$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft File: PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft (raw, json) Hash identifier: 5l9WmgPTYFlJ4cQYbI8CJGRg2ZLmec9JkWSg6oZLCCI= Subject key identifier: 57:37:37:23:6B:69:B1:52:16:37:DB:F5:F1:8D:18:F1:4F:88:71:04 Authority key identifier: 3C:26:7D:02:8F:D9:9C:61:3E:3A:6F:42:54:15:D7:DB:7F:CD:1D:4A Certificate issuer: /CN=3C267D028FD99C613E3A6F425415D7DB7FCD1D4A Certificate serial: 17 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft Manifest number: 5E Signing time: Thu 06 Jun 2024 13:44:08 +0000 Manifest this update: Thu 06 Jun 2024 13:44:08 +0000 Manifest next update: Sun 16 Jun 2024 13:44:08 +0000 Files and hashes: 1: PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.crl (hash: x6zBDVus0+nVRXU656jVbSHm5bYBH/h/+FFEweYRa0k=) 2: fXBEgRVlYRpNW9nJu-x3lbWmAF0.roa (hash: qWCaGVaT+iHcKzbHCrjNhMoRQ7gCRgoXWjUtpqObsSc=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Jun 2024 02:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C267D028FD99C613E3A6F425415D7DB7FCD1D4A Validity Not Before: May 15 01:36:00 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=573737236B69B1521637DBF5F18D18F14F887104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a9:a1:5f:6c:fd:2e:5f:07:b4:71:68:91:4c: 6b:64:ee:2e:28:8d:d7:6b:21:84:af:df:bc:9c:5f: 01:98:fa:c8:92:07:ab:01:22:66:97:63:22:9a:a4: 8b:2e:38:df:24:85:e3:81:3c:9d:56:87:e5:fd:33: 11:df:23:fb:6f:26:48:e5:3e:03:8b:71:c9:ad:40: 76:8b:a6:49:06:4d:2b:1f:7d:14:69:a5:5b:8b:68: 44:30:42:fc:48:ec:1b:7a:9a:c2:06:ab:50:1f:f0: 25:37:ce:1f:f6:17:e8:97:07:2a:71:ae:d6:b8:3d: 9b:ea:67:25:19:3c:0f:f0:78:c8:37:43:0b:ab:bb: 0f:ff:c3:bf:66:f1:09:c4:ef:f7:c9:d7:25:be:9b: 0b:66:fc:a2:5a:8b:3c:ca:d9:80:50:25:a7:00:2d: 00:f0:52:d2:0a:e8:35:bd:be:11:5e:03:01:b9:cc: 48:1f:36:73:d0:06:c8:b5:20:d3:ea:54:43:e6:e2: 05:6b:f8:48:41:37:39:56:75:7a:b6:86:31:60:d0: c8:74:92:f4:45:20:12:a8:00:40:22:a1:de:4f:82: 5e:d8:e4:f4:6c:57:19:2d:2b:a0:d9:36:9f:ee:5c: c6:aa:e8:6b:1d:54:03:aa:fe:ad:f7:04:b9:7e:9d: b8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:37:37:23:6B:69:B1:52:16:37:DB:F5:F1:8D:18:F1:4F:88:71:04 X509v3 Authority Key Identifier: keyid:3C:26:7D:02:8F:D9:9C:61:3E:3A:6F:42:54:15:D7:DB:7F:CD:1D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:50:a2:06:a7:31:9e:94:2f:88:db:a5:50:fa:9e:56:d2:e3: c8:1f:32:c8:56:6c:4d:5c:77:fe:e2:48:8e:4d:ed:d3:02:af: 49:ea:15:d0:7e:b2:49:39:c1:c1:e1:73:46:2a:b1:af:21:ff: 87:3c:b8:dd:20:ec:a2:f3:1d:df:00:7b:d3:f6:19:fc:e8:3d: 4e:7a:2f:8b:63:1d:3f:3c:64:d9:a0:a8:26:80:bf:bb:9c:09: 37:34:e8:6e:7e:4f:cf:46:4c:4f:96:32:79:c6:a5:f2:43:c3: 05:68:e3:cb:79:03:d5:cc:ed:d3:30:34:09:9b:68:89:28:e5: b6:03:51:83:20:c4:0a:7d:d9:ae:e2:97:74:df:ee:ed:29:0b: 0f:23:3a:78:cf:46:31:60:9d:31:77:e2:4a:35:3e:72:ee:70: ae:61:03:d8:e0:46:f3:6f:53:29:49:92:05:c2:60:77:ce:11: 79:fd:d2:68:f7:f5:b9:a9:cb:cd:86:cc:e8:4c:06:22:48:73: 95:44:8e:58:42:4e:ee:28:79:f2:38:86:b6:43:c6:30:03:1b: b0:19:af:2d:63:8a:1b:91:c4:7d:e9:f0:31:30:06:ec:53:ee: 38:87:59:fb:95:78:c7:c1:22:fd:5c:80:84:bd:33:f3:c8:f3: 6e:1e:6d:5c -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQzI2 N0QwMjhGRDk5QzYxM0UzQTZGNDI1NDE1RDdEQjdGQ0QxRDRBMB4XDTI0MDUxNTAx MzYwMFoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoNTczNzM3MjM2QjY5QjE1 MjE2MzdEQkY1RjE4RDE4RjE0Rjg4NzEwNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM6poV9s/S5fB7RxaJFMa2TuLiiN12shhK/fvJxfAZj6yJIHqwEi ZpdjIpqkiy443ySF44E8nVaH5f0zEd8j+28mSOU+A4txya1AdoumSQZNKx99FGml W4toRDBC/EjsG3qawgarUB/wJTfOH/YX6JcHKnGu1rg9m+pnJRk8D/B4yDdDC6u7 D//Dv2bxCcTv98nXJb6bC2b8olqLPMrZgFAlpwAtAPBS0groNb2+EV4DAbnMSB82 c9AGyLUg0+pUQ+biBWv4SEE3OVZ1eraGMWDQyHSS9EUgEqgAQCKh3k+CXtjk9GxX GS0roNk2n+5cxqroax1UA6r+rfcEuX6duEECAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRXNzcja2mxUhY32/XxjRjxT4hxBDAfBgNVHSMEGDAWgBQ8Jn0Cj9mcYT46b0JU Fdfbf80dSjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyNDUvUENaOUFvX1puR0UtT205Q1ZCWFgyM19OSFVvLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvUENaOUFvX1puR0UtT205Q1ZCWFgy M19OSFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjQ1L1BDWjlBb19abkdFLU9tOUNWQlhYMjNfTkhVby5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaUKIGpzGelC+I26VQ+p5W0uPIHzLIVmxNXHf+4kiOTe3TAq9J6hXQ frJJOcHB4XNGKrGvIf+HPLjdIOyi8x3fAHvT9hn86D1Oei+LYx0/PGTZoKgmgL+7 nAk3NOhufk/PRkxPljJ5xqXyQ8MFaOPLeQPVzO3TMDQJm2iJKOW2A1GDIMQKfdmu 4pd03+7tKQsPIzp4z0YxYJ0xd+JKNT5y7nCuYQPY4Ebzb1MpSZIFwmB3zhF5/dJo 9/W5qcvNhszoTAYiSHOVRI5YQk7uKHnyOIa2Q8YwAxuwGa8tY4obkcR96fAxMAbs U+44h1n7lXjHwSL9XICEvTPzyPNuHm1c -----END CERTIFICATE-----Generated at Mon Jun 10 09:56:07 2024 by rpki-client on console-ams.rpki-client.org