$ rpki-client -vvf 0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.mft File: 81C294D4B365DC4172B5A21B67F05B20D6B87A62.mft (raw, json) Hash identifier: BIcDwXNNYLvO7mSBh4JwetJJ3PKOAcNuyreCLwxKxwI= Subject key identifier: BE:37:61:CF:55:64:3A:67:44:0A:D2:8A:62:58:F5:C1:55:BC:C7:AF Authority key identifier: 81:C2:94:D4:B3:65:DC:41:72:B5:A2:1B:67:F0:5B:20:D6:B8:7A:62 Certificate issuer: /CN=A9124B5E0000/serialNumber=81C294D4B365DC4172B5A21B67F05B20D6B87A62 Certificate serial: 8F059E6E877B1F50A2F36ABC0838623A0495E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gcKU1LNl3EFytaIbZ_BbINa4emI.cer Subject info access: rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.mft Manifest number: 0692 Signing time: Fri 25 Apr 2025 20:07:10 +0000 Manifest this update: Fri 25 Apr 2025 20:02:10 +0000 Manifest next update: Sat 26 Apr 2025 23:12:10 +0000 Files and hashes: 1: 323430343a393534303a3a2f33322d3438203d3e2038383838.roa (hash: BxFsrzumuEizXW1OZ+2dBEtvQc7tLJgim5qcabbGLAI=) 2: 81C294D4B365DC4172B5A21B67F05B20D6B87A62.crl (hash: xoDHCM8S0V9Hh0QC8pGElRnuT5ijChPz1F804R8R1K4=) 3: 323430343a393534303a3a2f33322d3438203d3e203234323432.roa (hash: QMW7EisNM58wXobnv8hP3W8auxaZgb7Kd6ejGzBncc0=) 4: 3130332e3133362e3134372e302f32342d3234203d3e203433333537.roa (hash: FpHK28DpD9l5nAIcc3Ek41mdlViQ6T8gQOW6vTGtWWg=) 5: 3130332e3133362e3134342e302f32322d3234203d3e2038383838.roa (hash: OH54hsN7ix3smnWfB5dcsljFMr9q0Rb4SlCx5jbhNB0=) 6: 3130332e3133362e3134342e302f32322d3234203d3e203234323432.roa (hash: l6MIQdPT2yk37XypHIcImtlv6ZtgbKzrRMvLzOHMApw=) 7: 3130332e3133362e3134342e302f32322d3234203d3e203233383538.roa (hash: iH2oia2Pml9f/9XwlXkYYtECRIy+if9oRn7xcLzgjjY=) Validation: OK Signature path: rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.crl rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gcKU1LNl3EFytaIbZ_BbINa4emI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 23:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8f:05:9e:6e:87:7b:1f:50:a2:f3:6a:bc:08:38:62:3a:04:95:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000, serialNumber=81C294D4B365DC4172B5A21B67F05B20D6B87A62 Validity Not Before: Apr 25 20:02:10 2025 GMT Not After : Apr 26 23:12:10 2025 GMT Subject: CN=BE3761CF55643A67440AD28A6258F5C155BCC7AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4d:43:72:b3:ce:3c:b7:53:93:03:ea:05:82: 94:c9:62:1e:cb:33:04:b3:ef:af:9c:fa:26:aa:ce: ad:a5:b5:68:4f:e0:59:27:41:09:e9:e0:cc:ef:57: 01:d7:bd:87:92:fa:e9:8a:b9:8c:65:c4:4a:d2:ba: e1:52:c4:4d:cb:e8:2b:6f:b7:49:34:b1:85:eb:cb: 66:e4:fc:dd:c7:73:cd:ba:1a:bc:bf:4d:8a:44:e3: f0:4e:47:23:2c:e1:fb:16:1e:86:41:47:31:fe:a0: 8c:a4:a1:b2:80:fe:ac:20:eb:93:c4:48:9d:73:5c: b5:f6:cf:96:dd:66:44:f6:f5:7f:5e:03:82:99:9d: 51:b8:e9:88:e6:4b:73:2f:87:40:4e:02:04:c4:dd: b5:7d:f0:69:0f:8c:f8:79:57:ed:aa:26:9c:7c:b8: 36:ef:a9:94:a6:14:57:56:5a:47:00:dc:de:9c:87: 55:ae:88:c5:c9:27:e2:b2:6d:a2:56:dd:f1:60:17: 5c:b7:7e:65:d5:ec:f7:df:2e:ad:33:e5:db:21:7a: 1c:c4:95:f3:ad:d4:6e:7f:5e:46:0f:fd:5e:c1:1f: 4a:02:a7:b3:d4:9e:77:1e:cf:fa:23:3c:a0:27:23: 55:1a:0d:af:73:bf:f6:34:79:ff:31:4c:5c:70:63: 92:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:37:61:CF:55:64:3A:67:44:0A:D2:8A:62:58:F5:C1:55:BC:C7:AF X509v3 Authority Key Identifier: keyid:81:C2:94:D4:B3:65:DC:41:72:B5:A2:1B:67:F0:5B:20:D6:B8:7A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gcKU1LNl3EFytaIbZ_BbINa4emI.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ad:b0:0a:44:5f:70:96:1b:e2:8d:0a:bf:01:a4:c9:62:a2: b0:17:45:10:4b:3d:a5:ad:c3:df:89:ff:97:eb:50:bd:ad:0b: 5b:bf:a7:c5:10:13:86:05:90:3a:51:45:ac:85:89:6f:33:1d: 94:b4:a1:85:2b:4f:68:d3:fa:bf:f6:13:dc:40:cf:85:2b:6b: 43:31:ae:8d:e1:41:25:dc:9b:b5:d2:65:0b:0a:75:10:c5:94: ef:16:28:51:64:2f:6c:d1:d5:60:10:9d:47:6b:57:87:ef:c0: a1:39:c0:29:48:02:6c:2e:27:f9:3e:0e:be:dd:6a:e0:77:5f: 2a:1d:78:6d:65:67:ac:7f:bf:e3:ef:51:09:de:03:bf:00:60: 5c:1e:8a:84:a2:01:ba:92:03:95:97:62:34:26:c0:24:96:59: 4a:f1:d9:93:81:c7:9c:85:ae:18:64:a9:2e:c9:78:e7:56:cf: 8f:64:21:4a:93:17:58:c9:b0:09:80:5f:78:61:46:68:8d:a3: 02:b7:8f:99:57:9a:82:81:21:ec:4b:1a:2a:38:30:93:54:9b: b1:62:73:ec:85:f3:8b:2f:37:8e:3a:e6:fe:7e:9c:56:29:17: 4b:b7:0d:58:78:0d:73:c3:3f:f1:95:45:11:dc:0e:d5:a8:76: b5:8e:96:84 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUAI8Fnm6Hex9QovNqvAg4YjoEleAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyg4MUMyOTRENEIz NjVEQzQxNzJCNUEyMUI2N0YwNUIyMEQ2Qjg3QTYyMB4XDTI1MDQyNTIwMDIxMFoX DTI1MDQyNjIzMTIxMFowMzExMC8GA1UEAxMoQkUzNzYxQ0Y1NTY0M0E2NzQ0MEFE MjhBNjI1OEY1QzE1NUJDQzdBRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOFNQ3Kzzjy3U5MD6gWClMliHsszBLPvr5z6JqrOraW1aE/gWSdBCengzO9X Ade9h5L66Yq5jGXEStK64VLETcvoK2+3STSxhevLZuT83cdzzboavL9NikTj8E5H Iyzh+xYehkFHMf6gjKShsoD+rCDrk8RInXNctfbPlt1mRPb1f14DgpmdUbjpiOZL cy+HQE4CBMTdtX3waQ+M+HlX7aomnHy4Nu+plKYUV1ZaRwDc3pyHVa6Ixckn4rJt olbd8WAXXLd+ZdXs998urTPl2yF6HMSV863Ubn9eRg/9XsEfSgKns9Sedx7P+iM8 oCcjVRoNr3O/9jR5/zFMXHBjki8CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBS+N2HP VWQ6Z0QK0opiWPXBVbzHrzAfBgNVHSMEGDAWgBSBwpTUs2XcQXK1ohtn8Fsg1rh6 YjAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi L3JlcG8vc2IvMzEvODFDMjk0RDRCMzY1REM0MTcyQjVBMjFCNjdGMDVCMjBENkI4 N0E2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD NzJGRDFGRjIvZ2NLVTFMTmwzRUZ5dGFJYlpfQmJJTmE0ZW1JLmNlcjBgBggrBgEF BQcBCwRUMFIwUAYIKwYBBQUHMAuGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzMxLzgx QzI5NEQ0QjM2NURDNDE3MkI1QTIxQjY3RjA1QjIwRDZCODdBNjIubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBvrbAKRF9wlhvijQq/AaTJYqKwF0UQSz2lrcPfif+X61C9rQtbv6fFEBOGBZA6 UUWshYlvMx2UtKGFK09o0/q/9hPcQM+FK2tDMa6N4UEl3Ju10mULCnUQxZTvFihR ZC9s0dVgEJ1Ha1eH78ChOcApSAJsLif5Pg6+3Wrgd18qHXhtZWesf7/j71EJ3gO/ AGBcHoqEogG6kgOVl2I0JsAklllK8dmTgcecha4YZKkuyXjnVs+PZCFKkxdYybAJ gF94YUZojaMCt4+ZV5qCgSHsSxoqODCTVJuxYnPshfOLLzeOOub+fpxWKRdLtw1Y eA1zwz/xlUUR3A7VqHa1jpaE -----END CERTIFICATE-----Generated at Sat Apr 26 05:09:16 2025 by rpki-client