Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/9IqmBpNggAY3Hal9QzLWOAFFg1M.cer
File:                     9IqmBpNggAY3Hal9QzLWOAFFg1M.cer (raw, json)
Hash identifier:          XdF5pDioxwvrPvXCH+ZnGPi6L/00ECvDS7cH5JjTZUg=
Subject key identifier:   F4:8A:A6:06:93:60:80:06:37:1D:A9:7D:43:32:D6:38:01:45:83:53
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4340
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
CRL Distribution Point:   rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36EBDC4/20526216DE7F11F18DE28F08CF1D38B0/9IqmBpNggAY3Hal9QzLWOAFFg1M.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36EBDC4/20526216DE7F11F18DE28F08CF1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Thu 12 Nov 2026 09:55:08 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37269
                          IP: 105.235.192.0/20
                          IP: 2c0f:ea40::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17216 (0x4340)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Nov 12 09:55:08 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36EBDC4AF, serialNumber=F48AA60693608006371DA97D4332D63801458353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f0:a6:49:71:c3:cb:12:6f:ac:de:c0:4b:42:
                    a4:22:40:1b:f3:21:b7:6a:e0:75:8d:41:1e:83:33:
                    47:31:dc:ba:e6:32:23:ae:31:b4:3c:e7:ea:5c:be:
                    c8:17:36:f8:8c:eb:f2:29:e7:6c:51:dc:de:52:fc:
                    4d:20:4d:b5:6d:c7:aa:9c:2d:9f:0a:50:f0:f2:9c:
                    79:10:3e:57:3e:55:a4:62:e8:fa:df:ec:51:db:08:
                    6a:c3:23:c6:81:d4:fd:da:d9:09:15:9d:c2:b4:5e:
                    95:c1:62:b8:da:89:05:ca:df:9a:52:23:82:6f:76:
                    6b:99:4d:d0:82:f5:94:29:cf:c5:e5:3a:be:39:14:
                    37:43:64:8e:7a:c1:3f:25:75:09:b0:d5:70:15:b4:
                    1f:68:67:ec:a3:20:36:be:8a:ab:86:a6:09:fe:b9:
                    44:e7:e6:13:7a:03:d8:cc:4c:f3:99:67:20:b1:c7:
                    8e:d5:56:9e:e5:8b:26:13:5d:10:63:0d:c7:cc:dc:
                    4f:c1:2b:8c:bf:30:6d:fd:6b:e0:3f:22:16:9c:1b:
                    fc:e8:6d:97:a7:5b:39:c5:47:d6:f3:ca:d3:88:92:
                    80:2b:c9:a9:e3:ce:31:eb:a0:25:02:61:c5:cf:29:
                    a7:7f:d6:cf:a4:e6:a4:ff:13:9c:4c:6a:48:66:8f:
                    75:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8A:A6:06:93:60:80:06:37:1D:A9:7D:43:32:D6:38:01:45:83:53
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDC4/20526216DE7F11F18DE28F08CF1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDC4/20526216DE7F11F18DE28F08CF1D38B0/9IqmBpNggAY3Hal9QzLWOAFFg1M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37269

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.235.192.0/20
                IPv6:
                  2c0f:ea40::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:8e:1e:1a:9b:8b:05:0b:46:22:5d:9e:68:77:a7:1d:ad:c8:
         82:19:54:f1:6e:f1:4b:61:63:59:c6:4b:05:d9:36:e1:9e:7c:
         93:75:81:86:45:0e:44:e3:55:88:e5:5b:8f:1d:d5:40:ba:b9:
         43:b5:b8:e5:20:14:8c:fb:11:d2:c2:dc:ea:a0:50:e8:a6:5a:
         89:38:de:da:31:4e:ee:2a:99:63:0f:fd:2c:64:de:c1:f9:a9:
         ac:0f:c3:69:48:b5:c1:81:08:b2:28:a2:72:e7:de:50:92:45:
         8c:82:40:b5:e4:98:63:ff:f0:28:9a:d6:a2:e2:d6:1f:96:c4:
         79:32:bd:a2:37:f6:30:ea:53:9d:7f:25:51:2d:7b:db:56:c1:
         66:8f:6c:ff:a7:76:0f:fb:11:6b:bd:7a:c5:e2:fd:fa:01:32:
         22:00:df:78:e0:0d:f2:3b:33:03:76:cf:e0:98:a8:ad:de:c3:
         1c:44:de:29:f1:7f:4e:8b:e0:5c:3f:af:00:a6:a3:62:c6:ac:
         75:25:2b:9d:f3:22:65:5f:83:3d:9c:a1:5f:51:0d:2c:1a:d9:
         64:45:3f:d1:cc:75:08:ee:80:3e:fb:e7:d0:dd:33:7e:7b:5a:
         11:6c:e5:5c:fc:f6:08:c1:ab:4d:2f:91:3e:39:b7:af:a8:94:
         9c:66:a6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:27:22 2026 by rpki-client