$ rpki-client -vvf 0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft File: 52840422D0B72BA9927DE0FF73535FDF163521A4.mft (raw, json) Hash identifier: s7JLjczsmkpStzOhzelueZ7gMVRHeJX3m9hQzfxl72g= Subject key identifier: 13:F6:1A:E5:B8:65:D5:60:E7:EB:6F:1F:B6:6B:B0:EE:71:5C:48:6D Authority key identifier: 52:84:04:22:D0:B7:2B:A9:92:7D:E0:FF:73:53:5F:DF:16:35:21:A4 Certificate issuer: /CN=A91FFE3F0000/serialNumber=52840422D0B72BA9927DE0FF73535FDF163521A4 Certificate serial: 093E7D0004EAED56354E20F91981D202EB22CDDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer Subject info access: rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft Manifest number: 05AF Signing time: Mon 21 Jul 2025 12:28:44 +0000 Manifest this update: Mon 21 Jul 2025 12:23:44 +0000 Manifest next update: Tue 22 Jul 2025 13:49:44 +0000 Files and hashes: 1: 3130332e3230312e3132382e302f32322d3234203d3e2033323538.roa (hash: NzvxeOISCBxGqvrzZjBZu0oMo4rqIXiZ91cAneYGZFA=) 2: 3130332e3230312e3132382e302f32322d3234203d3e203233393539.roa (hash: BwA+UvEt8rQgMpY6yzoRxeikeIjObyDwDrnQIWxLovQ=) 3: 52840422D0B72BA9927DE0FF73535FDF163521A4.crl (hash: 5rDdZuShP5FDuKVFyGLeQTT6JNfpfY9ohjB6k22AL6M=) 4: 3130332e3230312e3132382e302f32322d3234203d3e2034373835.roa (hash: 9Ca/STubA5mtIYiuFQ8WX7AScvQ7uQdxOZpX1VuOAEU=) 5: 3230322e352e3232302e302f32322d3234203d3e2034373835.roa (hash: uqSnngrGzTZiBUYlKaqToTPF7fFslTgxeJJgiCqsN6M=) 6: 323430333a616338303a3a2f33322d3438203d3e2034373835.roa (hash: KwOnEN3O7Vdr8ofqxfbKIB2eLGC3zXsf6Pwqq9XZOeE=) Validation: OK Signature path: rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.crl rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 13:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:3e:7d:00:04:ea:ed:56:35:4e:20:f9:19:81:d2:02:eb:22:cd:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE3F0000, serialNumber=52840422D0B72BA9927DE0FF73535FDF163521A4 Validity Not Before: Jul 21 12:23:44 2025 GMT Not After : Jul 22 13:49:44 2025 GMT Subject: CN=13F61AE5B865D560E7EB6F1FB66BB0EE715C486D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1a:3a:18:48:01:62:06:ce:05:e4:22:98:f4: a1:95:48:e3:dc:60:d6:05:6e:82:b8:25:a0:d9:03: 3b:2c:f3:c9:e3:48:f1:db:b9:99:da:a3:80:8c:aa: 1b:c6:2e:f1:89:61:b3:08:e1:77:20:e9:66:82:37: ac:1d:f8:44:fd:4d:4a:11:d3:5b:5a:32:d3:1c:e4: d9:6a:c5:14:a8:82:0d:12:ce:64:d4:69:05:1e:f9: 23:f9:6c:da:0a:00:16:b8:15:bf:f8:b0:57:a7:f0: 01:d9:7e:ce:fe:26:61:ed:49:b5:26:0f:18:b4:57: 49:40:99:55:b4:ab:63:67:96:97:03:dc:5e:98:77: dd:d9:ca:ee:07:0c:7f:55:60:a3:31:42:5d:98:0f: f2:cd:36:4b:9a:c6:6f:14:86:35:d9:81:ce:85:67: 74:4c:80:80:f1:d1:ac:cd:13:ac:4f:9c:74:cd:d5: 43:86:3a:2e:f6:b9:73:5a:b3:5c:9a:b3:74:c0:f1: 91:65:20:22:1a:92:b5:ab:28:11:4c:cd:1a:7e:82: dc:a7:32:89:cc:ff:57:25:1c:3c:9c:60:5d:ce:0e: 6d:56:4d:ef:2d:93:8e:2a:0e:7e:22:74:cc:d6:14: 93:b9:0e:02:5d:0c:e7:ed:8d:2d:9a:c2:37:9b:d8: 63:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F6:1A:E5:B8:65:D5:60:E7:EB:6F:1F:B6:6B:B0:EE:71:5C:48:6D X509v3 Authority Key Identifier: keyid:52:84:04:22:D0:B7:2B:A9:92:7D:E0:FF:73:53:5F:DF:16:35:21:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:dc:f3:b9:19:8b:bd:38:0f:82:0b:2c:33:1c:82:16:21:d7: 0a:d0:a9:33:ad:10:00:d5:10:8b:a9:63:77:f2:fd:0b:f3:ea: fe:c6:c1:fa:89:54:7c:af:80:9c:b1:e2:0b:18:40:f1:1d:ca: 75:fd:e3:ef:2d:dc:f3:49:3b:60:b9:dc:91:1d:ea:49:36:06: ff:1e:41:4c:a5:78:8b:6b:8c:12:b8:b3:94:bc:08:a1:f1:51: 4a:47:c4:4e:fb:07:9e:8a:e5:41:90:7d:df:8b:a4:5c:1d:d2: 7d:c7:2b:1f:5b:7c:73:06:19:86:0b:1c:65:62:8b:76:5f:83: d7:ca:44:91:0e:bb:21:a5:bc:4c:0b:27:42:a3:64:17:9c:b4: a5:29:ef:56:cb:5f:d2:74:25:e3:b3:8d:d3:ff:cd:a4:29:b9: 3c:ce:60:21:ca:3e:15:e0:db:0b:da:be:1d:e1:60:a1:5a:f7: 3e:9e:6d:68:1d:94:83:d3:8a:4f:0e:86:6d:41:8c:d4:87:7e: 72:fa:0e:72:b0:37:59:79:8e:2c:9f:21:22:ec:ac:ff:d7:77: b2:dd:26:ae:db:bb:ff:4d:ff:67:25:45:8f:59:5b:68:5e:1d: 20:6c:e6:0d:f7:f5:33:f9:fb:fb:4c:66:39:a5:b6:08:26:55: 72:af:d0:02 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUCT59AATq7VY1TiD5GYHSAusizdswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkZFM0YwMDAwMTEwLwYDVQQFEyg1Mjg0MDQyMkQw QjcyQkE5OTI3REUwRkY3MzUzNUZERjE2MzUyMUE0MB4XDTI1MDcyMTEyMjM0NFoX DTI1MDcyMjEzNDk0NFowMzExMC8GA1UEAxMoMTNGNjFBRTVCODY1RDU2MEU3RUI2 RjFGQjY2QkIwRUU3MTVDNDg2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOAaOhhIAWIGzgXkIpj0oZVI49xg1gVugrgloNkDOyzzyeNI8du5mdqjgIyq G8Yu8YlhswjhdyDpZoI3rB34RP1NShHTW1oy0xzk2WrFFKiCDRLOZNRpBR75I/ls 2goAFrgVv/iwV6fwAdl+zv4mYe1JtSYPGLRXSUCZVbSrY2eWlwPcXph33dnK7gcM f1VgozFCXZgP8s02S5rGbxSGNdmBzoVndEyAgPHRrM0TrE+cdM3VQ4Y6Lva5c1qz XJqzdMDxkWUgIhqStasoEUzNGn6C3Kcyicz/VyUcPJxgXc4ObVZN7y2TjioOfiJ0 zNYUk7kOAl0M5+2NLZrCN5vYYwkCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBQT9hrl uGXVYOfrbx+2a7DucVxIbTAfBgNVHSMEGDAWgBRShAQi0LcrqZJ94P9zU1/fFjUh pDAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi L3JlcG8vc2IvMzkvNTI4NDA0MjJEMEI3MkJBOTkyN0RFMEZGNzM1MzVGREYxNjM1 MjFBNC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD NzJGRDFGRjIvVW9RRUl0QzNLNm1TZmVEX2MxTmYzeFkxSWFRLmNlcjBgBggrBgEF BQcBCwRUMFIwUAYIKwYBBQUHMAuGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzM5LzUy ODQwNDIyRDBCNzJCQTk5MjdERTBGRjczNTM1RkRGMTYzNTIxQTQubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBl3PO5GYu9OA+CCywzHIIWIdcK0KkzrRAA1RCLqWN38v0L8+r+xsH6iVR8r4Cc seILGEDxHcp1/ePvLdzzSTtgudyRHepJNgb/HkFMpXiLa4wSuLOUvAih8VFKR8RO +weeiuVBkH3fi6RcHdJ9xysfW3xzBhmGCxxlYot2X4PXykSRDrshpbxMCydCo2QX nLSlKe9Wy1/SdCXjs43T/82kKbk8zmAhyj4V4NsL2r4d4WChWvc+nm1oHZSD04pP DoZtQYzUh35y+g5ysDdZeY4snyEi7Kz/13ey3Sau27v/Tf9nJUWPWVtoXh0gbOYN 9/Uz+fv7TGY5pbYIJlVyr9AC -----END CERTIFICATE-----Generated at Mon Jul 21 18:03:53 2025 by rpki-client