$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft File: jIbjLs6aPIUP6-ppZB81RCc9U3E.mft (raw, json) Hash identifier: W9QUFtaOcRFsD3HlXFCa36deCHBO7fLDjEl68NS/dzc= Subject key identifier: 5E:CE:2B:36:42:4F:7F:10:C9:ED:27:AD:CA:06:CD:77:6B:94:A6:BF Authority key identifier: 8C:86:E3:2E:CE:9A:3C:85:0F:EB:EA:69:64:1F:35:44:27:3D:53:71 Certificate issuer: /CN=8C86E32ECE9A3C850FEBEA69641F3544273D5371 Certificate serial: 03 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft Manifest number: 0C Signing time: Tue 22 Oct 2024 09:13:41 +0000 Manifest this update: Tue 22 Oct 2024 09:13:41 +0000 Manifest next update: Fri 01 Nov 2024 09:13:41 +0000 Files and hashes: 1: 4x5a0Mk3ks_PlWC3C8hulDbbwR0.roa (hash: CxJiCQGLleqCmqGEXa06iF2gOZ1zcxP5VUFnrCsxEBk=) 2: VS6Dyh2blpj35aYjCGLrljr4Q6E.roa (hash: Xa1wCryL5pGUz40/Q/4Yvy2AsNOlEslmigjawYuNWgs=) 3: VxW2dGsDSxTbLIKgHIDXUOAkLi0.roa (hash: DDH6gVdQir1fVPcY9xW0QyELWDpCuu4V2xXCEejuBss=) 4: jIbjLs6aPIUP6-ppZB81RCc9U3E.crl (hash: KIrJYyT05EwSO7MDDecMfhzEdHeptgIT5QN4ZfWeSj8=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Oct 2024 22:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C86E32ECE9A3C850FEBEA69641F3544273D5371 Validity Not Before: Oct 15 01:32:28 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=5ECE2B36424F7F10C9ED27ADCA06CD776B94A6BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:15:dc:d6:93:72:f4:2b:6a:0e:3f:9c:c7:f6: 38:f7:be:dd:56:80:77:bb:61:ef:bf:8c:bd:2b:8f: 63:ea:51:5b:d3:7b:ee:15:ae:f3:a0:59:39:f4:39: 8a:ed:56:cd:4f:cc:b7:02:99:fb:23:41:65:3a:9f: c6:fb:6e:80:f0:37:85:51:b0:71:b6:21:32:8f:ca: cc:d2:be:0f:91:d0:68:83:dd:c1:76:6a:d9:68:7e: 34:9e:8c:61:a7:fa:9d:ef:06:90:0a:43:80:5a:ed: d4:45:60:a2:8c:f3:4e:20:ed:51:53:98:dd:d3:c7: e4:9f:6b:28:45:9e:01:c8:5b:4c:d0:95:77:bd:e9: 4a:a5:52:d6:09:85:25:67:28:6a:1e:05:26:78:a0: 16:ac:6e:e0:a5:8b:cd:3c:15:84:7f:4e:5f:67:bd: 65:01:be:d2:71:4e:7d:3c:b4:fc:94:40:76:21:19: 72:91:32:5a:58:6b:70:20:82:c0:84:6a:c4:cd:cd: 45:8d:7c:0b:fd:6b:09:c7:6d:52:5c:69:53:4c:0f: 6a:4d:31:db:fa:9e:bd:e1:54:31:2e:b7:de:9d:dd: 43:72:2f:0e:d9:23:cc:50:5a:e4:9b:18:4b:a1:e6: 50:67:11:4e:cb:e7:29:ff:cd:f5:ad:a2:94:3f:e5: 0a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CE:2B:36:42:4F:7F:10:C9:ED:27:AD:CA:06:CD:77:6B:94:A6:BF X509v3 Authority Key Identifier: keyid:8C:86:E3:2E:CE:9A:3C:85:0F:EB:EA:69:64:1F:35:44:27:3D:53:71 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:bb:5a:c1:bd:b2:cd:70:a6:3d:ef:6a:f9:bf:f0:3b:71:e2: 84:3d:70:6d:ac:e7:06:00:0a:87:6d:40:25:59:04:3d:73:6d: 56:4a:36:86:be:3c:b4:e2:2c:7a:5e:50:fb:a0:9e:df:e6:7d: 48:63:aa:6f:e9:d4:da:96:3e:bc:0e:4b:ad:4f:ff:8a:8a:84: 8c:e7:91:45:f8:63:ae:f1:ad:d5:60:23:9f:10:35:76:60:30: 39:02:54:80:9d:8d:08:0e:a1:c7:c5:cc:ae:30:e1:e7:9b:99: cf:54:6f:76:ef:b0:bd:81:88:5e:f3:9c:16:2d:8a:b8:85:71: 49:ac:b6:2d:44:49:75:6e:16:b3:ec:17:71:62:f0:5d:e5:65: 86:d2:09:24:0c:5b:98:00:d9:09:b0:50:21:bc:ee:75:25:e1: 02:8a:fb:5e:d3:36:fd:d9:c3:8d:eb:58:71:c1:00:e1:6e:e2: 38:19:85:35:6d:fb:63:37:3d:4e:64:a3:86:10:2f:ce:2a:dc: fa:0f:fd:41:9d:26:b7:4c:04:4b:0c:57:7f:1b:11:6d:85:5b: 1f:b5:e2:46:df:12:0e:ef:5f:66:59:09:8a:0a:e9:e4:0c:ef: ee:aa:2f:7c:b8:ed:d2:ff:7d:55:3a:cc:c3:fc:4a:30:e4:50: c6:84:17:8e -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4Qzg2 RTMyRUNFOUEzQzg1MEZFQkVBNjk2NDFGMzU0NDI3M0Q1MzcxMB4XDTI0MTAxNTAx MzIyOFoXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoNUVDRTJCMzY0MjRGN0Yx MEM5RUQyN0FEQ0EwNkNENzc2Qjk0QTZCRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ8V3NaTcvQrag4/nMf2OPe+3VaAd7th77+MvSuPY+pRW9N77hWu 86BZOfQ5iu1WzU/MtwKZ+yNBZTqfxvtugPA3hVGwcbYhMo/KzNK+D5HQaIPdwXZq 2Wh+NJ6MYaf6ne8GkApDgFrt1EVgoozzTiDtUVOY3dPH5J9rKEWeAchbTNCVd73p SqVS1gmFJWcoah4FJnigFqxu4KWLzTwVhH9OX2e9ZQG+0nFOfTy0/JRAdiEZcpEy WlhrcCCCwIRqxM3NRY18C/1rCcdtUlxpU0wPak0x2/qeveFUMS633p3dQ3IvDtkj zFBa5JsYS6HmUGcRTsvnKf/N9a2ilD/lCmsCAwEAAaOCAj8wggI7MB0GA1UdDgQW BBRezis2Qk9/EMntJ63KBs13a5SmvzAfBgNVHSMEGDAWgBSMhuMuzpo8hQ/r6mlk HzVEJz1TcTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA5MS9qSWJqTHM2YVBJVVA2LXBwWkI4MVJDYzlVM0UuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9qSWJqTHM2YVBJVVA2LXBwWkI4MVJD YzlVM0UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTA5MS9qSWJqTHM2YVBJVVA2LXBwWkI4MVJDYzlVM0UubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEAAbtawb2yzXCmPe9q+b/wO3HihD1wbaznBgAKh21AJVkEPXNtVko2hr48 tOIsel5Q+6Ce3+Z9SGOqb+nU2pY+vA5LrU//ioqEjOeRRfhjrvGt1WAjnxA1dmAw OQJUgJ2NCA6hx8XMrjDh55uZz1Rvdu+wvYGIXvOcFi2KuIVxSay2LURJdW4Ws+wX cWLwXeVlhtIJJAxbmADZCbBQIbzudSXhAor7XtM2/dnDjetYccEA4W7iOBmFNW37 Yzc9TmSjhhAvzirc+g/9QZ0mt0wESwxXfxsRbYVbH7XiRt8SDu9fZlkJigrp5Azv 7qovfLjt0v99VTrMw/xKMORQxoQXjg== -----END CERTIFICATE-----Generated at Tue Oct 22 11:11:33 2024 by rpki-client on console-fra.rpki-client.org