$ rpki-client -vvf 0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft File: 52840422D0B72BA9927DE0FF73535FDF163521A4.mft (raw, json) Hash identifier: cdQvDOwgwccMEiYKKplHOKaq84i0CeQ4+u3lmGp8QLQ= Subject key identifier: 53:18:15:9D:BA:71:E6:06:11:7F:41:6B:6D:52:09:A6:53:A2:C5:A5 Authority key identifier: 52:84:04:22:D0:B7:2B:A9:92:7D:E0:FF:73:53:5F:DF:16:35:21:A4 Certificate issuer: /CN=A91FFE3F0000/serialNumber=52840422D0B72BA9927DE0FF73535FDF163521A4 Certificate serial: 3A8F95182F6A4644F6852E4ECF17F5821A787474 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer Subject info access: rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft Manifest number: 0544 Signing time: Mon 05 May 2025 05:52:16 +0000 Manifest this update: Mon 05 May 2025 05:47:16 +0000 Manifest next update: Tue 06 May 2025 09:45:16 +0000 Files and hashes: 1: 3230322e352e3232302e302f32322d3234203d3e2034373835.roa (hash: uqSnngrGzTZiBUYlKaqToTPF7fFslTgxeJJgiCqsN6M=) 2: 323430333a616338303a3a2f33322d3438203d3e2034373835.roa (hash: KwOnEN3O7Vdr8ofqxfbKIB2eLGC3zXsf6Pwqq9XZOeE=) 3: 3130332e3230312e3132382e302f32322d3234203d3e203233393539.roa (hash: BwA+UvEt8rQgMpY6yzoRxeikeIjObyDwDrnQIWxLovQ=) 4: 3130332e3230312e3132382e302f32322d3234203d3e2033323538.roa (hash: NzvxeOISCBxGqvrzZjBZu0oMo4rqIXiZ91cAneYGZFA=) 5: 3130332e3230312e3132382e302f32322d3234203d3e2034373835.roa (hash: 9Ca/STubA5mtIYiuFQ8WX7AScvQ7uQdxOZpX1VuOAEU=) 6: 52840422D0B72BA9927DE0FF73535FDF163521A4.crl (hash: CJBd/piNco20PabvSAOVGpbrviYl09qsxfTAZvpo6S8=) Validation: OK Signature path: rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.crl rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 09:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:8f:95:18:2f:6a:46:44:f6:85:2e:4e:cf:17:f5:82:1a:78:74:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE3F0000, serialNumber=52840422D0B72BA9927DE0FF73535FDF163521A4 Validity Not Before: May 5 05:47:16 2025 GMT Not After : May 6 09:45:16 2025 GMT Subject: CN=5318159DBA71E606117F416B6D5209A653A2C5A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b3:c7:42:e3:f2:db:27:03:84:5b:fb:eb:c6: 22:b0:e5:88:d8:63:dd:4a:4c:d7:a1:80:0c:2e:87: f0:87:2c:04:c0:9f:71:61:fd:88:53:75:c3:82:61: 0f:30:ea:95:a8:69:e9:7a:d0:b8:fd:9f:e5:d4:cf: 1a:72:64:12:df:89:92:70:6f:09:78:34:ef:16:09: 51:21:f5:34:33:5d:f6:b2:f8:7a:bf:5e:89:e2:30: e8:61:46:a6:a0:a1:77:98:bb:20:d8:ad:ce:eb:e6: 4b:2a:cf:cc:08:50:df:39:76:18:71:e4:3a:87:38: 4c:f4:ba:bb:d3:02:4a:95:66:eb:49:35:98:bf:00: 14:2a:c0:e9:6e:d8:ac:92:05:65:9c:41:16:fa:ef: 22:72:21:fb:20:6e:8b:68:fd:23:56:8a:71:9f:2a: f6:98:48:0d:e5:2c:18:ed:05:a0:24:c4:ad:88:63: 31:ba:df:2a:cf:8b:4e:71:b4:0d:a5:f0:79:e1:7e: 35:d6:70:0f:da:34:d4:ce:f7:d9:ca:49:d2:9d:1e: 6a:8c:b2:51:6f:67:3b:4c:26:13:6d:cb:34:7e:6b: 05:e1:30:a1:a6:96:ed:b9:aa:35:7f:88:72:01:70: 9e:8a:2b:56:97:98:11:8c:2c:3e:96:d5:44:96:62: 79:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:18:15:9D:BA:71:E6:06:11:7F:41:6B:6D:52:09:A6:53:A2:C5:A5 X509v3 Authority Key Identifier: keyid:52:84:04:22:D0:B7:2B:A9:92:7D:E0:FF:73:53:5F:DF:16:35:21:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:19:36:e7:5b:8f:ac:da:ec:08:8b:b8:6d:4b:b9:a9:b6:ad: 91:51:81:81:82:09:e5:06:81:8c:72:74:73:11:98:6a:73:da: 78:ae:75:53:27:e1:ad:a0:50:2a:50:b6:fc:09:23:85:b6:e6: 26:3d:d2:d1:ea:a2:66:ff:87:9f:de:49:1c:3f:60:0c:ca:61: f8:ee:3b:63:72:e0:c2:00:07:58:7d:27:f2:50:85:35:37:18: 19:39:3c:69:63:e3:2f:c5:d7:98:5e:f4:c3:eb:34:0d:53:fe: c3:61:fb:2d:77:b2:32:47:d4:16:5a:c4:58:c6:93:13:a9:1a: 04:8d:ea:f5:d1:e7:c4:90:81:e4:83:20:52:4f:1e:17:2d:51: b6:b5:40:77:1f:e2:1f:cb:14:34:cd:c7:70:59:f2:4a:15:56: f5:19:7e:3b:ef:a5:d6:13:c7:f6:af:48:8d:4a:2b:32:f0:c8: 59:c0:ce:5c:de:9d:33:23:64:00:64:20:b7:17:6e:2b:2c:d0: ed:54:dc:74:93:fe:eb:51:4e:ff:c0:df:75:71:a7:56:56:79: a9:a9:60:b0:8a:c6:24:dc:57:94:5b:8e:a2:79:6d:02:cc:35: b9:7b:3c:19:6c:ab:df:f2:d7:ce:3b:8a:16:95:5e:d0:67:23: 18:16:ec:2d -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUOo+VGC9qRkT2hS5Ozxf1ghp4dHQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkZFM0YwMDAwMTEwLwYDVQQFEyg1Mjg0MDQyMkQw QjcyQkE5OTI3REUwRkY3MzUzNUZERjE2MzUyMUE0MB4XDTI1MDUwNTA1NDcxNloX DTI1MDUwNjA5NDUxNlowMzExMC8GA1UEAxMoNTMxODE1OURCQTcxRTYwNjExN0Y0 MTZCNkQ1MjA5QTY1M0EyQzVBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOyzx0Lj8tsnA4Rb++vGIrDliNhj3UpM16GADC6H8IcsBMCfcWH9iFN1w4Jh DzDqlahp6XrQuP2f5dTPGnJkEt+JknBvCXg07xYJUSH1NDNd9rL4er9eieIw6GFG pqChd5i7INitzuvmSyrPzAhQ3zl2GHHkOoc4TPS6u9MCSpVm60k1mL8AFCrA6W7Y rJIFZZxBFvrvInIh+yBui2j9I1aKcZ8q9phIDeUsGO0FoCTErYhjMbrfKs+LTnG0 DaXweeF+NdZwD9o01M732cpJ0p0eaoyyUW9nO0wmE23LNH5rBeEwoaaW7bmqNX+I cgFwnoorVpeYEYwsPpbVRJZieesCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBRTGBWd unHmBhF/QWttUgmmU6LFpTAfBgNVHSMEGDAWgBRShAQi0LcrqZJ94P9zU1/fFjUh pDAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi L3JlcG8vc2IvMzkvNTI4NDA0MjJEMEI3MkJBOTkyN0RFMEZGNzM1MzVGREYxNjM1 MjFBNC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD NzJGRDFGRjIvVW9RRUl0QzNLNm1TZmVEX2MxTmYzeFkxSWFRLmNlcjBgBggrBgEF BQcBCwRUMFIwUAYIKwYBBQUHMAuGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzM5LzUy ODQwNDIyRDBCNzJCQTk5MjdERTBGRjczNTM1RkRGMTYzNTIxQTQubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBiGTbnW4+s2uwIi7htS7mptq2RUYGBggnlBoGMcnRzEZhqc9p4rnVTJ+GtoFAq ULb8CSOFtuYmPdLR6qJm/4ef3kkcP2AMymH47jtjcuDCAAdYfSfyUIU1NxgZOTxp Y+MvxdeYXvTD6zQNU/7DYfstd7IyR9QWWsRYxpMTqRoEjer10efEkIHkgyBSTx4X LVG2tUB3H+IfyxQ0zcdwWfJKFVb1GX4776XWE8f2r0iNSisy8MhZwM5c3p0zI2QA ZCC3F24rLNDtVNx0k/7rUU7/wN91cadWVnmpqWCwisYk3FeUW46ieW0CzDW5ezwZ bKvf8tfOO4oWlV7QZyMYFuwt -----END CERTIFICATE-----Generated at Mon May 5 16:44:23 2025 by rpki-client