$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft File: jIbjLs6aPIUP6-ppZB81RCc9U3E.mft (raw, json) Hash identifier: EFkVZ9O2pi8CPovSCeWaxiemPVC5zLBaENMkmQkrWJc= Subject key identifier: 5E:CE:2B:36:42:4F:7F:10:C9:ED:27:AD:CA:06:CD:77:6B:94:A6:BF Authority key identifier: 8C:86:E3:2E:CE:9A:3C:85:0F:EB:EA:69:64:1F:35:44:27:3D:53:71 Certificate issuer: /CN=8C86E32ECE9A3C850FEBEA69641F3544273D5371 Certificate serial: 08 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft Manifest number: 69 Signing time: Fri 22 Nov 2024 10:52:24 +0000 Manifest this update: Fri 22 Nov 2024 10:52:24 +0000 Manifest next update: Sat 07 Dec 2024 10:52:24 +0000 Files and hashes: 1: 4x5a0Mk3ks_PlWC3C8hulDbbwR0.roa (hash: CxJiCQGLleqCmqGEXa06iF2gOZ1zcxP5VUFnrCsxEBk=) 2: VS6Dyh2blpj35aYjCGLrljr4Q6E.roa (hash: Xa1wCryL5pGUz40/Q/4Yvy2AsNOlEslmigjawYuNWgs=) 3: VxW2dGsDSxTbLIKgHIDXUOAkLi0.roa (hash: DDH6gVdQir1fVPcY9xW0QyELWDpCuu4V2xXCEejuBss=) 4: jIbjLs6aPIUP6-ppZB81RCc9U3E.crl (hash: qP9SgmUA411CUhWNrsDCLppAtOeSP2sNAqhazTcsI+M=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C86E32ECE9A3C850FEBEA69641F3544273D5371 Validity Not Before: Nov 15 01:38:31 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=5ECE2B36424F7F10C9ED27ADCA06CD776B94A6BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:15:dc:d6:93:72:f4:2b:6a:0e:3f:9c:c7:f6: 38:f7:be:dd:56:80:77:bb:61:ef:bf:8c:bd:2b:8f: 63:ea:51:5b:d3:7b:ee:15:ae:f3:a0:59:39:f4:39: 8a:ed:56:cd:4f:cc:b7:02:99:fb:23:41:65:3a:9f: c6:fb:6e:80:f0:37:85:51:b0:71:b6:21:32:8f:ca: cc:d2:be:0f:91:d0:68:83:dd:c1:76:6a:d9:68:7e: 34:9e:8c:61:a7:fa:9d:ef:06:90:0a:43:80:5a:ed: d4:45:60:a2:8c:f3:4e:20:ed:51:53:98:dd:d3:c7: e4:9f:6b:28:45:9e:01:c8:5b:4c:d0:95:77:bd:e9: 4a:a5:52:d6:09:85:25:67:28:6a:1e:05:26:78:a0: 16:ac:6e:e0:a5:8b:cd:3c:15:84:7f:4e:5f:67:bd: 65:01:be:d2:71:4e:7d:3c:b4:fc:94:40:76:21:19: 72:91:32:5a:58:6b:70:20:82:c0:84:6a:c4:cd:cd: 45:8d:7c:0b:fd:6b:09:c7:6d:52:5c:69:53:4c:0f: 6a:4d:31:db:fa:9e:bd:e1:54:31:2e:b7:de:9d:dd: 43:72:2f:0e:d9:23:cc:50:5a:e4:9b:18:4b:a1:e6: 50:67:11:4e:cb:e7:29:ff:cd:f5:ad:a2:94:3f:e5: 0a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CE:2B:36:42:4F:7F:10:C9:ED:27:AD:CA:06:CD:77:6B:94:A6:BF X509v3 Authority Key Identifier: keyid:8C:86:E3:2E:CE:9A:3C:85:0F:EB:EA:69:64:1F:35:44:27:3D:53:71 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:95:9e:7a:ec:d3:4b:21:36:bb:eb:70:c5:23:0a:ad:86:5c: 9d:ec:14:b3:3b:5c:a3:80:cb:f4:b6:e0:a7:52:f7:69:b3:3d: f2:d5:12:c3:14:89:e2:82:24:12:f4:d2:d9:83:01:1b:b7:2e: cd:65:35:62:97:ba:12:52:a8:c5:5d:97:5d:ef:1a:af:93:2b: d7:15:4f:36:d1:3f:c8:42:0f:d2:28:c2:19:00:f9:51:bf:74: d2:89:c2:c3:0c:ec:7d:be:2b:49:35:3a:65:ba:fa:30:3f:75: ec:db:42:1d:2d:72:cb:65:17:6a:7c:df:ae:cc:61:fb:8a:aa: 52:a4:df:f7:43:fc:5d:7c:93:d3:59:fb:c6:16:37:51:21:e3: 58:ac:93:95:81:6e:95:eb:fb:b4:bc:0a:88:f4:a5:18:0b:3e: 64:3e:9f:5a:5a:fd:1d:f6:48:97:b0:d5:22:b7:89:38:44:cd: 52:2e:e5:ce:8f:65:3a:06:72:fc:13:7b:72:96:6a:37:6a:62: b4:1b:44:24:0a:39:11:96:0e:89:a7:03:2b:62:e2:a3:df:28: f7:c0:ed:13:83:9e:84:6a:00:64:be:51:b2:d8:86:9e:86:03: c1:33:d3:f0:dd:85:c1:96:02:21:fc:3a:1b:cd:f7:f2:83:5b: 3e:7b:c0:58 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4Qzg2 RTMyRUNFOUEzQzg1MEZFQkVBNjk2NDFGMzU0NDI3M0Q1MzcxMB4XDTI0MTExNTAx MzgzMVoXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoNUVDRTJCMzY0MjRGN0Yx MEM5RUQyN0FEQ0EwNkNENzc2Qjk0QTZCRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ8V3NaTcvQrag4/nMf2OPe+3VaAd7th77+MvSuPY+pRW9N77hWu 86BZOfQ5iu1WzU/MtwKZ+yNBZTqfxvtugPA3hVGwcbYhMo/KzNK+D5HQaIPdwXZq 2Wh+NJ6MYaf6ne8GkApDgFrt1EVgoozzTiDtUVOY3dPH5J9rKEWeAchbTNCVd73p SqVS1gmFJWcoah4FJnigFqxu4KWLzTwVhH9OX2e9ZQG+0nFOfTy0/JRAdiEZcpEy WlhrcCCCwIRqxM3NRY18C/1rCcdtUlxpU0wPak0x2/qeveFUMS633p3dQ3IvDtkj zFBa5JsYS6HmUGcRTsvnKf/N9a2ilD/lCmsCAwEAAaOCAj8wggI7MB0GA1UdDgQW BBRezis2Qk9/EMntJ63KBs13a5SmvzAfBgNVHSMEGDAWgBSMhuMuzpo8hQ/r6mlk HzVEJz1TcTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA5MS9qSWJqTHM2YVBJVVA2LXBwWkI4MVJDYzlVM0UuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9qSWJqTHM2YVBJVVA2LXBwWkI4MVJD YzlVM0UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTA5MS9qSWJqTHM2YVBJVVA2LXBwWkI4MVJDYzlVM0UubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEAgpWeeuzTSyE2u+twxSMKrYZcnewUsztco4DL9Lbgp1L3abM98tUSwxSJ 4oIkEvTS2YMBG7cuzWU1Ype6ElKoxV2XXe8ar5Mr1xVPNtE/yEIP0ijCGQD5Ub90 0onCwwzsfb4rSTU6Zbr6MD917NtCHS1yy2UXanzfrsxh+4qqUqTf90P8XXyT01n7 xhY3USHjWKyTlYFulev7tLwKiPSlGAs+ZD6fWlr9HfZIl7DVIreJOETNUi7lzo9l OgZy/BN7cpZqN2pitBtEJAo5EZYOiacDK2Lio98o98DtE4OehGoAZL5RstiGnoYD wTPT8N2FwZYCIfw6G8338oNbPnvAWA== -----END CERTIFICATE-----Generated at Fri Nov 22 13:33:08 2024 by rpki-client on console-fra.rpki-client.org