$ rpki-client -vvf 0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft File: 52840422D0B72BA9927DE0FF73535FDF163521A4.mft (raw, json) Hash identifier: pOrXfyJC8JSgbWZB3QpvfiBi6g4SgNdOP1PR6HQlJ58= Subject key identifier: 5C:B5:AA:C2:6D:52:F6:E4:EC:F3:E1:D5:44:E0:2D:C9:20:34:C9:BF Authority key identifier: 52:84:04:22:D0:B7:2B:A9:92:7D:E0:FF:73:53:5F:DF:16:35:21:A4 Certificate issuer: /CN=A91FFE3F0000/serialNumber=52840422D0B72BA9927DE0FF73535FDF163521A4 Certificate serial: 40AE35051B3400527ACA3C4BDB453C0BFAA48911 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer Subject info access: rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft Manifest number: 05F3 Signing time: Fri 05 Sep 2025 15:34:50 +0000 Manifest this update: Fri 05 Sep 2025 15:29:50 +0000 Manifest next update: Sat 06 Sep 2025 16:00:50 +0000 Files and hashes: 1: 52840422D0B72BA9927DE0FF73535FDF163521A4.crl (hash: gZzUqVZCUIFK5NjhXAOdpgNfkgreUj8aHoS9xCTZyGs=) 2: 3230322e352e3232302e302f32322d3234203d3e2034373835.roa (hash: CC8E23Yh7/HhtCNdi2KuY5mXbENB/iwBI2NRmwM7MTw=) 3: 3130332e3230312e3132382e302f32322d3234203d3e2033323538.roa (hash: NzvxeOISCBxGqvrzZjBZu0oMo4rqIXiZ91cAneYGZFA=) 4: 3130332e3230312e3132382e302f32322d3234203d3e2034373835.roa (hash: Y4yo/btWNJYOnxXH2L7ym8zj4X3k7WkR14OJ99bejXo=) 5: 323430333a616338303a3a2f33322d3438203d3e2034373835.roa (hash: of2lUbNuQom6rR9aba5WRy88RY/aB/ddNJAkiL5owZ0=) 6: 3130332e3230312e3132382e302f32322d3234203d3e203233393539.roa (hash: euakz2tH0t+6W2UrkVW4TdO1cFAouzA/wKh47M8X1Ds=) Validation: OK Signature path: rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.crl rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 16:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ae:35:05:1b:34:00:52:7a:ca:3c:4b:db:45:3c:0b:fa:a4:89:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE3F0000, serialNumber=52840422D0B72BA9927DE0FF73535FDF163521A4 Validity Not Before: Sep 5 15:29:50 2025 GMT Not After : Sep 6 16:00:50 2025 GMT Subject: CN=5CB5AAC26D52F6E4ECF3E1D544E02DC92034C9BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fb:78:33:8a:60:1e:78:0f:4f:83:c5:20:38: 93:fe:f0:a8:12:a0:7e:6a:d6:64:1c:b0:69:94:45: fe:85:5e:a3:4d:7f:fc:78:39:a9:59:bd:aa:12:18: 79:c0:20:c8:c6:3b:3c:fa:a9:a5:bd:55:19:c3:ed: bb:8a:8f:34:92:ca:52:d1:b9:d7:b2:39:bd:fd:ea: 3a:e6:e3:fd:ca:83:f1:97:3f:29:8f:17:9f:e4:a2: dc:f2:6e:40:e9:b5:1d:ad:87:0a:a5:aa:f7:fa:9b: 22:37:3f:93:3e:59:a0:73:05:9d:c7:df:90:4b:14: 1e:4e:a6:65:8e:2f:18:24:d1:06:cb:25:30:89:9c: 30:19:e0:c3:93:e2:90:83:5a:f0:d9:e7:61:cf:aa: f1:1e:0a:02:89:f3:f6:98:0b:fe:a3:29:e2:b8:20: 25:5a:65:05:c7:e3:30:a1:8b:7f:2e:f2:02:b2:15: 69:46:76:b9:de:2b:82:83:d3:34:ee:02:0b:56:b8: 3e:96:38:4a:9f:2c:9c:ec:87:e6:f4:7a:e0:99:10: 72:33:d9:ee:57:ef:5f:23:5d:53:3c:74:6e:7b:3e: 28:29:13:e2:0b:cb:06:92:a8:9a:41:58:c5:4a:e6: 3f:a6:eb:a2:21:00:df:53:cd:84:cb:bc:f4:c0:50: 6e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B5:AA:C2:6D:52:F6:E4:EC:F3:E1:D5:44:E0:2D:C9:20:34:C9:BF X509v3 Authority Key Identifier: keyid:52:84:04:22:D0:B7:2B:A9:92:7D:E0:FF:73:53:5F:DF:16:35:21:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:7a:c6:2d:9e:3b:37:ff:94:c2:e7:e3:a8:78:8d:0e:9b:fc: 5e:63:57:ab:dd:c6:8d:62:00:3f:38:13:bb:97:71:62:af:36: 18:5a:f4:3a:6e:38:ba:b6:a3:a5:f3:b0:d6:fe:24:75:a7:a0: 71:60:53:37:38:d6:09:8e:bb:70:c2:33:d6:29:3d:ec:82:d5: 13:c6:d7:e0:a8:ae:93:a5:ef:a9:1e:88:be:77:94:a8:b6:f4: e7:cf:b8:80:59:37:6a:c1:fd:dc:0e:8e:02:f7:f9:e6:72:38: c5:b1:49:3a:11:ba:c1:82:6a:c2:16:7d:16:63:f7:44:ef:2e: 5a:9d:e4:09:6d:f0:c3:2c:b7:29:b1:7c:dc:9d:28:15:ab:00: 70:30:25:5c:df:c3:25:0c:2e:40:34:9f:53:df:4d:7d:b9:1b: c1:3c:a2:f0:8e:a2:09:69:18:f5:2b:c5:57:b7:be:fd:f1:98: f0:2d:bf:a3:46:90:69:36:70:ac:cc:6b:56:31:06:bf:4b:2e: 7e:de:70:06:e2:e0:dc:2d:a0:33:11:a3:c1:f0:2f:ae:f7:ea: 50:59:f9:7c:36:13:23:ee:a1:5d:ae:5a:c7:f2:69:a1:24:35: 32:34:1f:21:7f:f7:b4:d5:03:c3:6e:12:b9:7a:b7:53:14:9f: 21:d9:e2:ef -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUQK41BRs0AFJ6yjxL20U8C/qkiREwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkZFM0YwMDAwMTEwLwYDVQQFEyg1Mjg0MDQyMkQw QjcyQkE5OTI3REUwRkY3MzUzNUZERjE2MzUyMUE0MB4XDTI1MDkwNTE1Mjk1MFoX DTI1MDkwNjE2MDA1MFowMzExMC8GA1UEAxMoNUNCNUFBQzI2RDUyRjZFNEVDRjNF MUQ1NDRFMDJEQzkyMDM0QzlCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMv7eDOKYB54D0+DxSA4k/7wqBKgfmrWZBywaZRF/oVeo01//Hg5qVm9qhIY ecAgyMY7PPqppb1VGcPtu4qPNJLKUtG517I5vf3qOubj/cqD8Zc/KY8Xn+Si3PJu QOm1Ha2HCqWq9/qbIjc/kz5ZoHMFncffkEsUHk6mZY4vGCTRBsslMImcMBngw5Pi kINa8NnnYc+q8R4KAonz9pgL/qMp4rggJVplBcfjMKGLfy7yArIVaUZ2ud4rgoPT NO4CC1a4PpY4Sp8snOyH5vR64JkQcjPZ7lfvXyNdUzx0bns+KCkT4gvLBpKomkFY xUrmP6broiEA31PNhMu89MBQbqECAwEAAaOCAeEwggHdMB0GA1UdDgQWBBRctarC bVL25Ozz4dVE4C3JIDTJvzAfBgNVHSMEGDAWgBRShAQi0LcrqZJ94P9zU1/fFjUh pDAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi L3JlcG8vc2IvMzkvNTI4NDA0MjJEMEI3MkJBOTkyN0RFMEZGNzM1MzVGREYxNjM1 MjFBNC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD NzJGRDFGRjIvVW9RRUl0QzNLNm1TZmVEX2MxTmYzeFkxSWFRLmNlcjBgBggrBgEF BQcBCwRUMFIwUAYIKwYBBQUHMAuGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzM5LzUy ODQwNDIyRDBCNzJCQTk5MjdERTBGRjczNTM1RkRGMTYzNTIxQTQubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAOesYtnjs3/5TC5+OoeI0Om/xeY1er3caNYgA/OBO7l3FirzYYWvQ6bji6tqOl 87DW/iR1p6BxYFM3ONYJjrtwwjPWKT3sgtUTxtfgqK6Tpe+pHoi+d5SotvTnz7iA WTdqwf3cDo4C9/nmcjjFsUk6EbrBgmrCFn0WY/dE7y5aneQJbfDDLLcpsXzcnSgV qwBwMCVc38MlDC5ANJ9T3019uRvBPKLwjqIJaRj1K8VXt7798ZjwLb+jRpBpNnCs zGtWMQa/Sy5+3nAG4uDcLaAzEaPB8C+u9+pQWfl8NhMj7qFdrlrH8mmhJDUyNB8h f/e01QPDbhK5erdTFJ8h2eLv -----END CERTIFICATE-----Generated at Sat Sep 6 04:50:47 2025 by rpki-client