$ rpki-client -vvf 0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.mft File: 81C294D4B365DC4172B5A21B67F05B20D6B87A62.mft (raw, json) Hash identifier: 1YAj3YwC/CSnLcLkD6Z6qgs88GeqnQrzPUaEJF2r57k= Subject key identifier: DB:AD:CF:A3:E6:DA:78:E2:B7:FA:6E:9E:DD:7E:75:D3:31:C6:53:19 Authority key identifier: 81:C2:94:D4:B3:65:DC:41:72:B5:A2:1B:67:F0:5B:20:D6:B8:7A:62 Certificate issuer: /CN=A9124B5E0000/serialNumber=81C294D4B365DC4172B5A21B67F05B20D6B87A62 Certificate serial: 3D77EDD2B4E28A8CD98E0D17C0106E1B36B45897 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gcKU1LNl3EFytaIbZ_BbINa4emI.cer Subject info access: rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.mft Manifest number: 04AB Signing time: Sat 04 May 2024 03:34:10 +0000 Manifest this update: Sat 04 May 2024 03:29:10 +0000 Manifest next update: Sun 05 May 2024 03:43:10 +0000 Files and hashes: 1: 323430343a393534303a3a2f33322d3438203d3e2038383838.roa (hash: 4c9QDwewwagrOrIHieA+l5PA+pDN8ApgtNJ9hBCElWc=) 2: 3130332e3133362e3134342e302f32322d3234203d3e203234323432.roa (hash: Naf6dU4B4UWzfYJV3ZiucPaFIDFKm1L1z8XHfC3TXRk=) 3: 323430343a393534303a3a2f33322d3438203d3e203234323432.roa (hash: cQZroKN8ztrKQnUySkbP0xXsDqHsFf6v3xh+Z/xvQ4I=) 4: 81C294D4B365DC4172B5A21B67F05B20D6B87A62.crl (hash: Kqekka37VQJL0RSvyzz5fSjaJx0hJuvY54tGOCBKQAw=) 5: 3130332e3133362e3134342e302f32322d3234203d3e203233383538.roa (hash: rTq1FsrQBV2rcQPLwlkfL/xIcEsR1hMIJbt4Nzh13mg=) 6: 3130332e3133362e3134342e302f32322d3234203d3e2038383838.roa (hash: D8RPxviAQ3vNKROod7U3SxCSNE4nIwcC7/0jpYQHv3Y=) 7: 3130332e3133362e3134372e302f32342d3234203d3e203433333537.roa (hash: yW3+BW5fu10HQ3mHSS/MBoD5crkNLphi/c+y50Np4jk=) Validation: OK Signature path: rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.crl rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gcKU1LNl3EFytaIbZ_BbINa4emI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:77:ed:d2:b4:e2:8a:8c:d9:8e:0d:17:c0:10:6e:1b:36:b4:58:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124B5E0000/serialNumber=81C294D4B365DC4172B5A21B67F05B20D6B87A62 Validity Not Before: May 4 03:29:10 2024 GMT Not After : May 5 03:43:10 2024 GMT Subject: CN=DBADCFA3E6DA78E2B7FA6E9EDD7E75D331C65319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:22:42:97:ae:4b:44:1c:a3:c1:8f:f1:f6:0a: 0c:c4:fb:dc:66:1c:b3:99:9a:d4:2a:c6:8f:ca:dd: 1e:96:85:84:18:99:53:6e:61:6c:ee:9a:3c:ab:4f: cc:4b:2f:d0:7d:52:fe:8d:b3:26:4b:09:48:48:5c: 68:e6:0c:a2:36:88:a9:2e:56:d3:96:64:9d:43:43: ec:c1:33:dd:ef:af:da:92:10:e0:35:c8:98:f2:95: 87:bd:e6:4e:47:c0:db:e9:56:75:d0:2d:55:66:ce: da:0d:7b:fb:47:4f:a1:8e:10:8b:d9:67:15:c9:16: 93:d7:e6:20:60:a1:bc:1c:f5:15:97:3b:38:21:9f: 21:0c:ea:3e:bd:d1:fe:60:85:ad:40:f4:3f:1e:c0: 69:b9:da:78:7f:0f:cb:01:ae:f8:59:de:91:c4:f9: 09:95:5c:9c:b6:c0:d7:61:54:d1:31:22:cd:d2:89: d1:03:a4:79:ac:bf:3c:66:ba:d8:60:55:a1:63:0b: ac:09:43:a4:8d:d2:cf:e3:7d:c6:ee:d2:0d:bd:5d: 32:19:24:4d:86:5d:08:c6:3e:01:1e:46:2c:40:a2: 16:ca:b9:c7:e1:87:75:f2:53:9c:dd:4c:cb:22:f8: 1f:f9:3b:cc:a6:a5:2e:65:57:74:0a:96:98:d3:ca: 79:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AD:CF:A3:E6:DA:78:E2:B7:FA:6E:9E:DD:7E:75:D3:31:C6:53:19 X509v3 Authority Key Identifier: keyid:81:C2:94:D4:B3:65:DC:41:72:B5:A2:1B:67:F0:5B:20:D6:B8:7A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gcKU1LNl3EFytaIbZ_BbINa4emI.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a6:49:19:22:f1:dd:10:27:da:5d:c5:43:dc:43:0c:f5:4f: ad:a2:69:8d:a1:32:e5:82:48:10:e5:7b:6c:34:c8:6c:0d:e4: bf:9f:24:72:28:24:70:2b:06:d0:bc:77:07:45:c5:74:55:81: fe:73:a1:bd:7e:47:0d:80:17:f4:9a:8c:b3:4f:5c:06:59:3d: 80:fc:a8:79:3a:c7:09:08:4f:d4:43:0f:c7:b0:ab:84:24:8b: ac:b0:42:fc:a1:c5:0c:56:e6:a7:3f:53:ed:e9:d9:df:6d:94: 9d:f9:6b:fd:27:cd:96:8a:37:38:c3:5e:78:15:fa:0f:47:46: f0:c2:a3:b9:36:d8:1d:99:f8:a1:b1:4f:e6:ed:8c:eb:9d:54: d8:61:91:40:8d:4c:18:ca:04:53:89:d6:1a:d1:7e:e8:4b:9e: 05:b2:b1:ea:36:4a:ad:f2:16:66:7f:76:1d:74:52:1c:9f:0f: 12:7c:74:89:b6:3a:40:54:5e:34:69:b4:64:b0:38:2b:9a:c4: e0:e4:2c:9a:ff:95:8a:a6:72:b9:9c:de:67:f7:0f:4a:5b:22: b5:39:07:87:83:75:e4:cc:9e:cd:2e:0a:99:6f:7f:51:c8:e7: 60:ac:13:d6:c6:e4:18:35:c0:e2:b5:31:b4:af:e4:21:e8:81: 5a:c6:2f:27 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUPXft0rTiiozZjg0XwBBuGza0WJcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyg4MUMyOTRENEIz NjVEQzQxNzJCNUEyMUI2N0YwNUIyMEQ2Qjg3QTYyMB4XDTI0MDUwNDAzMjkxMFoX DTI0MDUwNTAzNDMxMFowMzExMC8GA1UEAxMoREJBRENGQTNFNkRBNzhFMkI3RkE2 RTlFREQ3RTc1RDMzMUM2NTMxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ0iQpeuS0Qco8GP8fYKDMT73GYcs5ma1CrGj8rdHpaFhBiZU25hbO6aPKtP zEsv0H1S/o2zJksJSEhcaOYMojaIqS5W05ZknUND7MEz3e+v2pIQ4DXImPKVh73m TkfA2+lWddAtVWbO2g17+0dPoY4Qi9lnFckWk9fmIGChvBz1FZc7OCGfIQzqPr3R /mCFrUD0Px7AabnaeH8PywGu+FnekcT5CZVcnLbA12FU0TEizdKJ0QOkeay/PGa6 2GBVoWMLrAlDpI3Sz+N9xu7SDb1dMhkkTYZdCMY+AR5GLECiFsq5x+GHdfJTnN1M yyL4H/k7zKalLmVXdAqWmNPKeSECAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTbrc+j 5tp44rf6bp7dfnXTMcZTGTAfBgNVHSMEGDAWgBSBwpTUs2XcQXK1ohtn8Fsg1rh6 YjAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi L3JlcG8vc2IvMzEvODFDMjk0RDRCMzY1REM0MTcyQjVBMjFCNjdGMDVCMjBENkI4 N0E2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD NzJGRDFGRjIvZ2NLVTFMTmwzRUZ5dGFJYlpfQmJJTmE0ZW1JLmNlcjBgBggrBgEF BQcBCwRUMFIwUAYIKwYBBQUHMAuGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzMxLzgx QzI5NEQ0QjM2NURDNDE3MkI1QTIxQjY3RjA1QjIwRDZCODdBNjIubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAppkkZIvHdECfaXcVD3EMM9U+tommNoTLlgkgQ5XtsNMhsDeS/nyRyKCRwKwbQ vHcHRcV0VYH+c6G9fkcNgBf0moyzT1wGWT2A/Kh5OscJCE/UQw/HsKuEJIussEL8 ocUMVuanP1Pt6dnfbZSd+Wv9J82Wijc4w154FfoPR0bwwqO5NtgdmfihsU/m7Yzr nVTYYZFAjUwYygRTidYa0X7oS54FsrHqNkqt8hZmf3YddFIcnw8SfHSJtjpAVF40 abRksDgrmsTg5Cya/5WKpnK5nN5n9w9KWyK1OQeHg3XkzJ7NLgqZb39RyOdgrBPW xuQYNcDitTG0r+Qh6IFaxi8n -----END CERTIFICATE-----Generated at Sat May 4 04:32:35 2024 by rpki-client on console-ams.rpki-client.org