$ rpki-client -vvf 0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft File: 52840422D0B72BA9927DE0FF73535FDF163521A4.mft (raw, json) Hash identifier: 8uAMTU8TcwxLq8H4xXci7u9C9f2pLVLQkhs5FpkrixA= Subject key identifier: 50:67:81:8D:6E:0D:41:24:F4:37:EB:18:2B:6A:62:9D:8F:95:D6:89 Authority key identifier: 52:84:04:22:D0:B7:2B:A9:92:7D:E0:FF:73:53:5F:DF:16:35:21:A4 Certificate issuer: /CN=A91FFE3F0000/serialNumber=52840422D0B72BA9927DE0FF73535FDF163521A4 Certificate serial: 45980053BFFF201211A578C562541246335ACEEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer Subject info access: rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft Manifest number: 036D Signing time: Sat 25 May 2024 13:04:48 +0000 Manifest this update: Sat 25 May 2024 12:59:48 +0000 Manifest next update: Sun 26 May 2024 15:30:48 +0000 Files and hashes: 1: 3130332e3230312e3132382e302f32322d3234203d3e203233393539.roa (hash: Ba0Cvu9WbZFhfLh1lczmTUUQySQrVlrHRfRaUrK9GUM=) 2: 3230322e352e3232302e302f32322d3234203d3e2034373835.roa (hash: YD4xtTrr4+u4JmWLsAgfashGmE3L/IkuxepjHpDW78c=) 3: 52840422D0B72BA9927DE0FF73535FDF163521A4.crl (hash: rr60ZIwDT/YKMeDqzdrBFOjwOBu/5Yi8bAZ+REFamP8=) 4: 3130332e3230312e3132382e302f32322d3234203d3e2034373835.roa (hash: VS6E8+3e/+gyWirRAMsqtE1nNwiUNQLiZaU8mzDNZcY=) 5: 323430333a616338303a3a2f33322d3438203d3e2034373835.roa (hash: BUjmBR/7/W8FFys4b4r81Mr71NR1+iN9V0dYwFmv7Kc=) 6: 3130332e3230312e3132382e302f32322d3234203d3e2033323538.roa (hash: AzaohjYaSSIV1Q6fmRXncx9iaadRmaHUjWlMQBGdnBA=) Validation: OK Signature path: rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.crl rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:98:00:53:bf:ff:20:12:11:a5:78:c5:62:54:12:46:33:5a:ce:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE3F0000/serialNumber=52840422D0B72BA9927DE0FF73535FDF163521A4 Validity Not Before: May 25 12:59:48 2024 GMT Not After : May 26 15:30:48 2024 GMT Subject: CN=5067818D6E0D4124F437EB182B6A629D8F95D689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:af:5d:3a:d9:50:1a:43:a7:3f:c4:b4:13:5c: b2:c0:4a:5f:f8:0c:d3:a3:c0:c1:f8:69:11:19:9e: 74:59:1a:19:0f:b9:ad:4f:be:dc:f7:0e:f8:bc:a6: 25:00:87:6b:72:7d:5b:7f:c5:11:b0:9c:0e:25:19: 8e:55:0b:96:06:f9:6d:32:87:ee:1e:f2:4f:f0:8b: 7d:1c:42:7f:4b:87:e1:a6:2d:16:85:bc:f1:c2:21: af:48:dc:9f:7f:77:b1:da:34:ee:43:00:c5:77:94: 43:ec:7c:6c:c1:01:4d:a9:08:d9:d4:f5:da:eb:cc: c4:e9:5f:9e:92:c5:c8:56:0f:a3:39:60:37:d5:33: 5e:89:13:0b:7f:2b:b7:89:81:c5:d8:84:ca:db:b8: 48:8c:dc:25:87:39:6d:8e:fd:d1:33:41:06:67:58: 97:6b:b9:0b:06:82:ce:70:40:9c:df:f3:b3:62:b8: f3:1b:de:9b:8e:b5:70:6f:ce:2a:e4:0c:5e:80:8d: 29:24:7c:f9:22:c3:0b:50:2c:23:12:e6:43:da:4f: 56:42:50:9b:7d:02:b8:34:0f:9c:07:f5:77:61:a0: 75:17:20:64:e1:9d:84:ae:ee:d9:aa:fe:4c:02:48: 40:b6:d2:3f:66:fd:9f:9d:b9:0a:d1:aa:2a:26:29: f8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:67:81:8D:6E:0D:41:24:F4:37:EB:18:2B:6A:62:9D:8F:95:D6:89 X509v3 Authority Key Identifier: keyid:52:84:04:22:D0:B7:2B:A9:92:7D:E0:FF:73:53:5F:DF:16:35:21:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:89:13:38:3b:0b:d3:a5:9a:ec:90:b5:c4:ea:95:6b:bc:a6: f6:fd:cf:96:6a:03:6c:1f:a1:be:b0:b4:b6:b4:2d:5e:9a:b1: ab:bb:68:7b:63:02:3d:77:a7:58:82:39:30:b1:f6:24:cd:c2: d9:c6:af:68:51:e5:ab:fc:c6:95:6f:ad:0e:f2:da:05:ae:1f: 9b:37:7d:0c:c7:d4:56:67:da:d0:e8:59:3b:8f:04:33:40:d7: ff:3c:d8:0e:f4:b9:15:24:70:b1:f8:2a:04:8c:cc:56:5f:2c: cc:8f:e2:f6:a1:d6:68:66:9e:4b:d2:48:74:26:4b:e5:2f:0b: ec:f0:b7:cf:51:37:21:54:cd:c2:6a:60:4a:f8:e7:37:63:17: b7:77:51:fc:af:58:ed:de:79:1d:2e:a8:68:56:04:66:74:4e: 51:59:b7:0a:71:8a:b4:79:1c:1a:ab:5b:af:28:7f:a9:33:37: 49:e0:6b:3f:cd:75:c5:bd:b2:8c:61:c0:3b:f8:18:11:de:a3: 59:6a:69:f8:a8:6d:a2:a0:36:e0:f6:00:72:0f:b5:94:3e:ec: 30:ea:dd:7c:52:f3:9b:9a:1c:37:09:8e:08:97:70:fc:8f:de: 22:e1:22:bf:59:cb:e3:c3:27:7d:81:15:9e:4f:b7:73:1e:1b: 64:62:c3:85 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIURZgAU7//IBIRpXjFYlQSRjNazuowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkZFM0YwMDAwMTEwLwYDVQQFEyg1Mjg0MDQyMkQw QjcyQkE5OTI3REUwRkY3MzUzNUZERjE2MzUyMUE0MB4XDTI0MDUyNTEyNTk0OFoX DTI0MDUyNjE1MzA0OFowMzExMC8GA1UEAxMoNTA2NzgxOEQ2RTBENDEyNEY0MzdF QjE4MkI2QTYyOUQ4Rjk1RDY4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOWvXTrZUBpDpz/EtBNcssBKX/gM06PAwfhpERmedFkaGQ+5rU++3PcO+Lym JQCHa3J9W3/FEbCcDiUZjlULlgb5bTKH7h7yT/CLfRxCf0uH4aYtFoW88cIhr0jc n393sdo07kMAxXeUQ+x8bMEBTakI2dT12uvMxOlfnpLFyFYPozlgN9UzXokTC38r t4mBxdiEytu4SIzcJYc5bY790TNBBmdYl2u5CwaCznBAnN/zs2K48xvem461cG/O KuQMXoCNKSR8+SLDC1AsIxLmQ9pPVkJQm30CuDQPnAf1d2GgdRcgZOGdhK7u2ar+ TAJIQLbSP2b9n525CtGqKiYp+PMCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBRQZ4GN bg1BJPQ36xgramKdj5XWiTAfBgNVHSMEGDAWgBRShAQi0LcrqZJ94P9zU1/fFjUh pDAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi L3JlcG8vc2IvMzkvNTI4NDA0MjJEMEI3MkJBOTkyN0RFMEZGNzM1MzVGREYxNjM1 MjFBNC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD NzJGRDFGRjIvVW9RRUl0QzNLNm1TZmVEX2MxTmYzeFkxSWFRLmNlcjBgBggrBgEF BQcBCwRUMFIwUAYIKwYBBQUHMAuGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzM5LzUy ODQwNDIyRDBCNzJCQTk5MjdERTBGRjczNTM1RkRGMTYzNTIxQTQubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBFiRM4OwvTpZrskLXE6pVrvKb2/c+WagNsH6G+sLS2tC1emrGru2h7YwI9d6dY gjkwsfYkzcLZxq9oUeWr/MaVb60O8toFrh+bN30Mx9RWZ9rQ6Fk7jwQzQNf/PNgO 9LkVJHCx+CoEjMxWXyzMj+L2odZoZp5L0kh0JkvlLwvs8LfPUTchVM3CamBK+Oc3 Yxe3d1H8r1jt3nkdLqhoVgRmdE5RWbcKcYq0eRwaq1uvKH+pMzdJ4Gs/zXXFvbKM YcA7+BgR3qNZamn4qG2ioDbg9gByD7WUPuww6t18UvObmhw3CY4Il3D8j94i4SK/ Wcvjwyd9gRWeT7dzHhtkYsOF -----END CERTIFICATE-----Generated at Sat May 25 13:51:40 2024 by rpki-client on console-ams.rpki-client.org