$ rpki-client -vvf 0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft File: D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft (raw, json) Hash identifier: BALs0RFv0uO/jY72uL0dLgVypzf8rEMjs6bEZrLiQcg= Subject key identifier: AD:78:94:98:D5:3D:0C:26:B6:C2:5F:CC:A4:D4:25:30:8E:32:64:3A Authority key identifier: D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09 Certificate issuer: /CN=A91FD4CC0000/serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909 Certificate serial: 6C85E7F91F62BB29B4B4AC5184408ED212820E61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer Subject info access: rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft Manifest number: 05AD Signing time: Mon 21 Jul 2025 11:53:44 +0000 Manifest this update: Mon 21 Jul 2025 11:48:44 +0000 Manifest next update: Tue 22 Jul 2025 12:15:44 +0000 Files and hashes: 1: 3130332e3132312e3230382e302f32322d3234203d3e203233393539.roa (hash: PegEYUymB7bV2LaJfDlbCZ46OazdHwSVPEyEk1ugwdc=) 2: D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl (hash: Enj/lq/jKzcM4OMKJEgxea+mO0DKKJaYvpeMbkRoXEU=) 3: 323430333a373163303a3a2f33322d3438203d3e2033323538.roa (hash: /0TIiXzZkdshf306gvpxHBaOY31/ZlaUpzWQMbDlABE=) 4: 3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa (hash: VMZN08rr5TJWG1SskYiHeIXk4cWC6ozcRj/ZvNJ7dq0=) 5: 3130332e3132312e3230382e302f32322d3234203d3e2034373835.roa (hash: iuljOAsLSKVwvWGjODt0WgQ6KS5iH6O0NdpCsdOgkDg=) 6: 323430333a373163303a3a2f33322d3438203d3e203233393539.roa (hash: z9KuwO7drol9+zCvvvgJ3UbxeuhHjgTs/AJZgP7dbTI=) 7: 323430333a373163303a3a2f33322d3438203d3e2034373835.roa (hash: +JRVjjSDXJVl0UXKsoTuOrFeVJ81+M8Vd2Ev+ptLls4=) Validation: OK Signature path: rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 12:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:85:e7:f9:1f:62:bb:29:b4:b4:ac:51:84:40:8e:d2:12:82:0e:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000, serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909 Validity Not Before: Jul 21 11:48:44 2025 GMT Not After : Jul 22 12:15:44 2025 GMT Subject: CN=AD789498D53D0C26B6C25FCCA4D425308E32643A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:72:fc:24:e4:9b:1e:5c:71:b8:ff:ef:b9:98: 10:80:1e:26:4f:ad:f9:b0:23:72:5e:36:87:3d:d5: 4d:3e:a1:fa:15:35:6c:84:00:9c:90:8d:91:6d:4b: a8:e5:bd:2a:5a:f4:a8:66:50:c1:6f:d3:47:2c:b7: 15:71:fb:1e:2e:70:5a:54:f9:96:8a:cd:66:78:5b: bf:be:69:ee:c5:7c:a5:66:71:41:c5:fe:d3:09:10: 1c:22:88:2d:82:a0:79:ad:27:b7:59:a7:7a:a7:1b: 85:95:8a:b0:20:9d:3e:a0:56:96:e4:ca:b3:2d:99: 61:dc:11:ee:09:47:ce:09:5b:3c:eb:38:f8:7b:56: 73:af:5c:94:5c:e8:51:73:3f:bb:05:5d:58:8f:5b: b4:88:07:e5:01:8d:bf:10:ef:79:65:eb:05:41:f8: fe:87:3e:ba:d0:52:51:4b:f4:16:5d:75:4b:b9:d9: 7b:af:af:82:aa:19:1b:79:38:ff:b7:69:46:b0:ec: a9:b7:c7:7f:af:11:59:8d:8f:86:a6:7a:3f:1a:6f: 44:97:7c:ae:31:7e:6d:f6:70:15:84:06:26:7a:11: 6f:0d:80:d8:b0:88:b9:cb:8b:e4:64:92:29:3c:9f: 99:ec:1d:e2:e5:dc:62:bc:c2:c6:06:f4:25:54:66: b0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:78:94:98:D5:3D:0C:26:B6:C2:5F:CC:A4:D4:25:30:8E:32:64:3A X509v3 Authority Key Identifier: keyid:D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:0f:b5:8d:9a:85:1e:c8:3c:55:72:c2:09:1d:ba:c9:05:2d: 70:3b:48:90:ef:9f:e3:01:73:29:20:aa:ca:3b:48:81:3c:36: 52:8f:20:44:17:1a:0e:35:74:d3:ec:3a:76:fe:7d:b6:ae:27: 5f:56:5b:f6:51:97:42:5a:89:29:ca:b5:77:c0:a8:1a:5a:1c: b1:b2:a7:5a:97:4f:7d:7a:7a:02:54:ba:cf:c1:0f:0d:dd:f7: b3:2b:86:b3:70:5b:18:ca:db:ff:8c:82:f0:b0:d6:81:58:07: c9:90:75:aa:45:56:2c:3c:12:61:1b:a6:fc:4a:ae:ba:4f:f4: 93:fb:f7:9c:90:ef:17:91:54:46:e3:1f:a4:ad:1a:6b:5a:44: 3b:6d:42:80:67:a5:9a:b3:48:01:79:6f:92:37:81:c8:82:f1: 32:44:4d:1d:97:d7:19:0b:4e:53:72:d3:98:b7:15:7f:c5:a7: 3e:22:be:b0:fc:e2:12:2f:0f:b8:6d:da:0a:55:e7:f8:81:c4: 15:74:da:4a:50:9d:7e:60:30:e7:d7:34:01:8a:58:d8:c1:4a: b2:38:c2:76:06:c1:8d:ad:eb:b8:65:62:c0:0c:e1:13:f8:48: cf:a2:65:2d:36:31:db:d7:d8:ca:0b:68:4a:d0:30:a0:ff:e5: 7c:0d:4c:38 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUbIXn+R9iuym0tKxRhECO0hKCDmEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhENjdDNTMwQzhF MTZCNjFGRjUyQzA4NUIyNzg2QzY3RUNDRDZBOTA5MB4XDTI1MDcyMTExNDg0NFoX DTI1MDcyMjEyMTU0NFowMzExMC8GA1UEAxMoQUQ3ODk0OThENTNEMEMyNkI2QzI1 RkNDQTRENDI1MzA4RTMyNjQzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL1y/CTkmx5ccbj/77mYEIAeJk+t+bAjcl42hz3VTT6h+hU1bIQAnJCNkW1L qOW9Klr0qGZQwW/TRyy3FXH7Hi5wWlT5lorNZnhbv75p7sV8pWZxQcX+0wkQHCKI LYKgea0nt1mneqcbhZWKsCCdPqBWluTKsy2ZYdwR7glHzglbPOs4+HtWc69clFzo UXM/uwVdWI9btIgH5QGNvxDveWXrBUH4/oc+utBSUUv0Fl11S7nZe6+vgqoZG3k4 /7dpRrDsqbfHf68RWY2PhqZ6PxpvRJd8rjF+bfZwFYQGJnoRbw2A2LCIucuL5GSS KTyfmewd4uXcYrzCxgb0JVRmsG8CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBSteJSY 1T0MJrbCX8yk1CUwjjJkOjAfBgNVHSMEGDAWgBTWfFMMjha2H/UsCFsnhsZ+zNap CTAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi L3JlcG8vc2IvMzgvRDY3QzUzMEM4RTE2QjYxRkY1MkMwODVCMjc4NkM2N0VDQ0Q2 QTkwOS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD NzJGRDFGRjIvMW54VERJNFd0aF8xTEFoYko0Ykdmc3pXcVFrLmNlcjBgBggrBgEF BQcBCwRUMFIwUAYIKwYBBQUHMAuGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzM4L0Q2 N0M1MzBDOEUxNkI2MUZGNTJDMDg1QjI3ODZDNjdFQ0NENkE5MDkubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAlD7WNmoUeyDxVcsIJHbrJBS1wO0iQ75/jAXMpIKrKO0iBPDZSjyBEFxoONXTT 7Dp2/n22ridfVlv2UZdCWokpyrV3wKgaWhyxsqdal099enoCVLrPwQ8N3fezK4az cFsYytv/jILwsNaBWAfJkHWqRVYsPBJhG6b8Sq66T/ST+/eckO8XkVRG4x+krRpr WkQ7bUKAZ6Was0gBeW+SN4HIgvEyRE0dl9cZC05TctOYtxV/xac+Ir6w/OISLw+4 bdoKVef4gcQVdNpKUJ1+YDDn1zQBiljYwUqyOMJ2BsGNreu4ZWLADOET+EjPomUt NjHb19jKC2hK0DCg/+V8DUw4 -----END CERTIFICATE-----Generated at Mon Jul 21 18:12:01 2025 by rpki-client