$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft File: FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft (raw, json) Hash identifier: 65941PtK7UGX0McfbjhwuDli7UJ/l8BR80ER9NGixcY= Subject key identifier: 36:1E:D5:6B:E2:31:E6:2A:63:B2:E4:4F:5B:0C:2B:D5:86:14:0B:24 Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97 Certificate issuer: /CN=1589EECCC6718C652638CF4E92C60003C56FB697 Certificate serial: 3F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft Manifest number: 04A7 Signing time: Thu 30 May 2024 01:35:32 +0000 Manifest this update: Thu 30 May 2024 01:35:32 +0000 Manifest next update: Sun 09 Jun 2024 01:35:32 +0000 Files and hashes: 1: AUqkGpOCX2U791eZ9CIMFKLmYxM.roa (hash: c45PgrtWr9Nwp46OQpjR071C+NuRKdKkWcR1XQpOiog=) 2: FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl (hash: n+gX57JlRvGDYWB/CYElC1iP1SesFA4Y4N/LfWp5HRU=) 3: t8BYi6W4v0IyE2VHkuqaQc2Hhf4.roa (hash: Ie/t6qD5BuyzJiCkTnVVTxWCsBy6NaW05y5t1aP772o=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697 Validity Not Before: May 15 01:32:29 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=361ED56BE231E62A63B2E44F5B0C2BD586140B24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8a:13:f4:6d:c4:94:a9:0b:69:29:8e:de:43: 4e:fe:b5:c0:ac:a8:e2:48:24:9b:4d:a4:4f:87:17: 97:de:13:ec:1d:cf:21:6c:62:8e:4e:b2:2f:6a:30: 3d:f6:e6:d9:5f:d1:4d:de:70:02:d7:9f:c9:1f:59: 4c:bd:b4:e7:ff:1f:2e:03:c4:f7:7f:7e:4b:31:80: 7f:be:a7:6a:b9:22:a6:39:ae:53:8e:93:a9:f7:0c: 06:0b:88:7b:87:41:e5:a2:5f:28:25:cb:25:f8:58: 86:aa:e5:ea:23:0d:62:7a:d3:9d:2d:33:09:7b:38: 87:9c:bd:1f:28:4a:a6:71:33:7f:54:6f:3d:89:66: 43:11:ab:57:73:98:0d:ee:0e:4b:b9:8c:47:d5:c7: a1:7d:d9:4f:e3:a9:9e:cd:0b:4d:3e:2b:7b:84:2b: 7f:73:65:35:97:3f:c9:76:d0:45:92:ed:61:d6:db: dc:2f:1a:33:ea:3b:ac:32:b7:e9:0b:b2:d6:56:69: f8:b6:d4:04:69:0e:ac:29:61:57:90:fe:48:36:cb: 5d:4b:10:86:2d:82:8c:5b:f8:95:3f:ce:bb:5e:59: 14:81:6a:6d:20:70:46:6f:ba:0f:7d:8f:d7:7b:72: d7:f0:6f:ba:78:49:95:28:4f:10:5d:d4:d8:b9:8c: fd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1E:D5:6B:E2:31:E6:2A:63:B2:E4:4F:5B:0C:2B:D5:86:14:0B:24 X509v3 Authority Key Identifier: keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:fd:9c:b4:25:e1:34:e0:66:56:4e:ab:fb:23:a2:bf:0e:5f: dd:fa:ba:f1:14:d5:1e:bb:df:c3:c1:7c:c5:d8:38:39:06:52: 92:bb:0f:aa:2f:88:22:d0:0d:2e:e4:a7:e5:03:93:96:d5:87: 35:a4:b3:e6:ac:d0:d8:08:4b:3a:c3:5f:11:ab:56:26:89:65: 5e:e9:4c:01:cb:1d:fb:f1:8d:32:05:36:7d:8e:02:f8:90:f4: 5d:55:74:b0:6c:4e:6e:45:01:18:cc:fa:41:76:2f:48:84:10: 0d:1c:f3:7a:b4:f7:44:14:9a:99:14:55:89:f1:22:51:d0:75: 00:90:0d:9d:62:5c:41:5b:9b:b4:55:fb:ad:d6:ea:19:be:f1: 8a:b1:58:97:60:c3:23:26:78:fd:dd:71:fd:b5:35:6f:ef:73: fd:f4:24:08:32:99:d5:ad:c1:7d:22:44:e8:e4:00:6f:f2:17: 09:b4:4c:b7:ab:4f:98:44:08:71:bc:1a:c5:e4:69:31:10:56: dc:07:6f:3a:f0:a1:e1:ac:86:d5:ab:53:c2:4b:be:d3:e3:b2: fc:20:0d:1f:fe:c3:cb:0b:51:70:cf:e3:ee:c2:4d:d5:55:3c: 4a:c1:c4:d3:1d:eb:ae:48:d5:95:05:ce:14:c0:04:7f:e8:99: 59:ca:9e:ea -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIBPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNTg5 RUVDQ0M2NzE4QzY1MjYzOENGNEU5MkM2MDAwM0M1NkZCNjk3MB4XDTI0MDUxNTAx MzIyOVoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoMzYxRUQ1NkJFMjMxRTYy QTYzQjJFNDRGNUIwQzJCRDU4NjE0MEIyNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALOKE/RtxJSpC2kpjt5DTv61wKyo4kgkm02kT4cXl94T7B3PIWxi jk6yL2owPfbm2V/RTd5wAtefyR9ZTL205/8fLgPE939+SzGAf76narkipjmuU46T qfcMBguIe4dB5aJfKCXLJfhYhqrl6iMNYnrTnS0zCXs4h5y9HyhKpnEzf1RvPYlm QxGrV3OYDe4OS7mMR9XHoX3ZT+Opns0LTT4re4Qrf3NlNZc/yXbQRZLtYdbb3C8a M+o7rDK36Quy1lZp+LbUBGkOrClhV5D+SDbLXUsQhi2CjFv4lT/Ou15ZFIFqbSBw Rm+6D32P13ty1/BvunhJlShPEF3U2LmM/dsCAwEAAaOCAjswggI3MB0GA1UdDgQW BBQ2HtVr4jHmKmOy5E9bDCvVhhQLJDAfBgNVHSMEGDAWgBQVie7MxnGMZSY4z06S xgADxW+2lzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTIvRlludXpNWnhqR1VtT005T2tzWUFBOFZ2dHBjLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRlludXpNWnhqR1VtT005T2tzWUFBOFZ2 dHBjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzEyL0ZZbnV6TVp4akdVbU9NOU9rc1lBQThWdnRwYy5tZnQwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBu/Zy0JeE04GZWTqv7I6K/Dl/d+rrxFNUeu9/DwXzF2Dg5BlKSuw+qL4gi0A0u 5KflA5OW1Yc1pLPmrNDYCEs6w18Rq1YmiWVe6UwByx378Y0yBTZ9jgL4kPRdVXSw bE5uRQEYzPpBdi9IhBANHPN6tPdEFJqZFFWJ8SJR0HUAkA2dYlxBW5u0Vfut1uoZ vvGKsViXYMMjJnj93XH9tTVv73P99CQIMpnVrcF9IkTo5ABv8hcJtEy3q0+YRAhx vBrF5GkxEFbcB2868KHhrIbVq1PCS77T47L8IA0f/sPLC1Fwz+Puwk3VVTxKwcTT HeuuSNWVBc4UwAR/6JlZyp7q -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:42 2024 by rpki-client on console-fra.rpki-client.org