$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.mft File: jjbedq4bJZ0S9U7rnGv88N5FPAQ.mft (raw, json) Hash identifier: FtsjSVPSAjkSaP512RMBwFnjI5R3iBO5ZBZCNCMDW/I= Subject key identifier: DF:54:FC:4B:3D:55:66:90:F2:54:D8:30:34:C0:5D:0A:5A:F7:F5:4D Authority key identifier: 8E:36:DE:76:AE:1B:25:9D:12:F5:4E:EB:9C:6B:FC:F0:DE:45:3C:04 Certificate issuer: /CN=8E36DE76AE1B259D12F54EEB9C6BFCF0DE453C04 Certificate serial: 14 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.mft Manifest number: 3C Signing time: Mon 24 Jun 2024 10:53:41 +0000 Manifest this update: Mon 24 Jun 2024 10:53:41 +0000 Manifest next update: Thu 04 Jul 2024 10:53:41 +0000 Files and hashes: 1: ScCc6QjTkdl0woH4DMwgM211Cdc.roa (hash: 0+z/Ef4Q22fTkMKqYorohz7p0JqR2uzuzHV6lAX8zyc=) 2: T_COIc0ePBPeEQv1OXiFVp5zwMk.roa (hash: GDnLblHPcHwAy18Nv2w9XurkQ6H5OYSqBxjPw3pe5EM=) 3: Xpm-t1NBacmkFNbn26RsxCp9Fj4.roa (hash: whiTb0mKFkVHpU8KUkKH8vvYUSkWLqLJbSs7y+2zM9s=) 4: jjbedq4bJZ0S9U7rnGv88N5FPAQ.crl (hash: AruR/hitVlyW+/OOd1VX6H4lXYoQGW3O9zA/KgNdGYg=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E36DE76AE1B259D12F54EEB9C6BFCF0DE453C04 Validity Not Before: Jun 24 10:53:41 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=DF54FC4B3D556690F254D83034C05D0A5AF7F54D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d9:9d:bc:98:dd:3d:37:ff:33:09:bd:d5:e8: d2:5a:aa:90:b6:01:6b:3d:35:90:e2:87:e3:d5:16: e4:93:0a:a4:04:7b:ec:4f:fa:fb:d4:3f:6c:65:f1: 27:a6:9a:7c:73:55:a6:47:d5:1b:5e:9d:2a:ef:9a: 9a:c2:9a:51:27:21:be:81:e6:92:74:58:a9:fd:de: d3:57:9e:4c:dc:ca:8b:b8:0c:de:f8:93:14:71:8b: 03:3c:02:3f:c5:4f:7e:d6:fb:8d:91:07:8e:66:12: fd:e8:fb:85:4f:ef:c9:c8:6d:50:88:1c:4a:82:d1: a2:a8:f2:a0:61:6d:b0:5e:31:1f:58:87:ca:63:a1: e4:71:bf:8e:08:3c:e3:34:8d:74:d1:57:53:2c:ce: 74:fe:ad:08:ff:cb:d1:29:50:8e:be:df:c9:65:4a: 58:37:f2:26:0d:3a:41:e8:84:e4:f5:8e:bb:4d:ac: c8:d2:4e:af:79:c4:e5:b2:df:0e:03:df:2b:72:64: 91:5d:58:39:49:15:16:a9:ff:a9:2d:03:0a:e8:fe: 52:9f:4e:76:20:cb:d4:3a:be:1c:24:14:ac:f7:f2: aa:dd:e0:bc:92:fe:a3:4c:98:51:70:d4:ec:23:2f: 60:ba:5e:e1:27:b2:6f:2d:12:c2:3f:ba:bd:77:f0: 32:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:54:FC:4B:3D:55:66:90:F2:54:D8:30:34:C0:5D:0A:5A:F7:F5:4D X509v3 Authority Key Identifier: keyid:8E:36:DE:76:AE:1B:25:9D:12:F5:4E:EB:9C:6B:FC:F0:DE:45:3C:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:28:89:4e:30:10:f5:29:88:96:ba:da:da:c0:ec:a0:bf:4e: ba:b6:df:e9:8f:a9:2e:8b:91:26:2f:c9:0a:a8:a0:33:c8:9b: fc:64:1b:61:3d:ae:68:c3:6c:e5:ae:f0:b1:b4:17:a6:ac:63: d5:81:b6:12:1f:1c:b1:b9:4a:b0:c6:f7:12:04:67:ca:db:70: 10:09:8e:4f:ac:e4:2c:01:f0:3e:35:23:b4:24:26:1f:3c:ed: 5f:80:b3:57:39:80:dd:bc:68:00:8f:f6:04:52:bf:aa:a0:44: 69:41:80:24:d2:d7:56:a9:0c:eb:a9:fb:b2:b7:b6:f9:fd:26: 6a:41:b9:d1:ec:c3:a0:16:2b:d9:6d:ca:42:f3:77:69:63:ea: ac:c7:70:e9:75:e9:1d:b0:f4:63:2e:94:dc:bd:da:b5:5c:56: d1:90:9e:1c:c2:46:9c:70:3a:f5:2a:aa:37:c2:ef:d2:fa:35: a6:d7:86:3e:cd:57:6c:50:bb:1c:e5:a0:a5:02:69:6c:8c:ba: 7c:59:e5:60:03:64:6a:8f:d7:e1:8d:04:e5:8d:7e:27:f7:38: 97:46:ed:bd:62:e8:f7:be:9e:bd:2f:b8:3e:d2:02:ac:8e:5a: e2:23:11:37:12:e1:0f:35:75:6e:71:8d:9a:a3:5c:d1:d3:0f: c6:38:80:a7 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RTM2 REU3NkFFMUIyNTlEMTJGNTRFRUI5QzZCRkNGMERFNDUzQzA0MB4XDTI0MDYyNDEw NTM0MVoXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoREY1NEZDNEIzRDU1NjY5 MEYyNTREODMwMzRDMDVEMEE1QUY3RjU0RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALvZnbyY3T03/zMJvdXo0lqqkLYBaz01kOKH49UW5JMKpAR77E/6 +9Q/bGXxJ6aafHNVpkfVG16dKu+amsKaUSchvoHmknRYqf3e01eeTNzKi7gM3viT FHGLAzwCP8VPftb7jZEHjmYS/ej7hU/vychtUIgcSoLRoqjyoGFtsF4xH1iHymOh 5HG/jgg84zSNdNFXUyzOdP6tCP/L0SlQjr7fyWVKWDfyJg06QeiE5PWOu02syNJO r3nE5bLfDgPfK3JkkV1YOUkVFqn/qS0DCuj+Up9OdiDL1Dq+HCQUrPfyqt3gvJL+ o0yYUXDU7CMvYLpe4Seyby0Swj+6vXfwMv8CAwEAAaOCAj0wggI5MB0GA1UdDgQW BBTfVPxLPVVmkPJU2DA0wF0KWvf1TTAfBgNVHSMEGDAWgBSONt52rhslnRL1Tuuc a/zw3kU8BDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTkwL2pqYmVkcTRiSlowUzlVN3JuR3Y4OE41RlBBUS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pqYmVkcTRiSlowUzlVN3JuR3Y4OE41 RlBBUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85OTAvampiZWRxNGJKWjBTOVU3cm5Hdjg4TjVGUEFRLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEIoiU4wEPUpiJa62trA7KC/Trq23+mPqS6LkSYvyQqooDPIm/xkG2E9rmjD bOWu8LG0F6asY9WBthIfHLG5SrDG9xIEZ8rbcBAJjk+s5CwB8D41I7QkJh887V+A s1c5gN28aACP9gRSv6qgRGlBgCTS11apDOup+7K3tvn9JmpBudHsw6AWK9ltykLz d2lj6qzHcOl16R2w9GMulNy92rVcVtGQnhzCRpxwOvUqqjfC79L6NabXhj7NV2xQ uxzloKUCaWyMunxZ5WADZGqP1+GNBOWNfif3OJdG7b1i6Pe+nr0vuD7SAqyOWuIj ETcS4Q81dW5xjZqjXNHTD8Y4gKc= -----END CERTIFICATE-----Generated at Mon Jun 24 23:50:34 2024 by rpki-client on console-fra.rpki-client.org