$ rpki-client -vvf 0.sb/repo/sb/20/E3098182BCB9AA102ECB2221A767B98E6ECCC310.mft File: E3098182BCB9AA102ECB2221A767B98E6ECCC310.mft (raw, json) Hash identifier: 0OmZ4xktu+L2p47Dl+09LJ/t+4Rt9MBSRaUNLn4ronE= Subject key identifier: 8D:7E:62:DB:F3:37:00:EC:5C:69:D8:AB:FF:E7:6B:D8:0D:FD:52:98 Authority key identifier: E3:09:81:82:BC:B9:AA:10:2E:CB:22:21:A7:67:B9:8E:6E:CC:C3:10 Certificate issuer: /CN=A91C44A00000/serialNumber=E3098182BCB9AA102ECB2221A767B98E6ECCC310 Certificate serial: 38E1F403FCD458FF557BD6A7EFC105EA1EBD72B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wmBgry5qhAuyyIhp2e5jm7MwxA.cer Subject info access: rsync://0.sb/repo/sb/20/E3098182BCB9AA102ECB2221A767B98E6ECCC310.mft Manifest number: 0536 Signing time: Thu 25 Apr 2024 19:33:56 +0000 Manifest this update: Thu 25 Apr 2024 19:28:56 +0000 Manifest next update: Fri 26 Apr 2024 20:52:56 +0000 Files and hashes: 1: 3130332e3136392e39322e302f32332d3234203d3e2038383838.roa (hash: rf8878OxT73Bl1kcdlm+bDonaPAStvU9sqK+yhacA4g=) 2: 323430373a396534303a3a2f33322d3438203d3e20323130383037.roa (hash: 3Z9w0G0UdXj0bj6CxxFc81chJ0qXYEsqEs9mdSbykHo=) 3: 323430373a396534303a3a2f33322d3438203d3e2038383838.roa (hash: bgZLx9D4yDAqnvRUS+LNhuBpH5hKCWNHHuxB7IgA2e0=) 4: 3130332e3136392e39322e302f32332d3234203d3e20323130383037.roa (hash: JBs9UnGsxnVWzzE1rQ9DYlgI4/cSmY48B/VhZgJi4uM=) 5: E3098182BCB9AA102ECB2221A767B98E6ECCC310.crl (hash: BqwdYePbXcAKxCT2otOAZpzylci4rEt5rVooB4xE/3k=) Validation: OK Signature path: rsync://0.sb/repo/sb/20/E3098182BCB9AA102ECB2221A767B98E6ECCC310.crl rsync://0.sb/repo/sb/20/E3098182BCB9AA102ECB2221A767B98E6ECCC310.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wmBgry5qhAuyyIhp2e5jm7MwxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Apr 2024 20:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e1:f4:03:fc:d4:58:ff:55:7b:d6:a7:ef:c1:05:ea:1e:bd:72:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C44A00000/serialNumber=E3098182BCB9AA102ECB2221A767B98E6ECCC310 Validity Not Before: Apr 25 19:28:56 2024 GMT Not After : Apr 26 20:52:56 2024 GMT Subject: CN=8D7E62DBF33700EC5C69D8ABFFE76BD80DFD5298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:74:0f:97:46:e0:06:e0:a8:90:19:dd:e8:20: 7e:39:4b:e9:4b:1d:02:19:6b:df:6f:69:81:0d:00: 66:98:9a:43:2c:db:e6:88:ae:98:6d:cc:84:14:2a: 8a:4b:79:fb:2d:a6:98:22:33:9a:50:b8:de:ba:a8: 37:db:22:71:fc:c0:20:30:f7:fe:5e:98:30:9a:3d: 68:b6:68:6f:c4:fe:4f:3e:4b:e5:1e:50:f4:61:0a: 31:65:bf:f9:51:87:8a:7c:d3:53:d4:8b:c2:92:75: 84:4a:f4:3d:05:c8:4b:2b:90:2f:41:fe:55:e0:33: 5e:53:67:c1:2d:de:1d:b2:d4:8e:c2:9c:26:21:cf: e6:66:97:fc:71:54:0a:31:e5:15:0e:27:de:37:b5: 4b:bd:35:59:a0:e9:01:94:9d:03:75:7c:15:10:0d: 52:91:ae:90:0c:7f:2b:8e:c9:9f:e6:67:a9:73:18: e4:9b:21:bd:5e:53:ef:e1:b5:28:18:fd:6b:a4:17: 81:2e:57:36:bf:83:ff:d6:b0:7a:11:bd:d2:5a:12: e0:0f:fe:a2:30:31:a3:2b:8a:a5:97:89:35:46:88: dc:7b:9e:6b:35:d9:20:09:d6:78:65:7b:58:29:62: ef:16:1a:76:05:75:cd:b9:b6:76:26:c2:1b:16:d9: 6f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7E:62:DB:F3:37:00:EC:5C:69:D8:AB:FF:E7:6B:D8:0D:FD:52:98 X509v3 Authority Key Identifier: keyid:E3:09:81:82:BC:B9:AA:10:2E:CB:22:21:A7:67:B9:8E:6E:CC:C3:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/20/E3098182BCB9AA102ECB2221A767B98E6ECCC310.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wmBgry5qhAuyyIhp2e5jm7MwxA.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/20/E3098182BCB9AA102ECB2221A767B98E6ECCC310.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:5f:5f:cc:d8:e4:a9:59:ba:7d:40:c7:96:b8:9a:f5:54:52: 15:6b:b3:ce:50:74:06:32:ab:90:d8:15:51:9c:4e:b7:3b:98: 76:a8:9d:fc:73:f9:54:69:2f:6e:f8:7f:06:a0:60:0a:65:1a: 5b:ba:94:a6:4b:14:fa:fa:d0:7e:16:17:a4:67:24:c4:a2:7f: 74:31:16:7f:66:db:5e:03:15:13:3b:05:14:75:21:20:41:8b: fc:35:43:c0:e0:f2:bb:82:66:04:f4:43:6d:0d:27:a7:39:19: 94:b6:cf:bf:a6:9d:72:50:43:21:1f:7a:5b:4b:8c:df:7e:80: 86:04:fe:42:46:09:0a:8f:c1:cc:15:c1:10:51:ef:f9:b9:7b: b7:08:b3:38:68:f2:a4:79:12:db:7b:69:06:af:ef:f4:02:d0: a6:c7:52:b2:ac:1c:f9:1e:d3:c9:97:2d:68:6e:9b:5b:3a:a1: 25:45:22:9b:f7:43:f6:b9:26:7f:37:e9:b4:16:1c:de:ef:c1: fc:0a:b9:f3:f6:b5:f4:01:03:85:23:96:87:af:8a:f7:33:6a: b2:d2:e7:5e:77:c6:25:e6:d0:36:f4:7c:e5:7d:5f:6d:ef:aa: ee:a3:b4:54:d5:6c:fb:9b:fb:9f:81:63:8c:51:cd:c0:c3:b7: 80:e2:f0:d4 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUOOH0A/zUWP9Ve9an78EF6h69crMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQzQ0QTAwMDAwMTEwLwYDVQQFEyhFMzA5ODE4MkJD QjlBQTEwMkVDQjIyMjFBNzY3Qjk4RTZFQ0NDMzEwMB4XDTI0MDQyNTE5Mjg1NloX DTI0MDQyNjIwNTI1NlowMzExMC8GA1UEAxMoOEQ3RTYyREJGMzM3MDBFQzVDNjlE OEFCRkZFNzZCRDgwREZENTI5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALB0D5dG4AbgqJAZ3eggfjlL6UsdAhlr329pgQ0AZpiaQyzb5oiumG3MhBQq ikt5+y2mmCIzmlC43rqoN9sicfzAIDD3/l6YMJo9aLZob8T+Tz5L5R5Q9GEKMWW/ +VGHinzTU9SLwpJ1hEr0PQXISyuQL0H+VeAzXlNnwS3eHbLUjsKcJiHP5maX/HFU CjHlFQ4n3je1S701WaDpAZSdA3V8FRANUpGukAx/K47Jn+ZnqXMY5JshvV5T7+G1 KBj9a6QXgS5XNr+D/9awehG90loS4A/+ojAxoyuKpZeJNUaI3HueazXZIAnWeGV7 WCli7xYadgV1zbm2dibCGxbZb5MCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBSNfmLb 8zcA7Fxp2Kv/52vYDf1SmDAfBgNVHSMEGDAWgBTjCYGCvLmqEC7LIiGnZ7mObszD EDAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi L3JlcG8vc2IvMjAvRTMwOTgxODJCQ0I5QUExMDJFQ0IyMjIxQTc2N0I5OEU2RUND QzMxMC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD NzJGRDFGRjIvNHdtQmdyeTVxaEF1eXlJaHAyZTVqbTdNd3hBLmNlcjBgBggrBgEF BQcBCwRUMFIwUAYIKwYBBQUHMAuGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzIwL0Uz MDk4MTgyQkNCOUFBMTAyRUNCMjIyMUE3NjdCOThFNkVDQ0MzMTAubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCzX1/M2OSpWbp9QMeWuJr1VFIVa7POUHQGMquQ2BVRnE63O5h2qJ38c/lUaS9u +H8GoGAKZRpbupSmSxT6+tB+FhekZyTEon90MRZ/ZtteAxUTOwUUdSEgQYv8NUPA 4PK7gmYE9ENtDSenORmUts+/pp1yUEMhH3pbS4zffoCGBP5CRgkKj8HMFcEQUe/5 uXu3CLM4aPKkeRLbe2kGr+/0AtCmx1KyrBz5HtPJly1obptbOqElRSKb90P2uSZ/ N+m0Fhze78H8Crnz9rX0AQOFI5aHr4r3M2qy0uded8Yl5tA29HzlfV9t76ruo7RU 1Wz7m/ufgWOMUc3Aw7eA4vDU -----END CERTIFICATE-----Generated at Thu Apr 25 21:25:06 2024 by rpki-client on console-ams.rpki-client.org