$ rpki-client -vvf 0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft File: 52840422D0B72BA9927DE0FF73535FDF163521A4.mft (raw, json) Hash identifier: auph8pcb5fU3UW4VSAorSLzBZ/ZPk8uYo06xpKebO3k= Subject key identifier: 46:2F:0B:2F:8E:BD:EF:62:A1:93:DD:70:49:1E:66:28:43:76:C6:98 Authority key identifier: 52:84:04:22:D0:B7:2B:A9:92:7D:E0:FF:73:53:5F:DF:16:35:21:A4 Certificate issuer: /CN=A91FFE3F0000/serialNumber=52840422D0B72BA9927DE0FF73535FDF163521A4 Certificate serial: 068F88D89D82937B99419A221E9C69C3379A5B57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer Subject info access: rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft Manifest number: 051A Signing time: Sat 05 Apr 2025 01:21:31 +0000 Manifest this update: Sat 05 Apr 2025 01:16:31 +0000 Manifest next update: Sun 06 Apr 2025 03:37:31 +0000 Files and hashes: 1: 3130332e3230312e3132382e302f32322d3234203d3e2034373835.roa (hash: 9Ca/STubA5mtIYiuFQ8WX7AScvQ7uQdxOZpX1VuOAEU=) 2: 323430333a616338303a3a2f33322d3438203d3e2034373835.roa (hash: KwOnEN3O7Vdr8ofqxfbKIB2eLGC3zXsf6Pwqq9XZOeE=) 3: 52840422D0B72BA9927DE0FF73535FDF163521A4.crl (hash: FE362HbzW+TPM2bIzhsw68RyeGPNZtGAGIOnoRaL3MQ=) 4: 3130332e3230312e3132382e302f32322d3234203d3e203233393539.roa (hash: BwA+UvEt8rQgMpY6yzoRxeikeIjObyDwDrnQIWxLovQ=) 5: 3130332e3230312e3132382e302f32322d3234203d3e2033323538.roa (hash: AzaohjYaSSIV1Q6fmRXncx9iaadRmaHUjWlMQBGdnBA=) 6: 3230322e352e3232302e302f32322d3234203d3e2034373835.roa (hash: uqSnngrGzTZiBUYlKaqToTPF7fFslTgxeJJgiCqsN6M=) Validation: OK Signature path: rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.crl rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 03:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:8f:88:d8:9d:82:93:7b:99:41:9a:22:1e:9c:69:c3:37:9a:5b:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE3F0000 Validity Not Before: Apr 5 01:16:31 2025 GMT Not After : Apr 6 03:37:31 2025 GMT Subject: CN=462F0B2F8EBDEF62A193DD70491E66284376C698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0d:81:c1:95:1d:44:a8:92:fb:7a:a6:e0:7a: c0:78:55:72:f7:cb:98:3b:cf:03:92:9f:08:c6:56: e5:4b:08:6e:b8:e5:a4:c0:26:19:48:9b:77:93:61: 7a:41:eb:7e:12:4b:34:9d:61:63:39:e1:28:d6:38: 31:c3:36:f1:fb:98:3c:a6:f8:de:33:8e:89:97:47: 3b:91:a3:c6:04:97:5c:5d:81:53:6e:de:51:81:2b: bb:46:e6:bc:2e:b3:f0:59:37:6a:69:9a:09:d6:93: 80:c2:08:a3:13:80:22:d7:dc:37:a2:c2:e5:da:19: d7:e9:c8:dc:70:b4:8d:56:fd:0a:b8:8a:88:98:69: b9:e6:ca:de:93:82:d8:13:6a:e2:18:ef:0e:44:09: 68:78:21:15:25:2b:cc:08:e2:1c:91:e9:5e:a0:dc: dc:15:ec:d4:d4:b2:49:e8:90:2a:6d:1c:0b:c2:53: 36:c0:6d:f2:44:d7:66:0b:1d:fe:1c:fe:75:18:9d: c5:c7:ec:a4:c0:63:0b:8b:97:ce:5a:d8:72:4e:11: 13:37:be:e0:e2:e7:35:11:d5:91:0b:ca:fc:a2:31: 5b:a9:20:0c:94:3b:eb:8f:c5:b4:b4:62:09:7c:47: 5d:0c:c7:43:85:66:a5:55:85:f7:62:f7:3b:49:5b: 86:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2F:0B:2F:8E:BD:EF:62:A1:93:DD:70:49:1E:66:28:43:76:C6:98 X509v3 Authority Key Identifier: keyid:52:84:04:22:D0:B7:2B:A9:92:7D:E0:FF:73:53:5F:DF:16:35:21:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:7b:bd:b2:c1:7b:82:22:f1:2f:9b:03:0a:49:be:32:95:33: 93:4a:fc:c8:14:da:27:20:9c:89:52:db:9d:35:9f:69:1f:08: 65:12:d0:a8:a6:60:d3:35:ab:c9:2e:72:f3:86:50:bb:d1:90: a6:8b:0b:95:36:02:f3:1e:9c:69:d2:43:43:1f:d1:ce:f4:be: ac:15:a8:54:97:58:88:d3:6c:5f:eb:61:1b:83:fd:f9:85:97: 8e:1a:9f:67:0a:84:9e:4e:3b:d5:09:3f:74:2b:ca:68:df:fe: c9:c4:f3:74:87:5f:22:4d:63:f3:0b:c9:b5:13:9a:08:82:80: 35:2c:0f:79:63:aa:7e:92:fd:79:fe:3e:6f:0d:43:98:d9:86: 88:0b:19:d4:b1:b9:36:1f:e7:6b:b1:03:2b:31:7c:71:bd:04: 0c:86:f5:69:86:0d:d1:22:6b:1b:36:72:12:06:95:17:d0:dd: 68:85:bd:06:59:4f:32:74:cc:5a:d4:b0:a8:46:09:e9:79:36: cb:21:1c:20:b4:68:e7:66:35:d7:53:5f:6c:2b:63:4f:2e:fa: 5c:b7:8b:35:85:c3:29:48:d4:d7:51:c3:c9:bd:10:2a:a4:82: 32:7b:2c:96:89:e8:71:b0:41:20:14:0f:9c:2e:fb:ef:ce:ce: 74:54:e3:a0 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUBo+I2J2Ck3uZQZoiHpxpwzeaW1cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkZFM0YwMDAwMTEwLwYDVQQFEyg1Mjg0MDQyMkQw QjcyQkE5OTI3REUwRkY3MzUzNUZERjE2MzUyMUE0MB4XDTI1MDQwNTAxMTYzMVoX DTI1MDQwNjAzMzczMVowMzExMC8GA1UEAxMoNDYyRjBCMkY4RUJERUY2MkExOTNE RDcwNDkxRTY2Mjg0Mzc2QzY5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ0NgcGVHUSokvt6puB6wHhVcvfLmDvPA5KfCMZW5UsIbrjlpMAmGUibd5Nh ekHrfhJLNJ1hYznhKNY4McM28fuYPKb43jOOiZdHO5GjxgSXXF2BU27eUYEru0bm vC6z8Fk3ammaCdaTgMIIoxOAItfcN6LC5doZ1+nI3HC0jVb9CriKiJhpuebK3pOC 2BNq4hjvDkQJaHghFSUrzAjiHJHpXqDc3BXs1NSySeiQKm0cC8JTNsBt8kTXZgsd /hz+dRidxcfspMBjC4uXzlrYck4REze+4OLnNRHVkQvK/KIxW6kgDJQ764/FtLRi CXxHXQzHQ4VmpVWF92L3O0lbhiMCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBRGLwsv jr3vYqGT3XBJHmYoQ3bGmDAfBgNVHSMEGDAWgBRShAQi0LcrqZJ94P9zU1/fFjUh pDAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi L3JlcG8vc2IvMzkvNTI4NDA0MjJEMEI3MkJBOTkyN0RFMEZGNzM1MzVGREYxNjM1 MjFBNC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD NzJGRDFGRjIvVW9RRUl0QzNLNm1TZmVEX2MxTmYzeFkxSWFRLmNlcjBgBggrBgEF BQcBCwRUMFIwUAYIKwYBBQUHMAuGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzM5LzUy ODQwNDIyRDBCNzJCQTk5MjdERTBGRjczNTM1RkRGMTYzNTIxQTQubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCLe72ywXuCIvEvmwMKSb4ylTOTSvzIFNonIJyJUtudNZ9pHwhlEtCopmDTNavJ LnLzhlC70ZCmiwuVNgLzHpxp0kNDH9HO9L6sFahUl1iI02xf62Ebg/35hZeOGp9n CoSeTjvVCT90K8po3/7JxPN0h18iTWPzC8m1E5oIgoA1LA95Y6p+kv15/j5vDUOY 2YaICxnUsbk2H+drsQMrMXxxvQQMhvVphg3RImsbNnISBpUX0N1ohb0GWU8ydMxa 1LCoRgnpeTbLIRwgtGjnZjXXU19sK2NPLvpct4s1hcMpSNTXUcPJvRAqpIIyeyyW iehxsEEgFA+cLvvvzs50VOOg -----END CERTIFICATE-----Generated at Sat Apr 5 12:18:39 2025 by rpki-client