$ rpki-client -vvf 0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft File: D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft (raw, json) Hash identifier: fKo8GjE6ZKZVDCOVfjcvayk7jYg3EymEqQuCdKWf1z4= Subject key identifier: 1F:71:FD:1F:51:F6:6C:91:23:39:3C:85:19:90:31:38:6B:A9:07:F7 Authority key identifier: D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09 Certificate issuer: /CN=A91FD4CC0000/serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909 Certificate serial: 3480D1FFC8C3DEFA068C093F97136DDC6D559450 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer Subject info access: rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft Manifest number: 0549 Signing time: Sun 11 May 2025 07:12:26 +0000 Manifest this update: Sun 11 May 2025 07:07:26 +0000 Manifest next update: Mon 12 May 2025 09:32:26 +0000 Files and hashes: 1: D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl (hash: MW2NXUcDe8CDRgEnFmX0pwQvKTfORiZw5Bmt8R+mEVc=) 2: 323430333a373163303a3a2f33322d3438203d3e2033323538.roa (hash: /0TIiXzZkdshf306gvpxHBaOY31/ZlaUpzWQMbDlABE=) 3: 323430333a373163303a3a2f33322d3438203d3e203233393539.roa (hash: z9KuwO7drol9+zCvvvgJ3UbxeuhHjgTs/AJZgP7dbTI=) 4: 3130332e3132312e3230382e302f32322d3234203d3e203233393539.roa (hash: PegEYUymB7bV2LaJfDlbCZ46OazdHwSVPEyEk1ugwdc=) 5: 3130332e3132312e3230382e302f32322d3234203d3e2034373835.roa (hash: iuljOAsLSKVwvWGjODt0WgQ6KS5iH6O0NdpCsdOgkDg=) 6: 323430333a373163303a3a2f33322d3438203d3e2034373835.roa (hash: +JRVjjSDXJVl0UXKsoTuOrFeVJ81+M8Vd2Ev+ptLls4=) 7: 3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa (hash: VMZN08rr5TJWG1SskYiHeIXk4cWC6ozcRj/ZvNJ7dq0=) Validation: OK Signature path: rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 09:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:80:d1:ff:c8:c3:de:fa:06:8c:09:3f:97:13:6d:dc:6d:55:94:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000, serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909 Validity Not Before: May 11 07:07:26 2025 GMT Not After : May 12 09:32:26 2025 GMT Subject: CN=1F71FD1F51F66C9123393C85199031386BA907F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:10:27:30:32:71:46:13:16:76:02:50:b2:1e: 1d:14:b3:3c:82:d0:cf:0c:7f:ab:db:d6:c8:f4:83: 56:10:1c:5a:48:b5:07:33:a9:2e:0e:80:e5:3b:0f: 5b:ca:be:7b:84:37:03:2a:e0:57:46:9e:1f:8a:8c: 5e:b6:af:5b:4d:48:46:81:b8:7e:a7:dd:70:a8:88: f8:07:99:ec:d3:72:09:f0:49:ba:a2:66:cc:28:19: f8:b5:76:3b:56:90:6f:7c:2f:b1:80:29:9b:f2:12: da:76:06:66:e4:1c:2f:f4:3b:74:6c:81:fe:a2:3a: 0b:db:5d:51:5c:b3:d0:98:99:21:74:90:4c:52:5e: f9:b2:14:16:3e:66:da:97:8a:e5:7b:a5:95:44:e5: 3f:e7:ea:8b:6b:11:d5:7e:e2:bf:79:4f:76:e6:22: 6c:c7:49:5c:9b:49:58:c3:1d:3d:5b:f3:56:ed:92: e2:d8:2a:be:82:68:43:d5:7e:8c:9b:76:f2:b3:07: 67:84:a5:af:43:b7:8a:e4:9c:50:a6:89:37:0c:ff: a9:85:85:06:31:24:da:b1:7f:5a:1e:ef:66:e4:8d: a3:5c:8a:5d:20:be:69:a0:5e:a7:7e:09:ee:73:f6: 4c:32:7e:7d:06:6e:63:8c:ff:a6:18:64:0f:68:b3: 5e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:71:FD:1F:51:F6:6C:91:23:39:3C:85:19:90:31:38:6B:A9:07:F7 X509v3 Authority Key Identifier: keyid:D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:1b:11:b1:7f:c7:a8:6a:48:b1:3e:fc:2c:2c:cb:4d:b9:61: e3:bf:57:74:2c:d1:d6:33:60:b7:b9:14:92:dc:20:d5:1c:cb: 84:7e:ed:7a:0d:75:a1:2e:46:7f:ef:c6:f2:6e:01:58:e3:b1: e2:ec:65:d9:b0:2f:52:51:5e:00:e4:81:d2:45:ef:06:f5:9c: c0:f7:bf:7a:63:83:a1:85:f7:e8:9b:9e:4e:d5:cb:5b:4f:19: f2:71:9a:9e:85:73:39:9a:da:63:63:e0:3e:9d:63:4a:2c:10: 8a:3a:0f:c7:13:38:0a:bf:60:30:12:e8:74:5a:e7:e1:e2:ff: 8a:43:7b:a1:7e:e6:59:91:05:f9:5a:54:54:d0:d0:56:11:6c: a9:de:2c:25:72:53:e5:0a:f0:3d:6f:5b:4a:0d:85:52:a6:aa: 2f:97:b3:42:20:dd:ad:ef:ed:ee:3d:c9:38:9c:0a:17:67:83: 83:fe:a7:ed:ca:1f:7a:28:ae:5c:20:fb:4e:3c:a5:5d:19:95: 1d:fd:91:ca:d1:15:3d:da:5f:47:ce:c2:7e:55:62:72:8e:fc: d4:94:47:d4:b5:ec:3d:be:4a:5d:3c:aa:9b:4d:3c:ca:62:f0: dc:32:ba:33:6f:bb:cc:9f:ef:3f:4f:4d:66:68:bc:72:5d:28: bc:ab:f2:72 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUNIDR/8jD3voGjAk/lxNt3G1VlFAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhENjdDNTMwQzhF MTZCNjFGRjUyQzA4NUIyNzg2QzY3RUNDRDZBOTA5MB4XDTI1MDUxMTA3MDcyNloX DTI1MDUxMjA5MzIyNlowMzExMC8GA1UEAxMoMUY3MUZEMUY1MUY2NkM5MTIzMzkz Qzg1MTk5MDMxMzg2QkE5MDdGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANgQJzAycUYTFnYCULIeHRSzPILQzwx/q9vWyPSDVhAcWki1BzOpLg6A5TsP W8q+e4Q3AyrgV0aeH4qMXravW01IRoG4fqfdcKiI+AeZ7NNyCfBJuqJmzCgZ+LV2 O1aQb3wvsYApm/IS2nYGZuQcL/Q7dGyB/qI6C9tdUVyz0JiZIXSQTFJe+bIUFj5m 2peK5XullUTlP+fqi2sR1X7iv3lPduYibMdJXJtJWMMdPVvzVu2S4tgqvoJoQ9V+ jJt28rMHZ4Slr0O3iuScUKaJNwz/qYWFBjEk2rF/Wh7vZuSNo1yKXSC+aaBep34J 7nP2TDJ+fQZuY4z/phhkD2izXnkCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBQfcf0f UfZskSM5PIUZkDE4a6kH9zAfBgNVHSMEGDAWgBTWfFMMjha2H/UsCFsnhsZ+zNap CTAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi L3JlcG8vc2IvMzgvRDY3QzUzMEM4RTE2QjYxRkY1MkMwODVCMjc4NkM2N0VDQ0Q2 QTkwOS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD NzJGRDFGRjIvMW54VERJNFd0aF8xTEFoYko0Ykdmc3pXcVFrLmNlcjBgBggrBgEF BQcBCwRUMFIwUAYIKwYBBQUHMAuGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzM4L0Q2 N0M1MzBDOEUxNkI2MUZGNTJDMDg1QjI3ODZDNjdFQ0NENkE5MDkubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBGGxGxf8eoakixPvwsLMtNuWHjv1d0LNHWM2C3uRSS3CDVHMuEfu16DXWhLkZ/ 78bybgFY47Hi7GXZsC9SUV4A5IHSRe8G9ZzA9796Y4Ohhffom55O1ctbTxnycZqe hXM5mtpjY+A+nWNKLBCKOg/HEzgKv2AwEuh0Wufh4v+KQ3uhfuZZkQX5WlRU0NBW EWyp3iwlclPlCvA9b1tKDYVSpqovl7NCIN2t7+3uPck4nAoXZ4OD/qftyh96KK5c IPtOPKVdGZUd/ZHK0RU92l9HzsJ+VWJyjvzUlEfUtew9vkpdPKqbTTzKYvDcMroz b7vMn+8/T01maLxyXSi8q/Jy -----END CERTIFICATE-----Generated at Sun May 11 08:37:50 2025 by rpki-client