$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/284/z17jVSLaMWQu4wlAjJpJHGSgXPs.mft File: z17jVSLaMWQu4wlAjJpJHGSgXPs.mft (raw, json) Hash identifier: 0VIHwng93CeckV1wsdcqfrUJ73MjuRARK0ECObR2/yw= Subject key identifier: 9A:55:57:F8:2C:60:CD:E8:B7:E0:0E:C0:FA:D2:CD:34:91:E3:24:84 Authority key identifier: CF:5E:E3:55:22:DA:31:64:2E:E3:09:40:8C:9A:49:1C:64:A0:5C:FB Certificate issuer: /CN=CF5EE35522DA31642EE309408C9A491C64A05CFB Certificate serial: 34 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z17jVSLaMWQu4wlAjJpJHGSgXPs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/284/z17jVSLaMWQu4wlAjJpJHGSgXPs.mft Manifest number: DD Signing time: Sat 15 Jun 2024 01:35:57 +0000 Manifest this update: Sat 15 Jun 2024 01:35:57 +0000 Manifest next update: Tue 25 Jun 2024 01:35:57 +0000 Files and hashes: 1: z17jVSLaMWQu4wlAjJpJHGSgXPs.crl (hash: hx5rfXbqEN1oyBEFNfoDVcxg0ju7iYsNwVRsVg4sNPA=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/284/z17jVSLaMWQu4wlAjJpJHGSgXPs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/284/z17jVSLaMWQu4wlAjJpJHGSgXPs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z17jVSLaMWQu4wlAjJpJHGSgXPs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 14:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF5EE35522DA31642EE309408C9A491C64A05CFB Validity Not Before: Jun 15 01:35:57 2024 GMT Not After : Jun 15 01:30:03 2025 GMT Subject: CN=9A5557F82C60CDE8B7E00EC0FAD2CD3491E32484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0b:46:de:07:18:1c:63:c3:61:cd:e0:d2:46: 87:ec:cc:e5:d5:c1:af:c2:ce:ad:94:ab:4a:10:c1: b2:75:ac:5c:ff:c7:62:8a:e1:31:37:7a:df:a6:5a: ce:1b:f9:b7:8b:1b:a1:b7:b1:db:00:b3:09:93:80: 86:38:de:a3:d8:dc:cc:78:7a:2c:48:9d:1a:df:47: 95:ae:96:dd:50:2f:6f:46:6f:fe:78:4e:d5:28:2e: 75:76:02:b4:a6:f1:39:c6:d1:52:d8:19:5b:1b:7d: 6a:58:c0:c1:88:64:a1:8d:2d:73:11:aa:2a:d3:1c: 0d:9b:ee:06:5a:ac:76:1b:02:86:be:7d:0a:94:33: 91:af:a6:50:c2:2d:b9:af:7b:6f:93:dd:6e:fa:0a: 6b:29:76:4d:c6:22:fc:f7:df:04:b4:7d:59:6c:63: d5:7e:b8:05:1f:1a:b6:54:08:6c:9e:6b:90:14:84: 49:e3:96:7f:db:61:b1:a6:01:58:93:25:3e:ff:b0: 16:f0:fb:b8:af:09:f8:10:2b:bc:44:c2:14:8a:c1: 36:e3:76:ba:42:e0:96:ca:2c:15:6b:b3:9e:fa:1d: 27:b1:52:62:83:08:50:d3:8e:2c:de:f6:95:bd:72: a4:51:fd:02:32:89:e4:b4:fa:bb:57:7f:58:42:52: c5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:55:57:F8:2C:60:CD:E8:B7:E0:0E:C0:FA:D2:CD:34:91:E3:24:84 X509v3 Authority Key Identifier: keyid:CF:5E:E3:55:22:DA:31:64:2E:E3:09:40:8C:9A:49:1C:64:A0:5C:FB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/284/z17jVSLaMWQu4wlAjJpJHGSgXPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z17jVSLaMWQu4wlAjJpJHGSgXPs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/284/z17jVSLaMWQu4wlAjJpJHGSgXPs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:fa:1b:58:7d:84:eb:01:5d:50:a5:f5:64:f9:8e:d4:30:fc: 2e:ac:49:95:41:98:6a:5d:04:9b:77:45:20:da:7b:f9:7c:cc: 2d:bd:cd:98:9d:af:5e:c6:85:5e:83:53:ab:1b:13:02:5a:9c: f9:fa:4a:63:cd:27:3e:4b:13:06:44:8d:83:21:fd:91:27:9b: 3f:89:2f:c8:12:4c:01:88:86:75:a0:9c:d8:c2:94:13:c0:4e: 43:91:f2:89:5d:2f:02:94:c2:ba:04:ef:37:b8:70:55:1a:25: 5d:aa:e5:56:42:9a:90:9d:2c:86:31:f7:12:a9:d4:d7:d2:9a: d7:98:f6:c3:d7:55:96:90:72:83:ee:56:eb:4b:96:3e:e6:f5: 48:5e:a8:47:e1:98:0b:9a:43:50:54:9e:8f:2f:fd:00:f6:a3: 79:ff:5c:6c:64:e4:7c:09:5f:83:67:85:65:b9:91:66:40:5c: 6e:4d:ab:2e:d4:9f:22:f8:d2:70:5e:14:a3:9f:46:8b:7a:53: cb:40:4c:70:8f:75:49:01:ac:48:0a:8e:d6:1c:eb:36:8a:c7: 56:2b:33:e7:3d:73:e4:3f:89:24:9a:1b:91:ab:f4:b7:2a:59: e9:ab:bb:f8:c1:1c:91:6f:74:a6:af:5f:32:69:b2:2d:8a:75: 9f:20:27:f4 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBNDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRjVF RTM1NTIyREEzMTY0MkVFMzA5NDA4QzlBNDkxQzY0QTA1Q0ZCMB4XDTI0MDYxNTAx MzU1N1oXDTI1MDYxNTAxMzAwM1owMzExMC8GA1UEAxMoOUE1NTU3RjgyQzYwQ0RF OEI3RTAwRUMwRkFEMkNEMzQ5MUUzMjQ4NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN4LRt4HGBxjw2HN4NJGh+zM5dXBr8LOrZSrShDBsnWsXP/HYorh MTd636Zazhv5t4sbobex2wCzCZOAhjjeo9jczHh6LEidGt9Hla6W3VAvb0Zv/nhO 1SgudXYCtKbxOcbRUtgZWxt9aljAwYhkoY0tcxGqKtMcDZvuBlqsdhsChr59CpQz ka+mUMItua97b5PdbvoKayl2TcYi/PffBLR9WWxj1X64BR8atlQIbJ5rkBSESeOW f9thsaYBWJMlPv+wFvD7uK8J+BArvETCFIrBNuN2ukLglsosFWuznvodJ7FSYoMI UNOOLN72lb1ypFH9AjKJ5LT6u1d/WEJSxQMCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBSaVVf4LGDN6LfgDsD60s00keMkhDAfBgNVHSMEGDAWgBTPXuNVItoxZC7jCUCM mkkcZKBc+zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjg0L3oxN2pWU0xhTVdRdTR3bEFqSnBKSEdTZ1hQcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3oxN2pWU0xhTVdRdTR3bEFqSnBKSEdT Z1hQcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yODQvejE3alZTTGFNV1F1NHdsQWpKcEpIR1NnWFBzLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGP6G1h9hOsBXVCl9WT5jtQw/C6sSZVBmGpdBJt3RSDae/l8zC29zZidr17G hV6DU6sbEwJanPn6SmPNJz5LEwZEjYMh/ZEnmz+JL8gSTAGIhnWgnNjClBPATkOR 8oldLwKUwroE7ze4cFUaJV2q5VZCmpCdLIYx9xKp1NfSmteY9sPXVZaQcoPuVutL lj7m9UheqEfhmAuaQ1BUno8v/QD2o3n/XGxk5HwJX4NnhWW5kWZAXG5Nqy7UnyL4 0nBeFKOfRot6U8tATHCPdUkBrEgKjtYc6zaKx1YrM+c9c+Q/iSSaG5Gr9LcqWemr u/jBHJFvdKavXzJpsi2KdZ8gJ/Q= -----END CERTIFICATE-----Generated at Mon Jun 17 14:52:05 2024 by rpki-client on console-ams.rpki-client.org