Certificate

$ rpki-client -vvvf rpki.afrinic.net/repository/afrinic/j_JpBIbWDsmd3LdvCdugCtcHkRQ.cer
File:                     j_JpBIbWDsmd3LdvCdugCtcHkRQ.cer (raw, json)
Hash identifier:          1sixVgHzXZ2lIgTkSajt/bO4LWNYgP0Lyu4rO8AjlA8=
Subject key identifier:   8F:F2:69:04:86:D6:0E:C9:9D:DC:B7:6F:09:DB:A0:0A:D7:07:91:14
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       4330
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
CRL Distribution Point:   rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F3623C61/D0EF4604DBB711F19A9F08D5CE1D38B0/j_JpBIbWDsmd3LdvCdugCtcHkRQ.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F3623C61/D0EF4604DBB711F19A9F08D5CE1D38B0/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Sun 08 Nov 2026 21:03:23 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 37193
                          IP: 196.46.22.0/24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17200 (0x4330)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Nov  8 21:03:23 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=F3623C61AF, serialNumber=8FF2690486D60EC99DDCB76F09DBA00AD7079114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:54:fe:d7:9a:24:c7:aa:d4:2e:e5:db:bb:16:
                    f3:8b:2f:2d:b0:e3:9f:20:5d:2e:c5:6a:00:86:13:
                    55:4c:28:ba:61:e3:52:da:50:db:80:a1:ec:bc:ac:
                    55:35:5e:08:6c:bc:3e:f8:56:f8:2f:72:b7:4d:46:
                    d5:08:8e:ea:0f:fb:71:36:f4:77:79:83:09:cd:45:
                    a5:ea:39:05:ff:73:fd:50:e6:4e:23:30:e5:f4:cc:
                    42:77:1a:cb:06:19:1d:86:7f:3e:7d:1b:84:76:9b:
                    0e:e2:c4:55:07:ee:76:4f:85:f7:6f:c4:92:90:77:
                    2e:eb:ff:b7:e8:12:ba:64:2f:87:31:73:d4:ab:4e:
                    89:d3:f8:9e:30:c8:bb:af:5b:b1:c6:4d:45:6c:2f:
                    44:0c:f7:68:aa:ce:3f:1e:8c:e2:16:16:12:8b:b8:
                    c9:8b:f6:bb:01:79:cc:2c:88:9e:02:a1:44:43:f6:
                    9d:d4:07:6c:ed:65:0c:0a:8e:8e:93:90:ae:04:d6:
                    3b:d4:d3:64:df:87:47:83:10:03:a3:01:4b:9f:83:
                    89:1c:63:af:e6:19:95:7e:8b:af:dc:78:77:9a:94:
                    43:0a:77:17:8b:ec:e4:c7:80:ef:81:81:bd:0a:34:
                    63:ef:47:d9:fd:ec:33:76:4b:24:e1:5c:9a:63:cb:
                    6c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F2:69:04:86:D6:0E:C9:9D:DC:B7:6F:09:DB:A0:0A:D7:07:91:14
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C61/D0EF4604DBB711F19A9F08D5CE1D38B0/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C61/D0EF4604DBB711F19A9F08D5CE1D38B0/j_JpBIbWDsmd3LdvCdugCtcHkRQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  37193

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.46.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:5f:30:6b:f4:d9:1f:cd:7f:f1:a6:dc:da:33:7e:71:8c:c4:
         36:4f:5f:59:e9:30:69:7a:51:9e:67:aa:15:e2:ac:59:9b:10:
         de:95:54:90:d6:a1:a5:50:bf:f8:74:d9:35:b2:4e:7d:3a:b5:
         66:af:8c:d9:0a:d9:88:24:9d:3f:35:8d:00:f7:06:c2:f5:04:
         e5:d9:28:f6:50:fb:f9:2e:aa:c9:6a:86:dd:f9:31:97:f6:76:
         db:09:72:21:5f:0a:05:f1:23:8d:e3:73:b5:9d:c7:f8:f8:f5:
         23:c2:43:ea:ef:0f:c7:60:26:0f:e4:6c:9a:23:77:b7:f9:f9:
         c0:41:4c:45:f0:0e:8d:44:97:88:59:46:9f:73:c8:35:4a:28:
         0e:9d:4e:3a:4d:f8:5d:3f:17:6c:4f:08:d9:9c:db:c9:66:fa:
         b1:86:e5:6a:e4:cc:19:05:f9:c9:59:5f:57:4e:f3:67:fe:38:
         77:dc:d0:1e:24:b1:44:d2:6d:e9:2a:35:76:48:83:d7:30:03:
         dd:a7:cf:ca:d1:f2:19:4c:f7:60:0a:20:28:46:7f:85:7b:f6:
         62:b7:3d:14:31:ab:dc:7c:3d:cb:31:d7:23:de:cc:5e:cb:01:
         3c:d1:c1:07:8c:4d:e9:43:d0:8e:92:0a:5d:72:3b:d4:1d:1c:
         9e:9a:80:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:56:59 2026 by rpki-client