Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/IrHCTE_knGjBdmKP2mTmgXP2Hg8.cer
File: IrHCTE_knGjBdmKP2mTmgXP2Hg8.cer (raw, json)
Hash identifier: ryNgScUhCiqmF7FDm5jWPKSer8E2LzB9fHYA3dWuAHs=
Subject key identifier: 22:B1:C2:4C:4F:E4:9C:68:C1:76:62:8F:DA:64:E6:81:73:F6:1E:0F
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 4005
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 24 Feb 2026 08:06:50 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 37473
IP: 154.115.192.0/18
IP: 197.157.244.0/22
IP: 2c0f:f710::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16389 (0x4005)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC, serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Validity
Not Before: Feb 24 08:06:50 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F36CE430AF, serialNumber=22B1C24C4FE49C68C176628FDA64E68173F61E0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:f4:8c:b0:70:e5:bf:3c:0b:42:9e:64:ea:b6:
8e:41:8f:29:64:0c:29:6b:f1:9b:2f:dc:89:e0:ef:
d5:cf:db:f8:4f:ac:5c:9d:eb:76:80:61:02:56:16:
8f:19:c9:dc:f0:52:ed:3f:51:9a:b6:6e:e4:90:60:
f8:03:ed:4a:8b:51:e3:38:1c:6f:ca:fd:7d:34:7d:
bf:bc:3a:53:69:34:20:2b:f4:69:74:20:e4:70:1e:
35:3a:27:db:c7:43:fc:30:fd:32:53:0c:dc:0a:10:
e5:99:39:1c:aa:c6:da:4b:9b:31:78:e7:66:f4:bc:
0d:3c:40:8d:1f:46:0f:d7:27:be:aa:6b:02:78:34:
25:72:0a:33:44:b7:d1:7a:cd:34:c3:f9:f5:b9:22:
43:ca:27:77:1b:74:0a:8e:3c:54:b1:95:93:69:54:
32:36:8a:1c:db:9f:f3:16:58:74:f4:6f:46:60:bd:
1c:0a:8a:cb:6c:3d:a2:0f:d4:b0:0a:88:10:b4:e4:
8e:93:e9:e8:89:16:45:60:64:9c:61:ed:cc:b2:5f:
b9:16:d2:5a:64:88:5d:65:4a:fe:35:b9:4b:2b:1c:
8d:7a:56:16:41:e7:24:79:2a:97:51:3f:4b:ca:ac:
a7:19:b9:26:44:c1:f5:7a:ec:0b:9b:6e:12:e0:1b:
34:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B1:C2:4C:4F:E4:9C:68:C1:76:62:8F:DA:64:E6:81:73:F6:1E:0F
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37473
sbgp-ipAddrBlock: critical
IPv4:
154.115.192.0/18
197.157.244.0/22
IPv6:
2c0f:f710::/32
Signature Algorithm: sha256WithRSAEncryption
b1:09:12:33:25:04:d3:0c:ab:5b:9e:e8:8c:d8:52:96:25:fb:
15:6c:ba:17:ba:6b:bb:b7:54:5e:ac:83:6e:22:1a:5b:45:b3:
32:5c:7c:20:12:8b:4d:1d:0b:dd:59:93:a1:e3:39:df:59:98:
75:c3:21:f4:94:df:af:69:cc:a3:3a:76:2c:92:ef:b9:11:d9:
70:ab:e8:a4:17:f1:50:97:49:b2:1b:04:ee:cd:06:02:59:53:
e6:8d:28:5e:9e:1c:30:e2:49:15:04:4f:7e:fb:0e:c8:17:d6:
28:27:dc:2b:1b:4e:8f:97:90:58:6e:0a:18:26:e9:68:0c:04:
3a:84:a3:c5:8c:9b:46:93:89:e2:66:81:8e:70:b8:89:0f:04:
aa:7d:7b:6c:43:b5:20:e6:a0:21:41:cd:f4:47:fc:45:f3:9a:
6c:b2:be:ca:b9:08:c3:70:76:bc:79:23:48:e0:59:77:08:2b:
dc:73:83:2a:93:22:5d:9d:a8:e1:3c:b1:c2:a2:5d:13:03:14:
50:b5:be:79:80:90:6e:02:c8:33:77:89:10:2a:b6:16:36:5f:
29:fc:83:5f:4f:05:3d:93:b6:0a:35:6b:50:22:6e:45:1d:5c:
e5:61:cf:dc:d5:70:83:7b:95:5e:a9:25:95:7c:3e:11:6b:98:
5c:98:ae:be
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgICQAUwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNjAyMjQwODA2NTBaFw0yNzAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkNFNDMwQUYxMTAvBgNVBAUTKDIyQjFDMjRDNEZFNDlDNjhDMTc2NjI4
RkRBNjRFNjgxNzNGNjFFMEYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD49IywcOW/PAtCnmTqto5BjylkDClr8Zsv3Ing79XP2/hPrFyd63aAYQJWFo8Z
ydzwUu0/UZq2buSQYPgD7UqLUeM4HG/K/X00fb+8OlNpNCAr9Gl0IORwHjU6J9vH
Q/ww/TJTDNwKEOWZORyqxtpLmzF452b0vA08QI0fRg/XJ76qawJ4NCVyCjNEt9F6
zTTD+fW5IkPKJ3cbdAqOPFSxlZNpVDI2ihzbn/MWWHT0b0ZgvRwKistsPaIP1LAK
iBC05I6T6eiJFkVgZJxh7cyyX7kW0lpkiF1lSv41uUsrHI16VhZB5yR5KpdRP0vK
rKcZuSZEwfV67AubbhLgGzS9AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUIrHCTE/k
nGjBdmKP2mTmgXP2Hg8wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZDRTQzMC9DMUM2NUVGRTExNTcx
MUYxQkFGRDEwQUJEQUU0RUM5Qy8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Q0U0MzAvQzFDNjVFRkUxMTU3MTFGMUJBRkQxMEFCREFFNEVDOUMvSXJIQ1RF
X2tuR2pCZG1LUDJtVG1nWFAySGc4Lm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAkmEwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAaac8ADBALFnfQwDQQC
AAIwBwMFACwP9xAwDQYJKoZIhvcNAQELBQADggEBALEJEjMlBNMMq1ue6IzYUpYl
+xVsuhe6a7u3VF6sg24iGltFszJcfCASi00dC91Zk6HjOd9ZmHXDIfSU369pzKM6
diyS77kR2XCr6KQX8VCXSbIbBO7NBgJZU+aNKF6eHDDiSRUET377DsgX1ign3Csb
To+XkFhuChgm6WgMBDqEo8WMm0aTieJmgY5wuIkPBKp9e2xDtSDmoCFBzfRH/EXz
mmyyvsq5CMNwdrx5I0jgWXcIK9xzgyqTIl2dqOE8scKiXRMDFFC1vnmAkG4CyDN3
iRAqthY2Xyn8g19PBT2Ttgo1a1AibkUdXOVhz9zVcIN7lV6pJZV8PhFrmFyYrr4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:35:02 2026 by rpki-client