$ rpki-client -vvf 0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft File: D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft (raw, json) Hash identifier: P0VnVZJXYTBgy7gA5Mww7odxxnCPwPJ0Y+4SF6dsYQs= Subject key identifier: 9F:E6:27:CA:A7:79:6F:E7:87:D2:56:73:33:73:54:B0:73:BA:91:49 Authority key identifier: D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09 Certificate issuer: /CN=A91FD4CC0000/serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909 Certificate serial: 1963E8A61433C2BC80E259B7971C54F2445406C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer Subject info access: rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft Manifest number: 05F0 Signing time: Fri 05 Sep 2025 17:44:51 +0000 Manifest this update: Fri 05 Sep 2025 17:39:51 +0000 Manifest next update: Sat 06 Sep 2025 18:44:51 +0000 Files and hashes: 1: 3130332e3132312e3230382e302f32322d3234203d3e203233393539.roa (hash: tpj8IN3kMl+8dbcoOwEQnpMBvaMIdpHYI9uxhtsaOek=) 2: 323430333a373163303a3a2f33322d3438203d3e2034373835.roa (hash: neyYF6TgtOcAkGMz1hTMC5RbHMnVjwd7iQRSvV4vJaM=) 3: 3130332e3132312e3230382e302f32322d3234203d3e2034373835.roa (hash: 7uF6pb9yx6cXF+5oK4jEmcHdIO+xln1/dTy3CvmNraI=) 4: D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl (hash: Uh6+hs5arcCUgp3rH2sGtg3VwR0DPO0PLIIBP5mseLw=) 5: 323430333a373163303a3a2f33322d3438203d3e2033323538.roa (hash: /0TIiXzZkdshf306gvpxHBaOY31/ZlaUpzWQMbDlABE=) 6: 323430333a373163303a3a2f33322d3438203d3e203233393539.roa (hash: Yah6HZnMNDn4XvmcUXeHLxkyzp17P1oJRLMzMO6SZ8E=) 7: 3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa (hash: VMZN08rr5TJWG1SskYiHeIXk4cWC6ozcRj/ZvNJ7dq0=) Validation: OK Signature path: rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 18:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:63:e8:a6:14:33:c2:bc:80:e2:59:b7:97:1c:54:f2:44:54:06:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000, serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909 Validity Not Before: Sep 5 17:39:51 2025 GMT Not After : Sep 6 18:44:51 2025 GMT Subject: CN=9FE627CAA7796FE787D25673337354B073BA9149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0e:e6:34:45:9e:27:10:c3:63:71:42:d5:08: 1e:e1:27:bc:23:55:2a:e6:e2:47:70:f6:7c:33:9f: 96:6a:09:2c:c1:19:30:ff:76:09:4e:05:57:83:2c: cb:f6:49:3e:de:10:19:d5:51:54:2d:cd:90:f5:ab: b2:5e:3d:2e:0c:86:3a:a7:5d:ba:c0:03:bf:25:e8: d4:d9:56:62:c7:c8:bf:95:b0:73:d7:67:4e:5a:cf: 77:08:9b:42:b7:58:56:82:76:b0:1a:72:a8:f9:1b: 2e:e2:1b:a3:bc:d3:65:4c:6e:00:86:e7:b7:6f:cc: 7d:bb:6c:6f:dc:13:bc:13:f7:dc:fb:56:a5:15:7e: 97:fa:21:f8:3f:d3:7e:5a:8c:5f:33:cd:48:34:c8: e5:57:e1:73:6d:1b:4e:00:5b:46:41:6e:a4:2c:96: 16:4a:4c:ce:77:be:5e:39:a1:72:4f:d4:ea:8f:77: 1c:c4:67:a4:1f:d9:26:0b:3e:27:6d:82:28:c4:54: 8b:82:3b:e7:23:2c:2a:9b:a6:aa:ec:75:e3:6b:89: a9:53:18:e6:c0:29:67:e6:2d:2d:94:74:f8:68:b4: 9c:58:b3:62:6f:aa:97:45:3b:ff:0b:44:73:ed:01: c6:13:88:b2:62:b4:b8:c0:73:e7:38:2a:41:47:85: aa:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E6:27:CA:A7:79:6F:E7:87:D2:56:73:33:73:54:B0:73:BA:91:49 X509v3 Authority Key Identifier: keyid:D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:bd:c4:17:79:e8:e8:df:15:a6:71:fb:d8:a1:1b:a4:9d:44: 73:68:5b:1b:6a:c2:4e:9b:5b:6a:1d:65:ba:14:f1:27:2f:66: 6c:7b:cc:46:4a:b2:ad:7d:fd:aa:0d:55:a9:6e:1f:53:9e:f5: ff:9c:4c:90:1b:36:40:c6:70:6a:93:f1:c9:71:3b:61:bb:1a: ce:3c:23:b4:4e:4f:69:88:82:39:81:d2:b5:a1:41:cd:12:40: 10:30:16:2e:c7:96:95:23:00:32:f2:c1:d2:68:a1:27:cc:0d: ec:9a:0a:34:26:02:05:18:22:13:95:7a:6d:6c:76:77:a5:9b: 97:c2:b7:11:6e:0e:3f:af:8a:25:9f:39:4c:51:b8:44:c3:a4: ce:8b:25:6a:b8:49:93:2f:c0:8c:64:db:d1:79:5e:a9:fb:82: d7:3c:0f:19:97:82:d9:ee:a8:5c:a9:75:36:aa:14:3c:91:66: 8f:68:74:42:44:9c:84:1c:4c:79:51:ba:0e:dd:6a:e8:30:91: ed:46:3b:37:8e:b6:51:99:cb:6e:03:8d:f0:7d:2d:37:a8:8d: 50:eb:17:b3:77:8f:bf:11:b7:fd:93:07:26:3d:34:e4:ae:14: 23:d2:65:3b:60:70:f7:ff:14:c2:fd:54:68:f0:eb:c8:29:8e: 1f:b2:df:91 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUGWPophQzwryA4lm3lxxU8kRUBsQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhENjdDNTMwQzhF MTZCNjFGRjUyQzA4NUIyNzg2QzY3RUNDRDZBOTA5MB4XDTI1MDkwNTE3Mzk1MVoX DTI1MDkwNjE4NDQ1MVowMzExMC8GA1UEAxMoOUZFNjI3Q0FBNzc5NkZFNzg3RDI1 NjczMzM3MzU0QjA3M0JBOTE0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJkO5jRFnicQw2NxQtUIHuEnvCNVKubiR3D2fDOflmoJLMEZMP92CU4FV4Ms y/ZJPt4QGdVRVC3NkPWrsl49LgyGOqddusADvyXo1NlWYsfIv5Wwc9dnTlrPdwib QrdYVoJ2sBpyqPkbLuIbo7zTZUxuAIbnt2/Mfbtsb9wTvBP33PtWpRV+l/oh+D/T flqMXzPNSDTI5Vfhc20bTgBbRkFupCyWFkpMzne+Xjmhck/U6o93HMRnpB/ZJgs+ J22CKMRUi4I75yMsKpumqux142uJqVMY5sApZ+YtLZR0+Gi0nFizYm+ql0U7/wtE c+0BxhOIsmK0uMBz5zgqQUeFqv0CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBSf5ifK p3lv54fSVnMzc1Swc7qRSTAfBgNVHSMEGDAWgBTWfFMMjha2H/UsCFsnhsZ+zNap CTAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi L3JlcG8vc2IvMzgvRDY3QzUzMEM4RTE2QjYxRkY1MkMwODVCMjc4NkM2N0VDQ0Q2 QTkwOS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD NzJGRDFGRjIvMW54VERJNFd0aF8xTEFoYko0Ykdmc3pXcVFrLmNlcjBgBggrBgEF BQcBCwRUMFIwUAYIKwYBBQUHMAuGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzM4L0Q2 N0M1MzBDOEUxNkI2MUZGNTJDMDg1QjI3ODZDNjdFQ0NENkE5MDkubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBwvcQXeejo3xWmcfvYoRuknURzaFsbasJOm1tqHWW6FPEnL2Zse8xGSrKtff2q DVWpbh9TnvX/nEyQGzZAxnBqk/HJcTthuxrOPCO0Tk9piII5gdK1oUHNEkAQMBYu x5aVIwAy8sHSaKEnzA3smgo0JgIFGCITlXptbHZ3pZuXwrcRbg4/r4olnzlMUbhE w6TOiyVquEmTL8CMZNvReV6p+4LXPA8Zl4LZ7qhcqXU2qhQ8kWaPaHRCRJyEHEx5 UboO3WroMJHtRjs3jrZRmctuA43wfS03qI1Q6xezd4+/Ebf9kwcmPTTkrhQj0mU7 YHD3/xTC/VRo8OvIKY4fst+R -----END CERTIFICATE-----Generated at Sat Sep 6 04:54:25 2025 by rpki-client