:9e:dc:bb:26:30:74:34:4f:f2:6d:c0:f2:8e:a1:a9:fb:
82:8a:09:96:f3:8c:a8:00:e3:24:b1:95:7e:7d:c9:4e:8d:5f:
98:44:11:eb:0b:94:d8:4b:42:09:35:25:13:01:8b:eb:79:86:
bf:5a:b3:37:28:69:c6:26:8d:70:c3:65:b1:3b:6b:14:74:c1:
e1:ae:d7:00:5a:4a:58:6d:73:b8:74:7c:51:63:58:d8:ee:ba:
31:d2:27:5d:6e:cf:f1:2f:42:b4:11:16:10:22:d2:02:86:4c:
4a:c4:af:f6:71:31:2c:71:54:e3:2d:01:50:f5:78:7a:fa:43:
1b:aa:eb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:32:22 2026 by rpki-client