$ rpki-client -vvf 0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft File: D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft (raw, json) Hash identifier: x5Lg4waJmCYamimrVnJ3gXEhP+sbiY72yIdsgagsr3s= Subject key identifier: BD:BD:00:59:7B:2A:7D:2A:84:8F:1B:B7:EF:30:1B:5E:32:59:96:4E Authority key identifier: D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09 Certificate issuer: /CN=A91FD4CC0000/serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909 Certificate serial: 75DA47F0C8BAD3E52EA320E67A16DC2CC0DE674B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer Subject info access: rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft Manifest number: 0641 Signing time: Tue 04 Nov 2025 14:38:55 +0000 Manifest this update: Tue 04 Nov 2025 14:33:55 +0000 Manifest next update: Wed 05 Nov 2025 17:44:55 +0000 Files and hashes: 1: 323430333a373163303a3a2f33322d3438203d3e2033323538.roa (hash: /0TIiXzZkdshf306gvpxHBaOY31/ZlaUpzWQMbDlABE=) 2: 3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa (hash: VMZN08rr5TJWG1SskYiHeIXk4cWC6ozcRj/ZvNJ7dq0=) 3: 3130332e3132312e3230382e302f32322d3234203d3e2034373835.roa (hash: 7uF6pb9yx6cXF+5oK4jEmcHdIO+xln1/dTy3CvmNraI=) 4: 323430333a373163303a3a2f33322d3438203d3e203233393539.roa (hash: Yah6HZnMNDn4XvmcUXeHLxkyzp17P1oJRLMzMO6SZ8E=) 5: 323430333a373163303a3a2f33322d3438203d3e2034373835.roa (hash: neyYF6TgtOcAkGMz1hTMC5RbHMnVjwd7iQRSvV4vJaM=) 6: D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl (hash: qIemU3RdlAzAkaoMJDa0KqPqQNFsOLUG0ETVk2PrtmE=) 7: 3130332e3132312e3230382e302f32322d3234203d3e203233393539.roa (hash: tpj8IN3kMl+8dbcoOwEQnpMBvaMIdpHYI9uxhtsaOek=) Validation: OK Signature path: rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 17:44:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:da:47:f0:c8:ba:d3:e5:2e:a3:20:e6:7a:16:dc:2c:c0:de:67:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000, serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909 Validity Not Before: Nov 4 14:33:55 2025 GMT Not After : Nov 5 17:44:55 2025 GMT Subject: CN=BDBD00597B2A7D2A848F1BB7EF301B5E3259964E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0c:b5:84:45:39:bf:c0:6c:21:99:6a:de:72: 4b:bc:66:43:f2:f2:0a:21:c9:3b:80:af:6f:19:e7: 23:5a:8b:7a:20:aa:e3:4f:96:08:ef:b0:e5:e8:eb: f5:a2:a5:9b:91:4f:3a:dd:95:e4:97:41:93:2f:e1: 76:e5:74:6e:8f:63:cd:00:8b:16:a7:40:3a:40:f6: 93:9b:b8:3b:a6:92:aa:29:05:bb:82:ca:b8:47:74: 0a:02:50:cf:e4:8c:f7:a3:f2:76:ab:7a:25:fa:df: aa:07:78:50:dc:4d:0f:d5:4c:cd:01:f2:85:cd:20: d5:38:7a:9d:71:a0:53:b7:68:94:34:52:49:f4:4c: 48:c7:c7:30:56:3e:74:88:03:b2:4c:61:f2:c5:e0: b9:9a:c9:27:ec:2f:86:88:fa:7a:d5:49:17:4d:9a: 2a:e6:3a:ff:01:36:b8:ac:00:8a:ee:06:79:74:04: 96:b7:6a:31:d5:c1:56:1d:f4:f9:c3:3d:45:f2:91: e6:7a:03:6a:da:62:51:64:50:ca:38:74:8a:d6:ff: e9:f9:e6:77:27:17:34:08:f7:89:05:45:85:30:d5: 1e:c5:ec:09:11:02:8c:97:2c:99:5b:55:e3:6a:d8: 7a:e1:f6:8f:99:92:e6:0d:a4:09:5f:77:93:20:9a: a3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:BD:00:59:7B:2A:7D:2A:84:8F:1B:B7:EF:30:1B:5E:32:59:96:4E X509v3 Authority Key Identifier: keyid:D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:b7:01:07:c8:cd:67:fa:6f:5c:1e:05:6c:82:fb:8c:18:a7: 7f:3a:61:b1:d6:50:62:6a:df:2a:ef:56:24:cf:16:aa:ea:87: 58:de:c1:bb:6f:b5:78:b6:1d:7c:54:db:45:91:18:99:aa:10: 0b:dc:24:0f:d2:e4:11:56:65:f9:cb:1d:ea:09:1a:09:d6:cb: 73:9c:fa:42:78:60:d5:ac:75:bb:08:4e:3f:55:07:9f:a2:85: 4b:14:97:d8:ec:c9:21:36:6f:0c:aa:d4:2d:3f:ba:9d:ad:65: 0c:8f:72:b2:91:67:58:e3:57:bb:e4:47:8e:b5:4a:ed:aa:3a: df:c9:fd:77:4a:57:8d:bb:53:57:22:34:df:d2:64:5e:74:5f: 2e:69:3f:5b:70:51:fd:06:d8:65:0d:ac:e6:1c:53:19:71:98: d3:b7:0b:ac:f6:e3:a5:22:4f:c7:5b:e9:7f:32:61:90:fb:b2: 99:65:22:62:70:09:e2:6d:4f:43:9f:df:c7:f6:8a:47:f6:f9: b6:8b:82:9c:77:75:6e:21:bf:c0:2c:29:09:83:0a:4a:e6:e0: 79:80:30:7d:e8:0a:22:02:38:e4:24:df:dd:51:22:82:e0:5f: 08:af:c7:61:09:cc:08:bc:df:0a:b8:a8:fd:2d:9f:05:50:cb: dd:b1:3e:b0 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUddpH8Mi60+UuoyDmehbcLMDeZ0swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhENjdDNTMwQzhF MTZCNjFGRjUyQzA4NUIyNzg2QzY3RUNDRDZBOTA5MB4XDTI1MTEwNDE0MzM1NVoX DTI1MTEwNTE3NDQ1NVowMzExMC8GA1UEAxMoQkRCRDAwNTk3QjJBN0QyQTg0OEYx QkI3RUYzMDFCNUUzMjU5OTY0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOIMtYRFOb/AbCGZat5yS7xmQ/LyCiHJO4CvbxnnI1qLeiCq40+WCO+w5ejr 9aKlm5FPOt2V5JdBky/hduV0bo9jzQCLFqdAOkD2k5u4O6aSqikFu4LKuEd0CgJQ z+SM96Pydqt6Jfrfqgd4UNxND9VMzQHyhc0g1Th6nXGgU7dolDRSSfRMSMfHMFY+ dIgDskxh8sXguZrJJ+wvhoj6etVJF02aKuY6/wE2uKwAiu4GeXQElrdqMdXBVh30 +cM9RfKR5noDatpiUWRQyjh0itb/6fnmdycXNAj3iQVFhTDVHsXsCRECjJcsmVtV 42rYeuH2j5mS5g2kCV93kyCao30CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBS9vQBZ eyp9KoSPG7fvMBteMlmWTjAfBgNVHSMEGDAWgBTWfFMMjha2H/UsCFsnhsZ+zNap CTAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi L3JlcG8vc2IvMzgvRDY3QzUzMEM4RTE2QjYxRkY1MkMwODVCMjc4NkM2N0VDQ0Q2 QTkwOS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD NzJGRDFGRjIvMW54VERJNFd0aF8xTEFoYko0Ykdmc3pXcVFrLmNlcjBgBggrBgEF BQcBCwRUMFIwUAYIKwYBBQUHMAuGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzM4L0Q2 N0M1MzBDOEUxNkI2MUZGNTJDMDg1QjI3ODZDNjdFQ0NENkE5MDkubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCLtwEHyM1n+m9cHgVsgvuMGKd/OmGx1lBiat8q71Ykzxaq6odY3sG7b7V4th18 VNtFkRiZqhAL3CQP0uQRVmX5yx3qCRoJ1stznPpCeGDVrHW7CE4/VQefooVLFJfY 7MkhNm8MqtQtP7qdrWUMj3KykWdY41e75EeOtUrtqjrfyf13SleNu1NXIjTf0mRe dF8uaT9bcFH9BthlDazmHFMZcZjTtwus9uOlIk/HW+l/MmGQ+7KZZSJicAnibU9D n9/H9opH9vm2i4Kcd3VuIb/ALCkJgwpK5uB5gDB96AoiAjjkJN/dUSKC4F8Ir8dh CcwIvN8KuKj9LZ8FUMvdsT6w -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:34 2025 by rpki-client