This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/q_mWDIW8-JONWDN_jLfF603Es64.cer
File: q_mWDIW8-JONWDN_jLfF603Es64.cer (raw, json)
Hash identifier: AvZFx3EqG4mWYwMlTxEnPvbEG3ERoVwjBgRdGyNWrGg=
Subject key identifier: AB:F9:96:0C:85:BC:F8:93:8D:58:33:7F:8C:B7:C5:EB:4D:C4:B3:AE
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3953
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/q_mWDIW8-JONWDN_jLfF603Es64.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 01 Jan 2026 01:26:46 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 36932
AS: 36940
IP: 196.49.26.0/24
IP: 196.49.28.0/24
IP: 196.49.30.0/24
IP: 196.49.32.0/24
IP: 196.216.148.0/22
IP: 2001:43f8:bb0::/47
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14675 (0x3953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Jan 1 01:26:46 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F364814FAF, serialNumber=ABF9960C85BCF8938D58337F8CB7C5EB4DC4B3AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:f4:29:38:0a:ce:92:97:e7:f8:bb:60:8f:
7a:e6:dd:39:a2:63:1a:38:de:ff:f3:d0:15:b8:1d:
4c:cd:9b:03:a0:2c:ac:61:0c:e6:ec:08:fb:d7:05:
32:35:65:ce:a9:b9:84:6f:74:bb:d8:7d:06:c3:3f:
c5:4f:fb:10:dd:50:cf:b1:a8:12:39:43:23:45:ab:
33:b8:bf:d6:46:43:43:07:ed:66:85:a6:62:a9:ca:
11:5a:6e:f7:67:8f:59:2c:e6:0d:14:1e:af:8e:23:
9f:4d:69:10:b4:30:7f:49:b3:e2:aa:bc:64:52:a2:
dd:c4:a1:ea:c6:ee:8c:c9:1a:8f:01:4a:3b:14:8d:
43:36:f9:38:da:4c:6c:71:cf:43:5a:d8:dc:17:6f:
06:9f:48:f5:99:7d:98:d5:ca:b4:c0:f9:f2:80:56:
c4:13:68:cb:14:8e:5d:06:64:4c:86:30:77:b2:6f:
3e:0c:26:8c:75:90:fe:3a:f6:2b:ee:2b:83:7f:f5:
cd:95:48:ea:48:49:b9:44:57:c3:67:b9:58:ec:62:
c4:f6:2f:56:20:44:a6:6f:23:be:39:af:5c:f7:49:
ff:b3:f0:b9:c1:cf:ab:f7:f0:d4:f5:04:70:24:4f:
6e:b1:7f:4a:38:cb:0c:6d:8e:d3:9f:3d:2c:72:a5:
1f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F9:96:0C:85:BC:F8:93:8D:58:33:7F:8C:B7:C5:EB:4D:C4:B3:AE
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/q_mWDIW8-JONWDN_jLfF603Es64.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36932
36940
sbgp-ipAddrBlock: critical
IPv4:
196.49.26.0/24
196.49.28.0/24
196.49.30.0/24
196.49.32.0/24
196.216.148.0/22
IPv6:
2001:43f8:bb0::/47
Signature Algorithm: sha256WithRSAEncryption
12:74:af:32:c9:28:b3:53:8b:10:98:55:25:2a:ef:75:1f:ea:
bc:67:c3:d2:71:ff:c4:cf:86:c8:d3:dc:58:71:4e:d4:6f:66:
54:79:6a:fd:03:28:c5:57:47:a5:b4:3b:f3:e5:b2:50:7b:6b:
1f:30:50:35:44:b6:1e:a5:ab:82:62:d0:86:f8:79:81:3a:b0:
37:b6:93:c6:1f:18:f2:03:17:01:b4:78:84:0f:51:a9:e9:2a:
48:43:4f:ae:da:e7:67:e5:93:14:3a:6e:f4:54:4f:47:80:bc:
92:6d:6b:76:92:e4:00:43:5b:a5:bb:8d:1d:63:41:b3:c3:47:
54:7f:aa:22:f3:4d:b8:75:ea:0c:22:07:22:e7:de:7b:1a:a2:
e9:3a:43:8b:90:b5:45:2c:d9:51:b3:92:1c:57:4e:fe:2d:6f:
c7:04:4c:ce:df:ed:4f:8c:7c:ab:4c:9a:de:3e:da:52:a2:f2:
9d:88:96:ce:78:6d:73:b3:7d:4c:ca:f1:4e:30:32:8c:22:43:
14:58:2f:72:54:0f:dc:f2:25:b0:24:86:46:25:62:a5:2c:8f:
69:33:49:fb:e1:ef:93:56:3d:bd:6b:40:f8:40:4d:b8:b1:55:
6f:c3:36:0a:a9:24:f5:d5:b3:70:ab:a9:1a:be:ab:cd:27:e5:
c3:df:c6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:58:07 2026 by rpki-client