$ rpki-client -vvf 0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft File: D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft (raw, json) Hash identifier: 8r8V0sxJoHgOYK5nCsDkLX0pQaCKLSG3fc9sTRNIvd4= Subject key identifier: 71:17:90:1F:C0:56:67:DE:F0:34:53:71:CF:59:0A:02:86:18:2D:96 Authority key identifier: D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09 Certificate issuer: /CN=A91FD4CC0000/serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909 Certificate serial: 7E3FEE69DF93498E2CB4C0A7D160B61A6B44CC70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer Subject info access: rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft Manifest number: 0564 Signing time: Sat 31 May 2025 11:17:36 +0000 Manifest this update: Sat 31 May 2025 11:12:36 +0000 Manifest next update: Sun 01 Jun 2025 13:52:36 +0000 Files and hashes: 1: D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl (hash: F7tTDS42m0G4u4SVDFGRyiKz8ulyl9qx5sJJxMnCvAw=) 2: 3130332e3132312e3230382e302f32322d3234203d3e203233393539.roa (hash: PegEYUymB7bV2LaJfDlbCZ46OazdHwSVPEyEk1ugwdc=) 3: 323430333a373163303a3a2f33322d3438203d3e203233393539.roa (hash: z9KuwO7drol9+zCvvvgJ3UbxeuhHjgTs/AJZgP7dbTI=) 4: 323430333a373163303a3a2f33322d3438203d3e2034373835.roa (hash: +JRVjjSDXJVl0UXKsoTuOrFeVJ81+M8Vd2Ev+ptLls4=) 5: 323430333a373163303a3a2f33322d3438203d3e2033323538.roa (hash: /0TIiXzZkdshf306gvpxHBaOY31/ZlaUpzWQMbDlABE=) 6: 3130332e3132312e3230382e302f32322d3234203d3e2034373835.roa (hash: iuljOAsLSKVwvWGjODt0WgQ6KS5iH6O0NdpCsdOgkDg=) 7: 3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa (hash: VMZN08rr5TJWG1SskYiHeIXk4cWC6ozcRj/ZvNJ7dq0=) Validation: OK Signature path: rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Jun 2025 13:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:3f:ee:69:df:93:49:8e:2c:b4:c0:a7:d1:60:b6:1a:6b:44:cc:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000, serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909 Validity Not Before: May 31 11:12:36 2025 GMT Not After : Jun 1 13:52:36 2025 GMT Subject: CN=7117901FC05667DEF0345371CF590A0286182D96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5b:a1:66:5d:f3:4b:e4:20:2e:99:3d:1e:b4: ae:b0:c5:bd:53:97:79:fb:06:77:d8:df:ad:68:c7: 9e:55:b5:c6:de:2d:00:c4:72:e8:06:cc:92:04:8a: 93:41:00:ba:66:af:37:01:86:5d:7c:76:f3:4e:3d: 60:30:aa:31:07:ab:47:ad:d6:28:28:41:4f:ef:1a: 46:59:85:05:89:a2:37:ba:5c:9f:f5:62:c3:e4:b5: 9b:6c:0b:ea:ea:02:19:f3:96:6e:56:57:ea:97:b5: d8:0c:b9:ed:4a:b5:93:d1:a5:a6:ab:80:fa:12:c0: 14:e9:2f:dc:70:45:d6:9c:18:c3:d2:ab:c2:c0:69: 17:05:04:95:dc:65:b6:ce:75:7d:c4:9b:ed:d5:9e: fd:1f:c9:f4:ca:a3:84:37:19:d8:aa:e5:dc:5f:e5: 5a:8e:91:e9:67:32:38:9a:8d:f5:e5:31:54:a0:cf: 8f:79:00:ac:4a:6d:05:72:bf:22:60:14:4b:6e:96: 97:f4:6c:70:37:66:2f:ea:12:93:9c:c3:7e:e6:94: 75:01:bf:ec:f0:a9:85:93:4c:1f:e0:f5:a1:79:31: a5:75:5c:cb:03:da:20:35:39:db:bd:d3:24:4a:42: 17:2b:9d:d7:49:5b:1a:ea:d4:83:84:74:3d:4c:d8: 4a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:17:90:1F:C0:56:67:DE:F0:34:53:71:CF:59:0A:02:86:18:2D:96 X509v3 Authority Key Identifier: keyid:D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:eb:89:ae:c4:9b:e9:87:6c:e2:67:ab:3a:07:61:3e:4a:f5: d7:ea:f3:60:17:4e:f5:fd:28:e5:d9:c9:82:7d:38:1e:45:52: 64:ac:6a:04:71:b9:53:03:a0:c7:25:0a:6e:cf:60:a8:6b:b5: 1e:8d:e0:c5:6c:37:0f:7a:aa:87:0c:da:1a:f2:4b:7f:eb:f9: 35:ee:70:1a:e1:9c:57:f6:0e:80:af:66:76:e4:0d:aa:cc:6f: 4e:23:c1:6c:9e:17:23:b0:0c:28:90:b9:17:36:b1:d0:ff:5c: d0:4c:ee:ed:f6:bf:a3:d1:24:31:f4:ea:b6:59:39:ca:6b:21: 1a:2f:83:cd:c5:51:ab:91:41:c7:b4:3b:9b:ec:5e:45:84:c8: 41:45:a3:30:8c:c0:4e:53:3b:6b:c9:db:da:d3:bc:19:fc:26: 97:e5:df:63:2e:05:c1:c7:41:ed:53:a1:f9:b7:28:d6:ac:41: 9c:9e:31:7b:57:d5:f4:9a:bc:c7:56:2f:1c:08:70:68:cf:b0: 6e:f1:f2:82:11:fe:18:b3:a7:2c:65:aa:e6:f5:01:15:de:17: ef:14:c9:92:a5:f7:14:7a:a9:12:16:b9:e9:ed:4b:eb:1b:84: 70:4d:1a:82:4e:5f:93:86:20:1e:76:ca:4f:91:90:5d:9e:18: a6:10:58:cd -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUfj/uad+TSY4stMCn0WC2GmtEzHAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhENjdDNTMwQzhF MTZCNjFGRjUyQzA4NUIyNzg2QzY3RUNDRDZBOTA5MB4XDTI1MDUzMTExMTIzNloX DTI1MDYwMTEzNTIzNlowMzExMC8GA1UEAxMoNzExNzkwMUZDMDU2NjdERUYwMzQ1 MzcxQ0Y1OTBBMDI4NjE4MkQ5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOVboWZd80vkIC6ZPR60rrDFvVOXefsGd9jfrWjHnlW1xt4tAMRy6AbMkgSK k0EAumavNwGGXXx28049YDCqMQerR63WKChBT+8aRlmFBYmiN7pcn/Viw+S1m2wL 6uoCGfOWblZX6pe12Ay57Uq1k9GlpquA+hLAFOkv3HBF1pwYw9KrwsBpFwUEldxl ts51fcSb7dWe/R/J9MqjhDcZ2Krl3F/lWo6R6WcyOJqN9eUxVKDPj3kArEptBXK/ ImAUS26Wl/RscDdmL+oSk5zDfuaUdQG/7PCphZNMH+D1oXkxpXVcywPaIDU5273T JEpCFyud10lbGurUg4R0PUzYSskCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBRxF5Af wFZn3vA0U3HPWQoChhgtljAfBgNVHSMEGDAWgBTWfFMMjha2H/UsCFsnhsZ+zNap CTAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi L3JlcG8vc2IvMzgvRDY3QzUzMEM4RTE2QjYxRkY1MkMwODVCMjc4NkM2N0VDQ0Q2 QTkwOS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD NzJGRDFGRjIvMW54VERJNFd0aF8xTEFoYko0Ykdmc3pXcVFrLmNlcjBgBggrBgEF BQcBCwRUMFIwUAYIKwYBBQUHMAuGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzM4L0Q2 N0M1MzBDOEUxNkI2MUZGNTJDMDg1QjI3ODZDNjdFQ0NENkE5MDkubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCj64muxJvph2ziZ6s6B2E+SvXX6vNgF071/Sjl2cmCfTgeRVJkrGoEcblTA6DH JQpuz2Coa7UejeDFbDcPeqqHDNoa8kt/6/k17nAa4ZxX9g6Ar2Z25A2qzG9OI8Fs nhcjsAwokLkXNrHQ/1zQTO7t9r+j0SQx9Oq2WTnKayEaL4PNxVGrkUHHtDub7F5F hMhBRaMwjMBOUztrydva07wZ/CaX5d9jLgXBx0HtU6H5tyjWrEGcnjF7V9X0mrzH Vi8cCHBoz7Bu8fKCEf4Ys6csZarm9QEV3hfvFMmSpfcUeqkSFrnp7UvrG4RwTRqC Tl+ThiAedspPkZBdnhimEFjN -----END CERTIFICATE-----Generated at Sat May 31 16:32:17 2025 by rpki-client