Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/hOOlVdJh3TLxBhVGYpV82qCdDQY.cer
File:                     hOOlVdJh3TLxBhVGYpV82qCdDQY.cer (raw, json)
Hash identifier:          bvCHg6DUhYlwEYrkEEMD9ChtZR6Jn4bKT89jLPtCIMg=
Subject key identifier:   84:E3:A5:55:D2:61:DD:32:F1:06:15:46:62:95:7C:DA:A0:9D:0D:06
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4196
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Tue 21 Jul 2026 00:07:26 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37196
                          IP: 41.219.0.0/18
                          IP: 2c0f:10a0::/32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 20:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16790 (0x4196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jul 21 00:07:26 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F36E05BFAF, serialNumber=84E3A555D261DD32F106154662957CDAA09D0D06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7e:8f:05:94:84:0f:29:61:5f:7e:1a:36:7c:
                    85:48:08:fb:00:19:f2:dc:ae:62:63:94:9f:60:d4:
                    b9:d0:c7:1e:99:55:51:3f:89:a5:cb:8f:6d:1f:c2:
                    bd:b9:20:56:b0:55:ee:0c:26:63:a6:2b:2c:da:14:
                    91:87:1e:7a:4a:9f:10:a9:e3:fd:e3:08:aa:d2:be:
                    0d:8b:9a:ea:7e:aa:18:88:45:1c:7f:b4:b6:62:3a:
                    0a:a1:c1:36:1d:f0:a7:d0:a5:d9:3c:8f:50:63:4c:
                    c4:a7:b2:bf:e8:12:24:17:fd:80:a4:a8:f9:63:5a:
                    ba:6b:2b:91:e5:22:df:8b:69:7c:8e:ff:f5:ed:e1:
                    46:ac:66:4b:7d:24:cd:ac:2b:21:1a:f9:8c:75:c9:
                    1b:d3:c8:db:96:d9:f4:ff:38:9a:98:93:e1:e4:bc:
                    e6:ca:50:cf:d3:c9:ab:52:04:5b:72:ab:8c:73:d4:
                    cd:5c:30:b8:64:34:07:cc:e6:78:65:e3:79:0e:56:
                    dc:c3:49:84:ca:b4:04:3e:0f:e9:a3:33:eb:49:0b:
                    2a:fc:61:64:78:47:58:66:e5:ab:10:e6:0d:73:a8:
                    c5:15:76:5e:f4:6a:0e:85:33:fe:ea:ad:07:28:7b:
                    3c:3d:f7:30:dd:1c:c8:c8:a7:69:b1:f1:22:98:06:
                    65:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E3:A5:55:D2:61:DD:32:F1:06:15:46:62:95:7C:DA:A0:9D:0D:06
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37196

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.219.0.0/18
                IPv6:
                  2c0f:10a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:55:da:a4:01:0f:d2:55:21:d3:52:2c:69:dc:4d:f5:6b:e1:
         4e:95:2b:8d:61:8a:5b:15:1f:4f:41:28:02:c3:8f:9e:f0:2c:
         c6:6c:3d:3e:4c:9b:2d:7b:77:60:31:bd:f7:92:fc:ab:81:7a:
         59:6b:e1:f9:d8:24:1b:24:02:70:b9:6d:00:ae:e1:01:fa:7a:
         0c:f6:fb:09:29:f4:20:40:92:90:80:4e:1c:3c:79:b6:9a:39:
         a2:a4:bc:45:b3:b3:ec:60:ac:46:2a:a0:69:2c:75:48:50:fb:
         90:56:f1:45:82:d4:b9:ac:32:63:b1:dc:9f:5f:7b:68:bf:06:
         3d:89:8d:50:aa:67:91:3d:8f:37:3b:96:3f:00:17:10:84:bb:
         86:79:b1:c9:f7:2b:28:b2:02:7c:e7:47:3d:93:95:23:d6:07:
         8e:e6:13:08:08:56:66:0a:6d:14:ae:16:98:fb:72:a7:c4:00:
         fb:32:c1:27:71:9a:49:1c:62:f1:c3:e0:94:42:6e:1d:8c:84:
         b6:0e:7c:db:61:66:0b:c8:bd:54:f6:2e:ec:7c:06:cf:51:3e:
         2b:15:4d:ad:4d:7b:84:cc:36:cf:ff:85:a6:61:f4:5a:02:eb:
         2d:d2:c6:1a:9e:40:ba:76:06:ea:d9:ec:02:3f:84:8f:2c:5d:
         ba:1f:c2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:11:03 2026 by rpki-client