$ rpki-client -vvf 0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft File: 52840422D0B72BA9927DE0FF73535FDF163521A4.mft (raw, json) Hash identifier: aiEjsVeGlfn3sxjLGdFd6dkhFVxDleIqCTI3gDZxmUk= Subject key identifier: 76:B3:1C:66:5E:35:27:6A:66:14:F8:AF:30:CF:67:E9:7C:A6:4C:31 Authority key identifier: 52:84:04:22:D0:B7:2B:A9:92:7D:E0:FF:73:53:5F:DF:16:35:21:A4 Certificate issuer: /CN=A91FFE3F0000/serialNumber=52840422D0B72BA9927DE0FF73535FDF163521A4 Certificate serial: 5F556E2CFD5E8262CB9F8284988683D8BF165D78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer Subject info access: rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft Manifest number: 058F Signing time: Sat 28 Jun 2025 23:03:00 +0000 Manifest this update: Sat 28 Jun 2025 22:58:00 +0000 Manifest next update: Mon 30 Jun 2025 02:49:00 +0000 Files and hashes: 1: 3130332e3230312e3132382e302f32322d3234203d3e2033323538.roa (hash: NzvxeOISCBxGqvrzZjBZu0oMo4rqIXiZ91cAneYGZFA=) 2: 323430333a616338303a3a2f33322d3438203d3e2034373835.roa (hash: KwOnEN3O7Vdr8ofqxfbKIB2eLGC3zXsf6Pwqq9XZOeE=) 3: 3230322e352e3232302e302f32322d3234203d3e2034373835.roa (hash: uqSnngrGzTZiBUYlKaqToTPF7fFslTgxeJJgiCqsN6M=) 4: 3130332e3230312e3132382e302f32322d3234203d3e2034373835.roa (hash: 9Ca/STubA5mtIYiuFQ8WX7AScvQ7uQdxOZpX1VuOAEU=) 5: 52840422D0B72BA9927DE0FF73535FDF163521A4.crl (hash: z+8vo56S56ORwZRDDqaRp19aD7RREGyDP0sxOEUGd3s=) 6: 3130332e3230312e3132382e302f32322d3234203d3e203233393539.roa (hash: BwA+UvEt8rQgMpY6yzoRxeikeIjObyDwDrnQIWxLovQ=) Validation: OK Signature path: rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.crl rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 02:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:55:6e:2c:fd:5e:82:62:cb:9f:82:84:98:86:83:d8:bf:16:5d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE3F0000, serialNumber=52840422D0B72BA9927DE0FF73535FDF163521A4 Validity Not Before: Jun 28 22:58:00 2025 GMT Not After : Jun 30 02:49:00 2025 GMT Subject: CN=76B31C665E35276A6614F8AF30CF67E97CA64C31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c5:9b:b2:07:d6:26:1d:1c:ad:f6:4e:80:a2: d9:15:31:bd:77:c9:90:16:b3:73:56:f9:4a:00:95: 93:b7:a5:21:09:5f:17:c1:74:a0:69:4e:1f:9d:6a: 8d:d7:65:ff:8b:0b:fd:96:2d:78:53:41:f3:bf:b0: a8:55:65:bb:6d:d1:a1:7b:3f:bf:6b:97:fc:3a:07: 6d:62:32:02:1c:a1:dc:cb:4c:c2:f7:51:b5:03:13: 94:33:ce:e8:fb:c2:45:ff:02:62:0d:7f:0f:a5:55: ce:df:26:0a:12:c4:80:60:58:6b:d7:92:e7:55:8a: e4:ea:26:f1:bd:98:8f:f3:b2:b7:62:f5:0b:87:77: b7:ee:64:63:47:ba:f5:0e:0e:4e:d7:70:b5:59:6d: e9:ea:c0:23:bc:95:18:0b:b6:03:43:77:12:82:b5: 81:4d:fd:8a:02:bc:80:cc:be:e4:33:f2:2a:9e:2a: 93:60:37:c5:66:bc:7f:37:a1:05:2f:77:b9:35:c9: 95:90:b4:5b:d1:8b:fa:e3:4f:5a:c1:85:2c:a5:ec: 37:49:7e:5c:70:20:1e:0a:0e:72:db:7f:a7:28:e7: 16:15:04:65:e3:98:c1:d9:98:ea:67:f1:44:ce:11: 11:4c:fa:52:72:4f:77:f2:d1:14:8c:db:88:e2:c5: cb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B3:1C:66:5E:35:27:6A:66:14:F8:AF:30:CF:67:E9:7C:A6:4C:31 X509v3 Authority Key Identifier: keyid:52:84:04:22:D0:B7:2B:A9:92:7D:E0:FF:73:53:5F:DF:16:35:21:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:db:b1:22:6d:c6:c1:64:eb:16:b8:61:e3:39:7b:7f:dd:02: c3:bc:79:ed:36:e8:fe:da:66:ea:a7:7c:f6:f5:ae:80:4b:7c: d1:8b:69:f1:52:f5:2a:3c:94:e6:85:3c:df:92:c6:1f:c7:d8: 8b:1f:79:74:a6:da:83:3b:89:0e:4f:88:d8:d0:14:aa:7f:f1: f8:76:e4:ee:19:c8:11:f4:6c:bc:49:aa:d9:42:ac:53:93:00: 65:5a:89:15:e3:0f:57:24:33:b7:b4:de:8e:56:97:6a:1e:d8: c6:94:f9:17:db:f4:e9:54:ba:ab:aa:9d:22:d6:26:87:18:c4: 0f:05:28:09:e6:04:da:df:87:f9:bf:7d:43:e6:2f:2f:c6:3d: 10:92:01:09:b2:1b:e9:8c:48:4a:e2:54:94:4c:55:92:fd:19: ab:c3:2a:82:01:21:c2:cd:6b:c8:f0:5b:73:74:8c:18:91:10: 2b:0c:ee:d6:68:ea:b9:58:f0:85:aa:8b:37:46:85:34:26:02: b2:fe:a6:4b:2a:d0:d4:c5:49:23:45:3c:36:e6:eb:5a:e7:f2: 6f:4d:c6:7b:11:af:aa:64:0a:5f:c9:55:41:7b:6c:7e:30:c0: 45:33:41:0c:9b:80:3a:83:50:2b:8d:68:5a:36:44:c7:42:83: 45:35:0e:bd -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUX1VuLP1egmLLn4KEmIaD2L8WXXgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkZFM0YwMDAwMTEwLwYDVQQFEyg1Mjg0MDQyMkQw QjcyQkE5OTI3REUwRkY3MzUzNUZERjE2MzUyMUE0MB4XDTI1MDYyODIyNTgwMFoX DTI1MDYzMDAyNDkwMFowMzExMC8GA1UEAxMoNzZCMzFDNjY1RTM1Mjc2QTY2MTRG OEFGMzBDRjY3RTk3Q0E2NEMzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzFm7IH1iYdHK32ToCi2RUxvXfJkBazc1b5SgCVk7elIQlfF8F0oGlOH51q jddl/4sL/ZYteFNB87+wqFVlu23RoXs/v2uX/DoHbWIyAhyh3MtMwvdRtQMTlDPO 6PvCRf8CYg1/D6VVzt8mChLEgGBYa9eS51WK5Oom8b2Yj/Oyt2L1C4d3t+5kY0e6 9Q4OTtdwtVlt6erAI7yVGAu2A0N3EoK1gU39igK8gMy+5DPyKp4qk2A3xWa8fzeh BS93uTXJlZC0W9GL+uNPWsGFLKXsN0l+XHAgHgoOctt/pyjnFhUEZeOYwdmY6mfx RM4REUz6UnJPd/LRFIzbiOLFy/8CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBR2sxxm XjUnamYU+K8wz2fpfKZMMTAfBgNVHSMEGDAWgBRShAQi0LcrqZJ94P9zU1/fFjUh pDAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi L3JlcG8vc2IvMzkvNTI4NDA0MjJEMEI3MkJBOTkyN0RFMEZGNzM1MzVGREYxNjM1 MjFBNC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD NzJGRDFGRjIvVW9RRUl0QzNLNm1TZmVEX2MxTmYzeFkxSWFRLmNlcjBgBggrBgEF BQcBCwRUMFIwUAYIKwYBBQUHMAuGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzM5LzUy ODQwNDIyRDBCNzJCQTk5MjdERTBGRjczNTM1RkRGMTYzNTIxQTQubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA127EibcbBZOsWuGHjOXt/3QLDvHntNuj+2mbqp3z29a6AS3zRi2nxUvUqPJTm hTzfksYfx9iLH3l0ptqDO4kOT4jY0BSqf/H4duTuGcgR9Gy8SarZQqxTkwBlWokV 4w9XJDO3tN6OVpdqHtjGlPkX2/TpVLqrqp0i1iaHGMQPBSgJ5gTa34f5v31D5i8v xj0QkgEJshvpjEhK4lSUTFWS/RmrwyqCASHCzWvI8FtzdIwYkRArDO7WaOq5WPCF qos3RoU0JgKy/qZLKtDUxUkjRTw25uta5/JvTcZ7Ea+qZApfyVVBe2x+MMBFM0EM m4A6g1ArjWhaNkTHQoNFNQ69 -----END CERTIFICATE-----Generated at Sun Jun 29 18:40:17 2025 by rpki-client