$ rpki-client -vvf 0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft File: D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft (raw, json) Hash identifier: flT7DMN999WiuuXQWquVDZzIs3dz6jMfJVevT/W56Q8= Subject key identifier: A8:DD:30:69:2A:BC:52:17:A9:BE:40:D6:58:5A:E5:C8:38:A3:56:FC Authority key identifier: D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09 Certificate issuer: /CN=A91FD4CC0000/serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909 Certificate serial: 7C85E7ED1C31A30E82FE035039FE348B5948DD25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer Subject info access: rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft Manifest number: 0535 Signing time: Sat 26 Apr 2025 13:47:10 +0000 Manifest this update: Sat 26 Apr 2025 13:42:10 +0000 Manifest next update: Sun 27 Apr 2025 13:59:10 +0000 Files and hashes: 1: 3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa (hash: VMZN08rr5TJWG1SskYiHeIXk4cWC6ozcRj/ZvNJ7dq0=) 2: 323430333a373163303a3a2f33322d3438203d3e2034373835.roa (hash: +JRVjjSDXJVl0UXKsoTuOrFeVJ81+M8Vd2Ev+ptLls4=) 3: 3130332e3132312e3230382e302f32322d3234203d3e203233393539.roa (hash: PegEYUymB7bV2LaJfDlbCZ46OazdHwSVPEyEk1ugwdc=) 4: D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl (hash: TrQemydH5CF6a9d8Yc9ewC4laFQUa/SNh+XTZFeVc8g=) 5: 3130332e3132312e3230382e302f32322d3234203d3e2034373835.roa (hash: iuljOAsLSKVwvWGjODt0WgQ6KS5iH6O0NdpCsdOgkDg=) 6: 323430333a373163303a3a2f33322d3438203d3e2033323538.roa (hash: /0TIiXzZkdshf306gvpxHBaOY31/ZlaUpzWQMbDlABE=) 7: 323430333a373163303a3a2f33322d3438203d3e203233393539.roa (hash: z9KuwO7drol9+zCvvvgJ3UbxeuhHjgTs/AJZgP7dbTI=) Validation: OK Signature path: rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 13:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:85:e7:ed:1c:31:a3:0e:82:fe:03:50:39:fe:34:8b:59:48:dd:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000, serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909 Validity Not Before: Apr 26 13:42:10 2025 GMT Not After : Apr 27 13:59:10 2025 GMT Subject: CN=A8DD30692ABC5217A9BE40D6585AE5C838A356FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e6:d0:71:25:55:89:50:05:23:75:4d:98:ff: 98:32:87:a8:d3:42:64:f3:de:a4:44:93:da:c8:d7: bd:f3:03:a5:a8:4e:3b:d7:cb:19:02:cf:a3:44:55: 13:23:5c:13:81:ff:36:c7:d7:9f:c3:c0:a6:62:6f: 81:7d:10:ba:96:d6:76:c7:03:86:e1:92:0f:d9:ab: cc:6c:c6:92:07:38:4a:f3:6d:ab:39:ea:7c:66:f7: fc:a8:73:98:68:dd:94:e1:52:f1:d4:fb:bc:f7:c9: 0b:f2:63:ba:6b:c7:a8:66:e8:12:4b:89:37:6e:c9: 55:94:9d:50:2c:36:8d:84:42:4f:16:db:2d:f9:63: 4b:8d:39:6f:eb:95:6d:25:cc:29:84:34:1f:22:af: 02:98:f9:c9:48:96:fd:5b:b8:fe:a5:a2:8d:84:a6: 60:05:6c:fd:2f:e8:6d:c4:fc:63:10:ca:c4:87:87: 55:8f:0d:e2:9e:89:49:08:1d:ae:e4:97:74:db:57: 11:4b:84:bb:67:53:17:af:4b:cc:08:6a:bd:cb:2c: 87:7f:73:37:b9:b0:3c:b7:a1:14:de:85:7d:27:98: 81:aa:38:63:36:7f:90:ad:f6:d7:d9:f4:46:2f:38: af:11:a0:e5:f5:2b:8f:88:ee:55:df:c1:df:f0:03: 8d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DD:30:69:2A:BC:52:17:A9:BE:40:D6:58:5A:E5:C8:38:A3:56:FC X509v3 Authority Key Identifier: keyid:D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:d7:ed:11:fc:35:00:12:5c:73:ca:2b:63:2f:05:cd:68:cd: 80:5b:e1:02:41:e6:ac:32:02:88:2c:8d:fd:2a:25:8f:e3:7e: 9d:37:65:8a:83:dd:18:33:b5:64:a3:bd:00:d2:ed:84:5e:10: 4c:79:01:4d:aa:fb:5e:c6:cf:59:af:bb:ab:10:7f:cf:12:bc: 20:36:a5:01:10:d1:a0:69:eb:1f:00:2d:20:44:9e:3b:21:6e: 2c:30:52:b3:13:93:13:0a:d9:36:e8:89:51:d8:6b:40:ec:22: cc:c2:54:22:1a:4e:61:74:9a:c3:15:b6:16:3f:f7:38:b5:c7: ab:41:62:3a:ba:ad:0b:6f:72:d1:16:93:9a:6a:18:f6:cd:69: 66:14:5e:42:3b:63:ce:f1:5d:45:1d:08:15:8b:57:28:26:a2: ea:0b:f0:37:db:58:33:c5:a6:e9:50:48:19:ef:d9:86:01:b5: 84:7d:67:97:96:5d:db:16:e0:68:b2:55:e4:47:82:04:5b:0b: ee:cc:bc:27:49:60:ed:65:c1:c5:b7:c1:85:36:f8:78:3a:56: 95:f3:77:49:08:4a:b6:c0:a6:50:1b:ce:c5:a1:7a:2f:71:5f: ed:a5:60:bc:93:34:c5:a3:9b:e3:3e:16:78:ec:64:09:fa:48: ae:d9:67:08 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUfIXn7Rwxow6C/gNQOf40i1lI3SUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhENjdDNTMwQzhF MTZCNjFGRjUyQzA4NUIyNzg2QzY3RUNDRDZBOTA5MB4XDTI1MDQyNjEzNDIxMFoX DTI1MDQyNzEzNTkxMFowMzExMC8GA1UEAxMoQThERDMwNjkyQUJDNTIxN0E5QkU0 MEQ2NTg1QUU1QzgzOEEzNTZGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOTm0HElVYlQBSN1TZj/mDKHqNNCZPPepEST2sjXvfMDpahOO9fLGQLPo0RV EyNcE4H/NsfXn8PApmJvgX0QupbWdscDhuGSD9mrzGzGkgc4SvNtqznqfGb3/Khz mGjdlOFS8dT7vPfJC/JjumvHqGboEkuJN27JVZSdUCw2jYRCTxbbLfljS405b+uV bSXMKYQ0HyKvApj5yUiW/Vu4/qWijYSmYAVs/S/obcT8YxDKxIeHVY8N4p6JSQgd ruSXdNtXEUuEu2dTF69LzAhqvcssh39zN7mwPLehFN6FfSeYgao4YzZ/kK3219n0 Ri84rxGg5fUrj4juVd/B3/ADja0CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBSo3TBp KrxSF6m+QNZYWuXIOKNW/DAfBgNVHSMEGDAWgBTWfFMMjha2H/UsCFsnhsZ+zNap CTAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi L3JlcG8vc2IvMzgvRDY3QzUzMEM4RTE2QjYxRkY1MkMwODVCMjc4NkM2N0VDQ0Q2 QTkwOS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD NzJGRDFGRjIvMW54VERJNFd0aF8xTEFoYko0Ykdmc3pXcVFrLmNlcjBgBggrBgEF BQcBCwRUMFIwUAYIKwYBBQUHMAuGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzM4L0Q2 N0M1MzBDOEUxNkI2MUZGNTJDMDg1QjI3ODZDNjdFQ0NENkE5MDkubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCT1+0R/DUAElxzyitjLwXNaM2AW+ECQeasMgKILI39KiWP436dN2WKg90YM7Vk o70A0u2EXhBMeQFNqvtexs9Zr7urEH/PErwgNqUBENGgaesfAC0gRJ47IW4sMFKz E5MTCtk26IlR2GtA7CLMwlQiGk5hdJrDFbYWP/c4tcerQWI6uq0Lb3LRFpOaahj2 zWlmFF5CO2PO8V1FHQgVi1coJqLqC/A321gzxabpUEgZ79mGAbWEfWeXll3bFuBo slXkR4IEWwvuzLwnSWDtZcHFt8GFNvh4OlaV83dJCEq2wKZQG87FoXovcV/tpWC8 kzTFo5vjPhZ47GQJ+kiu2WcI -----END CERTIFICATE-----Generated at Sat Apr 26 19:23:55 2025 by rpki-client