$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.mft File: GyCgaiEgWCCyj9Bs4KhPA_za68U.mft (raw, json) Hash identifier: 6C+UVr6cMwzXKDj1O41eqfSeyaJchPzdoBJssifAwvI= Subject key identifier: D3:71:33:07:41:2B:08:B1:EB:29:FD:40:D6:57:39:6C:2E:DF:99:70 Authority key identifier: 1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5 Certificate issuer: /CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5 Certificate serial: 4F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.mft Manifest number: 1075 Signing time: Sat 15 Jun 2024 01:30:52 +0000 Manifest this update: Sat 15 Jun 2024 01:30:52 +0000 Manifest next update: Tue 25 Jun 2024 01:30:52 +0000 Files and hashes: 1: 3guSo_y891OR5VM-JhaJI5GCBnk.roa (hash: j03jP0hW0cqNvoUnMBCxkvBWClobSqbA8OwWjXDZYEg=) 2: GyCgaiEgWCCyj9Bs4KhPA_za68U.crl (hash: T/R3JTjc/xUztobYCcQg4bdKfdeT++fx3ssBFcS7KLM=) 3: LpmReinF0zRPnJAHFiQyJ515qn0.roa (hash: 5aTenP6HdVnlue7WvPwjvhxdmJ4IETgHDU/u7oCAlF0=) 4: b126MigIR6pgrMexFFnsDvN3cRg.roa (hash: SXFrqayaBNKQ/2+zCLNTSfWpFa9P25vzy38YDaGCv1U=) 5: qwGz0iUrjPsZ1uWw3H3x5uHVgng.roa (hash: garT/7N4RYTLWC/AmKnS3P4BT6f2k2X9HUPlgriGskY=) 6: sMLui9ydBCKSSPPRNivVSmfLYYs.roa (hash: akjkddKuicBQThhRQN1R1ULj9ZOyt4RcTyMzOKvFvjI=) 7: u3OYpOL3Hz0qzKYN5TCo-M2cl2Y.roa (hash: EkZ5PzO3E8e9NmG8SQ3IQy/E7VkTJz+6Q2F+hi3vIBE=) 8: veUe3_ZA1YYiRFBAUk8l6a9L2ro.roa (hash: VKTl3KSQvluGlecgAlFmfXupF4AyVQYi8Wg8FDbAEUQ=) 9: vm0ypNt-M1VIxxSbBaNMuDw6mDw.roa (hash: 79xDfZC1NTLGqpUcgT54q6IOtOibcuocqcqtPGRDIsk=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 11:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5 Validity Not Before: Jun 15 01:30:52 2024 GMT Not After : Jun 15 01:30:03 2025 GMT Subject: CN=D3713307412B08B1EB29FD40D657396C2EDF9970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2a:7f:2a:48:b0:04:36:cd:fe:70:c4:8f:f9: 81:02:bc:e6:00:d2:d8:2f:d2:fe:43:fd:19:b5:45: ca:70:cf:14:99:df:f7:e0:36:8b:a9:a6:48:ef:b9: 29:d2:cf:40:cf:0b:a3:3b:14:85:d4:1b:24:41:df: 9f:6e:a1:2b:0d:f1:6a:ee:b0:64:33:d9:89:ea:31: 95:a4:7e:b2:71:8c:0e:79:1a:e5:d7:23:c2:4c:f3: f2:50:a2:8f:d3:67:24:96:47:61:21:72:65:e0:e2: 91:2f:76:fa:22:73:2d:ab:a0:3f:30:97:e4:9c:91: 24:04:20:be:9d:08:57:ec:0e:cc:13:35:14:df:2d: d0:3a:cd:c1:4c:0c:e7:4c:f7:0c:70:9a:fb:90:a3: a7:9f:22:47:7b:19:b1:b1:84:17:40:fd:28:2f:ed: d2:67:f2:09:21:00:bf:b4:08:59:9e:e4:14:b7:24: f5:8e:c2:66:61:f6:87:6f:c3:7a:0b:d5:51:83:5b: d3:8c:fc:3b:12:d8:8d:c8:ae:7b:da:d6:a8:4a:6e: 15:f9:cd:9d:6b:fa:7f:28:34:93:49:d0:85:d0:de: d8:bd:d0:49:23:23:69:7e:28:fa:18:f6:58:07:77: 51:75:da:ff:d1:81:96:a2:38:d7:7c:41:3f:42:df: 48:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:71:33:07:41:2B:08:B1:EB:29:FD:40:D6:57:39:6C:2E:DF:99:70 X509v3 Authority Key Identifier: keyid:1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:9c:dd:4f:22:de:bf:f8:05:95:02:10:a2:b8:3b:2a:c7:11: 9e:cc:a1:16:b2:e2:42:5e:e6:86:5d:ba:a6:b1:cb:55:aa:57: ad:3f:15:25:6e:99:db:09:52:8e:43:e1:0f:87:f1:75:47:3f: 96:35:03:da:d6:0e:47:50:83:7d:68:a1:48:0a:b6:b8:83:af: 0c:08:1d:bc:44:88:62:c0:e8:8f:7c:6a:91:ef:d2:bb:b2:b5: 68:a7:13:72:bd:4b:e2:57:d7:93:0a:7a:20:d5:6a:5a:46:ba: 8c:df:f9:ee:b7:0f:75:31:ca:5b:18:77:2e:5e:54:e3:d3:93: 9e:ea:4f:55:f7:dd:73:67:7c:a2:3e:90:84:22:05:0f:12:4f: fe:22:29:8b:c5:c3:ee:be:dd:a4:08:fe:52:63:23:66:26:3b: 6e:04:b6:83:98:71:6e:f9:ca:49:c4:a5:d4:ff:88:80:f5:27: cb:53:72:20:bc:20:0e:ce:08:48:07:e6:d2:24:f2:14:8a:03: 31:85:07:7a:22:ba:eb:0b:29:8b:50:df:19:ce:c4:aa:9b:83: 2c:59:a7:5f:e1:59:79:5d:32:4c:2e:8c:81:17:1f:2b:4a:27: c8:e8:f6:c9:4b:be:81:ca:2c:a9:c6:b2:07:d5:9e:5b:85:2e: 2d:10:0b:84 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQjIw QTA2QTIxMjA1ODIwQjI4RkQwNkNFMEE4NEYwM0ZDREFFQkM1MB4XDTI0MDYxNTAx MzA1MloXDTI1MDYxNTAxMzAwM1owMzExMC8GA1UEAxMoRDM3MTMzMDc0MTJCMDhC MUVCMjlGRDQwRDY1NzM5NkMyRURGOTk3MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMsqfypIsAQ2zf5wxI/5gQK85gDS2C/S/kP9GbVFynDPFJnf9+A2 i6mmSO+5KdLPQM8LozsUhdQbJEHfn26hKw3xau6wZDPZieoxlaR+snGMDnka5dcj wkzz8lCij9NnJJZHYSFyZeDikS92+iJzLaugPzCX5JyRJAQgvp0IV+wOzBM1FN8t 0DrNwUwM50z3DHCa+5Cjp58iR3sZsbGEF0D9KC/t0mfyCSEAv7QIWZ7kFLck9Y7C ZmH2h2/DegvVUYNb04z8OxLYjciue9rWqEpuFfnNnWv6fyg0k0nQhdDe2L3QSSMj aX4o+hj2WAd3UXXa/9GBlqI413xBP0LfSBMCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBTTcTMHQSsIsesp/UDWVzlsLt+ZcDAfBgNVHSMEGDAWgBQbIKBqISBYILKP0Gzg qE8D/NrrxTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTMwL0d5Q2dhaUVnV0NDeWo5QnM0S2hQQV96YTY4VS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0d5Q2dhaUVnV0NDeWo5QnM0S2hQQV96 YTY4VS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MzAvR3lDZ2FpRWdXQ0N5ajlCczRLaFBBX3phNjhVLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAWc3U8i3r/4BZUCEKK4OyrHEZ7MoRay4kJe5oZduqaxy1WqV60/FSVumdsJ Uo5D4Q+H8XVHP5Y1A9rWDkdQg31ooUgKtriDrwwIHbxEiGLA6I98apHv0ruytWin E3K9S+JX15MKeiDValpGuozf+e63D3UxylsYdy5eVOPTk57qT1X33XNnfKI+kIQi BQ8ST/4iKYvFw+6+3aQI/lJjI2YmO24EtoOYcW75yknEpdT/iID1J8tTciC8IA7O CEgH5tIk8hSKAzGFB3oiuusLKYtQ3xnOxKqbgyxZp1/hWXldMkwujIEXHytKJ8jo 9slLvoHKLKnGsgfVnluFLi0QC4Q= -----END CERTIFICATE-----Generated at Sun Jun 16 12:57:25 2024 by rpki-client on console-fra.rpki-client.org