$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft File: 4qCwBJ8aPRI9yspc61tOXp7HlNc.mft (raw, json) Hash identifier: jEKAG1jXSR+4+ecjMJW2mhpgPHPWxG9tYHmX6CQ398Q= Subject key identifier: 51:0B:CA:F6:CF:4E:11:2B:82:DA:27:71:48:38:4A:9D:6F:D7:1B:A5 Authority key identifier: E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7 Certificate issuer: /CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7 Certificate serial: 4C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft Manifest number: 070D Signing time: Fri 07 Jun 2024 13:31:13 +0000 Manifest this update: Fri 07 Jun 2024 13:31:13 +0000 Manifest next update: Mon 17 Jun 2024 13:31:13 +0000 Files and hashes: 1: 4qCwBJ8aPRI9yspc61tOXp7HlNc.crl (hash: VoMdHxY2cSEPtoUIGq+zLXVoiyqKgPVhW+nqoNpNau8=) 2: y_fIwK9XGGazT2q_C8BQIJ5BrNY.roa (hash: j5jPMbnoEcgad080mqM00EsVBv9JurF+MQG+Ha9sozI=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 14:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7 Validity Not Before: May 15 01:32:46 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=510BCAF6CF4E112B82DA277148384A9D6FD71BA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:52:60:22:35:90:bd:b8:25:f3:00:be:13:e7: 1f:bb:ac:89:ac:80:b0:e9:1a:cc:ff:34:9f:c1:c8: 8b:d8:4e:cc:9d:3f:d9:9e:36:f5:e9:10:23:d1:84: 5e:17:ca:31:73:70:7f:53:d9:8b:e8:5a:b0:ed:d1: db:07:c7:0c:6c:98:5c:34:9d:8e:b0:2d:bf:c5:6d: 29:13:1b:fb:0a:12:6f:38:6b:be:1e:9e:67:c8:06: d9:92:17:2f:9a:3e:99:30:32:01:53:46:a0:16:03: 38:0d:4d:3f:7f:4d:43:81:4c:e4:df:44:16:50:36: 81:19:36:4a:59:5a:a0:4f:3c:5e:4e:a9:92:17:b2: 8c:63:a0:b8:40:de:76:8d:4b:05:33:14:00:f8:b1: c1:d4:89:09:26:d0:a8:84:c2:d6:95:27:cf:8e:14: ae:48:b5:c4:88:1c:92:d5:64:d7:de:21:ee:02:f9: 57:c5:e2:fb:88:c1:95:06:1b:83:cd:6e:2f:b5:18: ce:bb:16:a4:0c:f0:aa:7a:26:53:ef:6e:c2:4d:12: 73:91:fc:8d:7a:43:b5:64:71:db:3f:44:55:80:1d: d7:c6:2f:aa:7a:31:e4:0b:d0:1c:40:38:03:a6:d5: fa:85:20:66:72:20:b4:5e:9d:de:f7:05:73:e1:8b: b6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0B:CA:F6:CF:4E:11:2B:82:DA:27:71:48:38:4A:9D:6F:D7:1B:A5 X509v3 Authority Key Identifier: keyid:E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:00:9c:57:70:c2:10:e0:60:2a:ae:1d:b1:01:52:03:7f:37: f9:67:a3:b5:bd:93:f0:8a:8e:81:33:69:74:7f:c6:19:52:2d: 50:8a:40:3e:51:cb:15:0d:03:e1:83:be:1e:93:43:6f:47:e7: bc:56:d9:db:d0:69:e7:6c:1f:0b:91:0b:3f:04:05:3c:fc:75: ec:66:85:3b:a2:dc:b0:cb:ba:79:bd:3f:81:ab:ea:fc:c8:9e: 77:12:f4:a4:0f:6a:cb:6f:3d:26:0e:36:1e:b5:17:62:aa:17: 2f:39:5b:e3:d7:77:1f:cf:6c:47:41:01:0c:74:73:1d:5d:0c: 42:fd:b7:de:bb:92:2d:40:ef:0a:a8:6d:06:ca:4e:93:16:92: 02:f8:e0:34:d2:f0:a3:97:93:88:11:ab:59:1c:4b:85:0b:83: 66:6b:4d:51:07:f5:17:ea:4f:12:d6:4e:8a:23:a5:94:fc:f7: d8:46:d8:2b:1f:a5:ab:88:0e:96:a1:cb:aa:ac:63:45:c7:d3: 71:70:fa:9a:05:ab:e2:a6:d9:fb:3f:0a:29:b3:82:1f:08:7b: 34:eb:12:77:65:e3:54:76:6c:c0:52:fe:0e:be:f5:d3:2d:ec: a9:ef:37:f6:d9:d9:50:30:d8:48:df:88:e6:7a:b4:78:05:93: 84:85:d1:4c -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMkEw QjAwNDlGMUEzRDEyM0RDQUNBNUNFQjVCNEU1RTlFQzc5NEQ3MB4XDTI0MDUxNTAx MzI0NloXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoNTEwQkNBRjZDRjRFMTEy QjgyREEyNzcxNDgzODRBOUQ2RkQ3MUJBNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANBSYCI1kL24JfMAvhPnH7usiayAsOkazP80n8HIi9hOzJ0/2Z42 9ekQI9GEXhfKMXNwf1PZi+hasO3R2wfHDGyYXDSdjrAtv8VtKRMb+woSbzhrvh6e Z8gG2ZIXL5o+mTAyAVNGoBYDOA1NP39NQ4FM5N9EFlA2gRk2SllaoE88Xk6pkhey jGOguEDedo1LBTMUAPixwdSJCSbQqITC1pUnz44Urki1xIgcktVk194h7gL5V8Xi +4jBlQYbg81uL7UYzrsWpAzwqnomU+9uwk0Sc5H8jXpDtWRx2z9EVYAd18Yvqnox 5AvQHEA4A6bV+oUgZnIgtF6d3vcFc+GLtv8CAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRRC8r2z04RK4LaJ3FIOEqdb9cbpTAfBgNVHSMEGDAWgBTioLAEnxo9Ej3Kylzr W05enseU1zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTAyNDcvNHFDd0JKOGFQUkk5eXNwYzYxdE9YcDdIbE5jLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNHFDd0JKOGFQUkk5eXNwYzYxdE9Y cDdIbE5jLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwMjQ3LzRxQ3dCSjhhUFJJOXlzcGM2MXRPWHA3SGxOYy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEAJxXcMIQ4GAqrh2xAVIDfzf5Z6O1vZPwio6BM2l0f8YZUi1QikA+ UcsVDQPhg74ek0NvR+e8Vtnb0GnnbB8LkQs/BAU8/HXsZoU7otywy7p5vT+Bq+r8 yJ53EvSkD2rLbz0mDjYetRdiqhcvOVvj13cfz2xHQQEMdHMdXQxC/bfeu5ItQO8K qG0Gyk6TFpIC+OA00vCjl5OIEatZHEuFC4Nma01RB/UX6k8S1k6KI6WU/PfYRtgr H6WriA6WocuqrGNFx9NxcPqaBaviptn7Pwops4IfCHs06xJ3ZeNUdmzAUv4OvvXT Leyp7zf22dlQMNhI34jmerR4BZOEhdFM -----END CERTIFICATE-----Generated at Fri Jun 7 15:25:06 2024 by rpki-client on console-fra.rpki-client.org