$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qUFf6Td_P0uOqDjGYsS82Nz88bo.mft File: qUFf6Td_P0uOqDjGYsS82Nz88bo.mft (raw, json) Hash identifier: Y8WpeboGZQu1HKAjveSIlQvmcliMFx8gaPUMJn8M+Zk= Subject key identifier: E0:A6:6C:D2:66:98:19:CE:AF:2C:C7:63:B0:4C:4F:06:75:38:72:84 Authority key identifier: A9:41:5F:E9:37:7F:3F:4B:8E:A8:38:C6:62:C4:BC:D8:DC:FC:F1:BA Certificate issuer: /CN=A9415FE9377F3F4B8EA838C662C4BCD8DCFCF1BA Certificate serial: 30 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qUFf6Td_P0uOqDjGYsS82Nz88bo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qUFf6Td_P0uOqDjGYsS82Nz88bo.mft Manifest number: A9 Signing time: Mon 24 Jun 2024 10:52:22 +0000 Manifest this update: Mon 24 Jun 2024 10:52:22 +0000 Manifest next update: Thu 04 Jul 2024 10:52:22 +0000 Files and hashes: 1: NNwyojHC9TbRX0CRY07ps8Rts6w.roa (hash: LqRx4adlXHtCFl5PpMA0AMIx1kLqQRvS5Z4XAbTvQaA=) 2: QXhASitAUHw_I8CSPju9qUxaWJM.roa (hash: LvVubQy6wZQTimWkrtCnZb2DMMvvRjK+7R+DOYxMugI=) 3: bNcoTr52YwCZQuJBWZH6rK1tmtE.roa (hash: oltfUjUYcfrhfB9AH/ovOwA/KppmD4TPUH/kPO2rIo0=) 4: qUFf6Td_P0uOqDjGYsS82Nz88bo.crl (hash: oGrKzUV3AvooyW4uma5BrRHaM+6RNoXCXj1oh+8KvVA=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qUFf6Td_P0uOqDjGYsS82Nz88bo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qUFf6Td_P0uOqDjGYsS82Nz88bo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qUFf6Td_P0uOqDjGYsS82Nz88bo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9415FE9377F3F4B8EA838C662C4BCD8DCFCF1BA Validity Not Before: Jun 24 10:52:22 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=E0A66CD2669819CEAF2CC763B04C4F0675387284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:10:a0:8e:e2:b3:61:c1:28:fc:a8:32:95:ca: de:a6:5b:de:2a:76:44:d1:1b:d4:a1:bd:0f:be:dc: 91:a3:75:da:45:30:78:4e:a1:d7:8d:fd:46:8b:08: 2f:56:d9:17:8e:49:ba:58:a4:b3:c8:aa:b1:e7:66: 4d:ba:c3:5e:f1:48:4e:41:ec:d2:4f:0d:39:3c:70: 91:a1:79:1c:39:68:61:3c:3b:d1:6f:e5:c4:a4:d9: 15:a1:83:c9:14:79:34:0f:41:32:bb:c8:d5:bb:65: da:86:f7:0e:09:1e:43:9b:ea:cf:52:0c:59:f5:97: 77:f1:d7:85:03:b3:46:e0:cb:c2:95:7d:e7:27:4f: 68:af:b8:89:b1:c6:ef:f8:12:9e:ef:33:38:dd:eb: ad:ee:2f:d5:10:2d:4d:46:a5:80:d4:20:b4:b3:93: 40:75:0a:69:27:6f:dd:99:7d:99:0d:ea:b6:9b:e7: 36:94:1b:c0:40:58:57:a9:81:37:cc:5a:85:87:ec: e9:ac:1c:06:4e:f2:0e:46:7a:e8:40:b7:3e:06:36: d6:70:37:e1:d7:8e:ab:e9:4d:04:b5:b5:b4:dd:1a: 3f:f7:0b:84:8b:1e:57:1b:f6:fc:d3:96:80:8f:38: 95:40:24:54:e9:f6:09:aa:5f:3c:26:c4:63:bc:59: 39:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A6:6C:D2:66:98:19:CE:AF:2C:C7:63:B0:4C:4F:06:75:38:72:84 X509v3 Authority Key Identifier: keyid:A9:41:5F:E9:37:7F:3F:4B:8E:A8:38:C6:62:C4:BC:D8:DC:FC:F1:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qUFf6Td_P0uOqDjGYsS82Nz88bo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qUFf6Td_P0uOqDjGYsS82Nz88bo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qUFf6Td_P0uOqDjGYsS82Nz88bo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:7e:1b:f4:78:31:6e:6d:84:6e:a8:27:de:f7:16:af:0a:97: 2b:8b:26:7a:3c:a7:5c:5e:70:24:0e:9a:73:da:94:73:6d:64: 22:c8:97:d7:c9:ad:6b:2a:ca:52:05:fe:e0:22:01:9b:fe:a2: a8:43:7b:50:6e:f0:ef:ba:e6:a4:3c:60:51:7c:e9:cb:3f:bf: 6e:53:5a:7e:a5:46:e7:86:a8:96:45:13:e4:a2:33:c5:ee:31: d4:8b:04:d7:e3:6b:2a:59:28:e0:c4:93:63:58:ba:a2:c4:e7: 9e:49:2e:8f:3f:fc:ac:5d:9a:f2:4a:f1:5a:0e:4d:07:34:da: 83:b8:24:43:70:56:0e:9d:66:f8:b8:0f:7f:04:4d:a1:74:f1: f4:d0:5a:7b:dc:9f:8c:07:4e:9d:53:db:d7:ed:79:2c:b0:eb: 63:81:51:28:7c:86:6f:1e:54:df:e1:ba:f7:e8:4d:4f:62:a5: 41:95:4c:cb:4e:9a:95:d5:4e:48:6a:9f:75:71:2d:1a:4e:c8: 2c:38:dd:01:d3:25:c0:26:c5:7a:2a:23:5b:c5:36:7c:e6:8e: 58:a8:d1:be:68:ba:2e:f9:59:e5:87:58:36:40:61:31:c4:81: cf:89:7f:8b:98:6f:00:47:c4:5f:c7:ed:c1:85:76:95:39:79: 96:18:eb:96 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOTQx NUZFOTM3N0YzRjRCOEVBODM4QzY2MkM0QkNEOERDRkNGMUJBMB4XDTI0MDYyNDEw NTIyMloXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoRTBBNjZDRDI2Njk4MTlD RUFGMkNDNzYzQjA0QzRGMDY3NTM4NzI4NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANoQoI7is2HBKPyoMpXK3qZb3ip2RNEb1KG9D77ckaN12kUweE6h 1439RosIL1bZF45Juliks8iqsedmTbrDXvFITkHs0k8NOTxwkaF5HDloYTw70W/l xKTZFaGDyRR5NA9BMrvI1btl2ob3DgkeQ5vqz1IMWfWXd/HXhQOzRuDLwpV95ydP aK+4ibHG7/gSnu8zON3rre4v1RAtTUalgNQgtLOTQHUKaSdv3Zl9mQ3qtpvnNpQb wEBYV6mBN8xahYfs6awcBk7yDkZ66EC3PgY21nA34deOq+lNBLW1tN0aP/cLhIse Vxv2/NOWgI84lUAkVOn2CapfPCbEY7xZOfkCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBTgpmzSZpgZzq8sx2OwTE8GdThyhDAfBgNVHSMEGDAWgBSpQV/pN38/S46oOMZi xLzY3PzxujAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwODMvcVVGZjZUZF9QMHVPcURqR1lzUzgyTno4OGJvLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvcVVGZjZUZF9QMHVPcURqR1lzUzgy Tno4OGJvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDgzL3FVRmY2VGRfUDB1T3FEakdZc1M4Mk56ODhiby5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXfhv0eDFubYRuqCfe9xavCpcriyZ6PKdcXnAkDppz2pRzbWQiyJfX ya1rKspSBf7gIgGb/qKoQ3tQbvDvuuakPGBRfOnLP79uU1p+pUbnhqiWRRPkojPF 7jHUiwTX42sqWSjgxJNjWLqixOeeSS6PP/ysXZrySvFaDk0HNNqDuCRDcFYOnWb4 uA9/BE2hdPH00Fp73J+MB06dU9vX7XkssOtjgVEofIZvHlTf4br36E1PYqVBlUzL TpqV1U5Iap91cS0aTsgsON0B0yXAJsV6KiNbxTZ85o5YqNG+aLou+Vnlh1g2QGEx xIHPiX+LmG8AR8Rfx+3BhXaVOXmWGOuW -----END CERTIFICATE-----Generated at Tue Jun 25 00:52:43 2024 by rpki-client on console-ams.rpki-client.org