Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/ripe/CBu-ff9M0Q1agvt6aWqU1dTGrvU.cer
File: CBu-ff9M0Q1agvt6aWqU1dTGrvU.cer (raw, json)
Hash identifier: YaTTmJfB5qkSFWL9ZYPB5h0TBO5OKdFOj/WIdmLXlIw=
Subject key identifier: 08:1B:BE:7D:FF:4C:D1:0D:5A:82:FB:7A:69:6A:94:D5:D4:C6:AE:F5
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer: /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial: 112A
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F366C09A/57896126FC2111F0B4B937CBDAE4EC9C/CBu-ff9M0Q1agvt6aWqU1dTGrvU.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F366C09A/57896126FC2111F0B4B937CBDAE4EC9C/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 28 Jan 2026 08:14:26 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 80.88.10.0/24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:45:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4394 (0x112a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
Validity
Not Before: Jan 28 08:14:26 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=F366C09ARI, serialNumber=081BBE7DFF4CD10D5A82FB7A696A94D5D4C6AEF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:38:70:83:b2:59:7d:42:83:77:10:13:f9:0a:
5b:e3:44:61:31:3d:3b:25:68:5b:0d:92:0d:0d:75:
7d:02:36:fa:fc:b7:d1:0f:cd:12:02:44:7a:90:f2:
05:ce:58:85:65:da:70:b8:03:e7:8a:a3:a2:e8:83:
31:8b:57:d2:7b:29:95:a1:85:fd:b6:34:8f:85:b7:
0f:a4:04:dc:b4:48:32:79:34:42:43:48:db:19:01:
97:ce:e8:f1:32:80:b9:5a:1a:7f:a6:d4:e5:be:47:
9e:bd:73:cb:95:34:1b:59:e0:87:8a:5c:05:1d:f7:
43:ef:f4:f9:93:22:71:2a:da:41:46:6f:5e:95:57:
f0:37:8b:cc:ec:ee:75:4a:8b:eb:07:3b:e2:82:50:
92:f1:e6:eb:a6:68:d7:a7:ba:be:10:eb:44:86:40:
15:a3:86:e2:b3:c4:40:cf:8d:6b:15:61:cf:0a:05:
24:88:80:f9:6b:d0:eb:a6:24:65:86:9d:9e:4e:97:
d0:00:ef:23:21:b4:53:91:9e:bf:94:49:1e:4a:75:
82:f2:65:1f:72:a8:95:cf:de:87:3a:1c:fb:37:11:
60:4b:11:60:36:08:d0:a4:9e:57:d5:b4:d1:b8:a5:
8b:e3:1e:24:f3:4e:ea:59:d9:64:cc:70:a4:2d:73:
52:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1B:BE:7D:FF:4C:D1:0D:5A:82:FB:7A:69:6A:94:D5:D4:C6:AE:F5
X509v3 Authority Key Identifier:
keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C09A/57896126FC2111F0B4B937CBDAE4EC9C/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C09A/57896126FC2111F0B4B937CBDAE4EC9C/CBu-ff9M0Q1agvt6aWqU1dTGrvU.mft
sbgp-ipAddrBlock: critical
IPv4:
80.88.10.0/24
Signature Algorithm: sha256WithRSAEncryption
63:17:ef:ac:c5:f7:91:2e:ce:95:af:5a:7d:6c:05:92:d8:3d:
2b:6d:46:49:c8:f5:da:c6:cd:a3:89:39:9c:9e:72:d6:1b:61:
1a:25:0c:94:e5:87:46:b8:16:14:d3:c9:a4:63:36:cd:c1:9c:
3c:ef:13:fd:41:49:ec:54:ec:99:10:16:32:d4:f1:c9:f2:3a:
1a:2f:a7:a3:16:4d:ca:2a:c3:cd:6a:ce:58:85:be:c4:f4:54:
d7:5a:04:43:43:b5:64:f7:c7:c0:dd:ce:70:cf:1f:09:30:e4:
e6:19:9c:9f:77:b2:0a:82:b3:4e:6f:22:21:25:49:76:e9:a4:
49:30:3b:93:92:8c:34:a3:ae:59:bf:84:0a:37:2a:54:9b:1e:
76:a2:6d:f0:52:b5:de:3d:85:c4:a4:b5:7b:fa:a2:79:71:4c:
54:09:31:63:f1:29:f8:a6:d2:a9:03:3a:2f:ab:fa:10:4c:db:
a0:4e:aa:6b:bf:35:ff:12:74:15:11:e0:90:cd:31:cd:19:7b:
b7:68:92:fa:08:0c:2b:4d:4f:3a:6c:96:3b:c0:a0:5d:2c:68:
51:9b:83:48:e6:97:60:5c:d2:c6:5c:b4:a7:17:ed:d5:44:24:
1c:40:e2:ab:3b:29:e3:d4:3c:7e:df:b6:4f:40:62:10:a2:e1:
af:f2:21:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:38:36 2026 by rpki-client