$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft File: -8RilKXVZDfhmhGu-fubh3aQFD4.mft (raw, json) Hash identifier: vOcFfj0hwqYnSV2pG5AumE6xFYj9zpluDGYKjcn9Fmw= Subject key identifier: 80:0D:E1:2F:55:26:57:2F:FD:5D:12:C1:EE:92:6A:5E:37:93:47:06 Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E Certificate issuer: /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E Certificate serial: 4C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft Manifest number: D5 Signing time: Tue 07 May 2024 13:30:04 +0000 Manifest this update: Tue 07 May 2024 13:30:04 +0000 Manifest next update: Fri 17 May 2024 13:30:04 +0000 Files and hashes: 1: -8RilKXVZDfhmhGu-fubh3aQFD4.crl (hash: Azhn7X8x9j+cUepYxpSqtbAVOth8TzfgHjyA7DWt4Ng=) 2: -XKrotcqBdABK48wPW4zMK0jF8A.roa (hash: 4Rskz42g0bUfzkJe1xrukgWlwyohGenvLG6nR90VZqE=) 3: 3gsSNh-9B0fNL6NxMKuGKDuc3pA.roa (hash: yOw+qfly7HL98QyaSPU9+unjCmd+hKcOcLO3HCxBCVg=) 4: DflsB2evMbJ7vtHy4zVxRPfT8vc.roa (hash: t1MZEF1aeqWzo52kovBiuNM2flQvn8sVYgE4UNIG3UI=) 5: k2hcv-Ox7TuVlhAkwm8zCg3r4OQ.roa (hash: 0YuA3/ftdJKbQoDBJe/DLytluXOMMoo+YQsgGfy/wS4=) 6: lwwGWyS2vW91y8cRl-nbKG4fQYI.roa (hash: re14thi29yZTivFZ8IFAGHNMkCaryDYv6e6itQxz+as=) 7: m2n3RB_6NlMTPIbDreVrbIbr9Qc.roa (hash: xvspuv0XwcX+zLAWnr/dKKig1K/ilVEZz9xCuXuDAgA=) 8: uNVyKQL9i6bf5D92Vs9DvocNHBg.roa (hash: Rs3tYJ7TWaqfxkvfsYkOJ7l4vFHzId5bSJ3J8TonIkI=) 9: xMRCcPKN6tGmeKoZcy4S0WP7kRw.roa (hash: bbFBNnMZxuwWVHRQ4z9I4ZVC8IAxq/vEy4fOWYpnksU=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E Validity Not Before: Apr 15 01:35:12 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=800DE12F5526572FFD5D12C1EE926A5E37934706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a2:5e:b1:76:d9:b6:9f:4b:ce:76:20:e0:c7: 74:f5:7a:bd:45:a7:92:33:13:3a:f6:05:4a:bb:a3: ec:4c:4e:1c:88:82:2e:5f:2b:de:30:93:98:55:b0: b0:c5:d8:c7:96:4c:48:d6:0d:e3:1f:b3:15:96:2c: 41:ba:c2:c4:b6:ec:8d:1d:fd:eb:9a:69:ba:28:da: 77:7d:0d:6e:0a:da:02:48:b8:eb:9c:ae:74:95:f9: fc:18:ca:ad:47:d6:35:75:80:f9:c1:5c:7b:2f:a7: c7:d5:1e:b6:ba:f4:30:7a:eb:2b:50:10:d1:2f:3a: 02:9a:55:0d:54:67:b8:fe:91:99:27:c4:b1:55:57: 94:cf:c3:7e:9a:f9:69:74:5d:89:3f:b1:49:e7:8a: 02:15:78:aa:dd:44:91:d0:ff:f5:a7:e7:35:4a:52: e5:be:37:9e:5c:ce:f5:aa:e1:ed:27:2c:12:e6:6f: cb:bf:38:90:9c:6d:b7:ef:99:06:8e:63:cd:c6:20: b4:76:45:12:89:5a:d3:d7:f2:75:36:46:49:8e:2a: 92:b6:6b:74:74:90:b1:5e:45:4e:59:f5:35:22:c1: 1c:f6:ef:e6:70:0e:a5:d2:fd:df:64:a4:8b:e9:17: c2:4e:39:e1:23:5a:43:3f:79:0a:ab:69:37:83:c3: 3e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:0D:E1:2F:55:26:57:2F:FD:5D:12:C1:EE:92:6A:5E:37:93:47:06 X509v3 Authority Key Identifier: keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:4c:b5:24:68:98:f1:69:67:20:69:18:11:dd:39:00:5a:1f: c9:a8:26:76:ed:d9:73:d3:5e:7b:ef:3c:82:ae:9f:13:d6:c0: 6a:27:40:85:8f:68:a4:6a:ad:8c:76:1d:29:d2:d9:ce:16:3e: 17:f0:ed:25:f5:ab:30:40:cd:d9:4a:1b:5b:7e:e9:12:1f:11: 93:c1:59:c4:25:f9:cd:2c:fb:c3:3c:3b:0e:be:9f:15:1b:59: d5:01:4d:8b:9b:54:ac:ba:86:bd:7f:a7:6a:aa:e0:7d:e8:a7: 74:a9:93:b4:e4:1d:07:ec:f2:51:22:dc:1c:78:78:08:35:65: b6:1a:5c:38:53:ba:6f:03:e2:cc:de:d4:dc:2b:08:fa:fc:c3: a5:4f:8a:04:03:4d:0d:36:96:5c:10:79:2e:44:3b:4f:e5:30: 52:d7:70:95:6c:cc:ba:21:8d:a6:af:4a:14:3a:b8:53:e7:4d: 1b:f3:94:c6:93:f6:55:8b:e6:56:e1:f0:b8:d1:b4:4d:c8:9c: 74:a6:96:f7:76:55:86:a8:ac:27:5d:f5:b5:e1:51:43:fd:2e: cb:81:0b:4f:34:ad:9d:99:17:f9:67:11:5d:1c:4b:3f:57:f5: 51:50:aa:49:9c:3c:e1:79:19:a1:4e:13:85:30:13:96:2e:62: 3a:e9:5b:8c -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQkM0 NjI5NEE1RDU2NDM3RTE5QTExQUVGOUZCOUI4Nzc2OTAxNDNFMB4XDTI0MDQxNTAx MzUxMloXDTI1MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoODAwREUxMkY1NTI2NTcy RkZENUQxMkMxRUU5MjZBNUUzNzkzNDcwNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ6iXrF22bafS852IODHdPV6vUWnkjMTOvYFSruj7ExOHIiCLl8r 3jCTmFWwsMXYx5ZMSNYN4x+zFZYsQbrCxLbsjR3965ppuijad30NbgraAki465yu dJX5/BjKrUfWNXWA+cFcey+nx9Uetrr0MHrrK1AQ0S86AppVDVRnuP6RmSfEsVVX lM/Dfpr5aXRdiT+xSeeKAhV4qt1EkdD/9afnNUpS5b43nlzO9arh7ScsEuZvy784 kJxtt++ZBo5jzcYgtHZFEola09fydTZGSY4qkrZrdHSQsV5FTln1NSLBHPbv5nAO pdL932Ski+kXwk454SNaQz95CqtpN4PDPnUCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBSADeEvVSZXL/1dEsHukmpeN5NHBjAfBgNVHSMEGDAWgBT7xGKUpdVkN+GaEa75 +5uHdpAUPjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTEyNDcvLThSaWxLWFZaRGZobWhHdS1mdWJoM2FRRkQ0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvLThSaWxLWFZaRGZobWhHdS1mdWJo M2FRRkQ0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzExMjQ3Ly04UmlsS1hWWkRmaG1oR3UtZnViaDNhUUZENC5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMTLUkaJjxaWcgaRgR3TkAWh/JqCZ27dlz01577zyCrp8T1sBqJ0CF j2ikaq2Mdh0p0tnOFj4X8O0l9aswQM3ZShtbfukSHxGTwVnEJfnNLPvDPDsOvp8V G1nVAU2Lm1Ssuoa9f6dqquB96Kd0qZO05B0H7PJRItwceHgINWW2Glw4U7pvA+LM 3tTcKwj6/MOlT4oEA00NNpZcEHkuRDtP5TBS13CVbMy6IY2mr0oUOrhT500b85TG k/ZVi+ZW4fC40bRNyJx0ppb3dlWGqKwnXfW14VFD/S7LgQtPNK2dmRf5ZxFdHEs/ V/VRUKpJnDzheRmhThOFMBOWLmI66VuM -----END CERTIFICATE-----Generated at Wed May 8 10:07:11 2024 by rpki-client on console-ams.rpki-client.org