$ rpki-client -vvf 0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft File: D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft (raw, json) Hash identifier: 1E4A80Uyn/lM4UmZ5W12f4hXrb7xIv5q/dK4sL3J+ac= Subject key identifier: BA:54:2D:1C:25:9C:B4:5A:DF:C8:E1:29:2C:C8:F0:DF:F2:06:D2:20 Authority key identifier: D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09 Certificate issuer: /CN=A91FD4CC0000/serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909 Certificate serial: 4425D9841DD133D2461A3AF3CDDABFE2E0BF65F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer Subject info access: rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft Manifest number: 034A Signing time: Thu 02 May 2024 13:14:09 +0000 Manifest this update: Thu 02 May 2024 13:09:09 +0000 Manifest next update: Fri 03 May 2024 16:16:09 +0000 Files and hashes: 1: 3130332e3132312e3230382e302f32322d3234203d3e2034373835.roa (hash: vbxYdFg0aegskyQuBPn96h0WGx9iZqRV31LdiP1Xj1U=) 2: 323430333a373163303a3a2f33322d3438203d3e2034373835.roa (hash: ndUt9XJuqBDDpStV9DofkPw51jjAMotXjG3jlnbpSAI=) 3: 323430333a373163303a3a2f33322d3438203d3e2033323538.roa (hash: wmNj7WYBWsP0u6f6kuBoDQe02jNTdfhFUwA5A3Xo+Yw=) 4: 3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa (hash: Q7tdmvbCnFyFiZn1Rq8UKNhDPns/uhojrJqGIwxnaZg=) 5: 3130332e3132312e3230382e302f32322d3234203d3e203233393539.roa (hash: yxZmdI+7X3hNphzWakPdpiqYEf7M5bPDcNmLeEYDyUI=) 6: D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl (hash: 96K5aefAcW9mx/V5TlYcG4hGZpwFNXg7YtUqFOuBpD4=) 7: 323430333a373163303a3a2f33322d3438203d3e203233393539.roa (hash: H2Iod7cZLNczla7IO9IMlFrvjgXDx2fp8c9fYF1yjIs=) Validation: OK Signature path: rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:25:d9:84:1d:d1:33:d2:46:1a:3a:f3:cd:da:bf:e2:e0:bf:65:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000/serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909 Validity Not Before: May 2 13:09:09 2024 GMT Not After : May 3 16:16:09 2024 GMT Subject: CN=BA542D1C259CB45ADFC8E1292CC8F0DFF206D220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b0:db:67:65:98:81:35:19:27:3f:7e:67:eb: 1e:9a:4c:94:5e:eb:04:57:c7:95:57:2e:dd:53:6f: ab:93:50:70:47:3d:98:ec:95:00:7c:39:c4:8d:3b: 6f:c9:f9:fd:26:65:36:38:ae:d9:20:06:ed:10:b7: 3b:4c:66:c7:fe:e2:01:12:9e:8a:19:e6:df:b1:7b: 95:64:23:88:aa:2b:45:a1:f6:ce:02:bf:e1:50:2d: 40:7b:84:61:f4:04:0a:10:f6:1e:1c:54:f4:57:59: 02:eb:87:fc:35:9c:7f:a9:17:4c:27:de:56:29:0e: 6b:86:90:1a:4a:88:73:67:8f:ea:dd:dd:1f:7c:75: 77:e1:50:64:66:4a:94:14:02:02:e5:75:fe:61:69: 3d:dd:de:13:66:4a:ae:1b:02:b3:22:d5:88:f5:3e: 0e:78:a9:2e:4d:02:67:4d:82:5d:4f:c1:09:89:80: f2:bd:60:8e:83:ad:e1:4c:96:78:33:a7:08:d9:5b: 60:06:5c:4e:38:1a:89:a3:45:fc:d2:f4:c4:0a:da: f1:0a:31:4b:cb:9e:94:fb:dc:5c:45:dc:10:2b:b2: 6b:63:60:c5:07:5b:65:0d:16:20:1a:b7:d8:c8:94: 94:49:6d:2c:e0:94:5c:e3:50:83:e5:42:c1:39:0a: 15:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:54:2D:1C:25:9C:B4:5A:DF:C8:E1:29:2C:C8:F0:DF:F2:06:D2:20 X509v3 Authority Key Identifier: keyid:D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:95:04:4a:93:a7:dd:bd:c4:d3:14:7f:87:b0:73:a7:94:a6: ab:42:61:4e:6e:06:b3:bc:9d:96:0e:af:18:53:04:b5:2c:a3: bd:83:5a:a5:67:76:84:1b:51:62:e5:f1:2f:7c:a6:a8:b6:5f: d5:8b:a1:5b:5d:7a:3e:d4:b8:83:c5:98:d6:81:2e:20:1b:43: e2:3a:23:c3:89:47:7b:3e:be:a0:99:c9:54:e0:fb:db:6d:a3: 02:af:e1:ea:3a:ba:2a:df:c7:39:a2:48:61:40:a6:4f:9d:ed: cd:d1:9e:00:23:0e:94:37:2f:89:6a:c6:13:10:c2:34:03:b0: 2b:6e:73:a6:b7:91:6c:0b:a9:85:07:5c:5e:3c:93:4c:61:1e: 8b:9d:95:96:ab:08:a3:f5:77:a9:41:3b:76:82:8d:e3:ce:f6: a2:0f:fb:eb:8e:a2:41:75:63:df:1a:79:04:a9:81:b5:34:64: cf:c7:ba:ae:6d:95:ec:69:e2:b9:68:29:d8:e1:90:00:bc:d6: be:72:06:36:0d:a1:4e:ce:f6:77:63:a9:0f:b9:47:b5:18:89: 82:30:1a:54:e5:93:70:e1:8b:04:db:34:4f:db:b3:21:7a:96: 3b:39:90:0e:08:04:2a:e4:30:6d:b7:27:55:3f:0e:29:40:dd: 5a:cb:e5:dd -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIURCXZhB3RM9JGGjrzzdq/4uC/ZfIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhENjdDNTMwQzhF MTZCNjFGRjUyQzA4NUIyNzg2QzY3RUNDRDZBOTA5MB4XDTI0MDUwMjEzMDkwOVoX DTI0MDUwMzE2MTYwOVowMzExMC8GA1UEAxMoQkE1NDJEMUMyNTlDQjQ1QURGQzhF MTI5MkNDOEYwREZGMjA2RDIyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+w22dlmIE1GSc/fmfrHppMlF7rBFfHlVcu3VNvq5NQcEc9mOyVAHw5xI07 b8n5/SZlNjiu2SAG7RC3O0xmx/7iARKeihnm37F7lWQjiKorRaH2zgK/4VAtQHuE YfQEChD2HhxU9FdZAuuH/DWcf6kXTCfeVikOa4aQGkqIc2eP6t3dH3x1d+FQZGZK lBQCAuV1/mFpPd3eE2ZKrhsCsyLViPU+DnipLk0CZ02CXU/BCYmA8r1gjoOt4UyW eDOnCNlbYAZcTjgaiaNF/NL0xAra8QoxS8uelPvcXEXcECuya2NgxQdbZQ0WIBq3 2MiUlEltLOCUXONQg+VCwTkKFbECAwEAAaOCAeEwggHdMB0GA1UdDgQWBBS6VC0c JZy0Wt/I4SksyPDf8gbSIDAfBgNVHSMEGDAWgBTWfFMMjha2H/UsCFsnhsZ+zNap CTAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi L3JlcG8vc2IvMzgvRDY3QzUzMEM4RTE2QjYxRkY1MkMwODVCMjc4NkM2N0VDQ0Q2 QTkwOS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD NzJGRDFGRjIvMW54VERJNFd0aF8xTEFoYko0Ykdmc3pXcVFrLmNlcjBgBggrBgEF BQcBCwRUMFIwUAYIKwYBBQUHMAuGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzM4L0Q2 N0M1MzBDOEUxNkI2MUZGNTJDMDg1QjI3ODZDNjdFQ0NENkE5MDkubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB5lQRKk6fdvcTTFH+HsHOnlKarQmFObgazvJ2WDq8YUwS1LKO9g1qlZ3aEG1Fi 5fEvfKaotl/Vi6FbXXo+1LiDxZjWgS4gG0PiOiPDiUd7Pr6gmclU4PvbbaMCr+Hq Oroq38c5okhhQKZPne3N0Z4AIw6UNy+JasYTEMI0A7ArbnOmt5FsC6mFB1xePJNM YR6LnZWWqwij9XepQTt2go3jzvaiD/vrjqJBdWPfGnkEqYG1NGTPx7qubZXsaeK5 aCnY4ZAAvNa+cgY2DaFOzvZ3Y6kPuUe1GImCMBpU5ZNw4YsE2zRP27MhepY7OZAO CAQq5DBttydVPw4pQN1ay+Xd -----END CERTIFICATE-----Generated at Thu May 2 14:39:40 2024 by rpki-client on console-ams.rpki-client.org