$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.mft File: A3Bvo5uORU66HcPnP-3Iih5Ar3Q.mft (raw, json) Hash identifier: kYXy8T9rvrZaMIefsOFjiaUVIXDPE2x4K23vvmka65c= Subject key identifier: 43:53:63:2F:AD:C1:4A:FD:9D:9E:07:E8:A8:25:96:C0:A7:A5:5E:5D Authority key identifier: 03:70:6F:A3:9B:8E:45:4E:BA:1D:C3:E7:3F:ED:C8:8A:1E:40:AF:74 Certificate issuer: /CN=03706FA39B8E454EBA1DC3E73FEDC88A1E40AF74 Certificate serial: 0B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.mft Manifest number: 8D Signing time: Mon 25 Nov 2024 23:16:06 +0000 Manifest this update: Mon 25 Nov 2024 23:16:06 +0000 Manifest next update: Tue 10 Dec 2024 23:16:06 +0000 Files and hashes: 1: A3Bvo5uORU66HcPnP-3Iih5Ar3Q.crl (hash: pAdq2mtJijbOwQZzjA6WWdzqa+GyuVcecV+3VDiUu50=) 2: PFjStXjxQt6Q9iIjdUKIGUASIY0.roa (hash: w9ATA4UEM1s5HhSzQWK+VLQQbfEzNzqkivx7TWbLMvw=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 23:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03706FA39B8E454EBA1DC3E73FEDC88A1E40AF74 Validity Not Before: Nov 15 01:38:00 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=4353632FADC14AFD9D9E07E8A82596C0A7A55E5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:91:e5:b8:92:8f:96:ac:c7:e8:e2:61:ef:9a: c3:d8:43:10:3a:af:01:39:7c:5a:d8:49:d4:36:01: 6a:95:17:18:52:d0:e8:57:ed:80:d6:09:40:35:31: b0:6f:c1:84:c3:4f:aa:8e:03:46:d5:cc:2a:88:3c: fe:62:19:a8:62:be:f4:4d:7d:a4:e0:8c:e2:23:4a: b5:19:8c:a9:a7:35:46:27:91:1b:3b:19:d4:e6:7d: a4:a0:e1:cc:2c:12:c0:33:d3:70:a2:42:d9:d1:c7: ee:53:e2:d4:70:2d:f0:11:e1:3b:db:e8:46:b7:7b: ff:8a:53:b6:ee:79:d0:74:d0:36:8f:d4:65:4a:f2: 49:62:c3:61:fd:60:27:dc:5f:d3:39:81:68:77:34: ef:9f:5c:62:40:bf:9c:18:54:7f:d4:06:02:8a:ed: 11:00:14:5c:5f:1e:e1:35:c1:47:03:d5:38:18:c3: ea:c7:24:c5:85:8d:a5:f8:61:6f:34:3e:47:31:98: dd:9b:c4:00:cb:b8:ba:41:84:31:df:af:03:c7:df: ed:b5:15:be:b8:d0:a3:0f:09:5b:8d:a2:94:ad:5f: c5:19:83:b5:3d:8f:cc:9c:eb:d0:0e:5f:bc:b1:b8: 39:0d:5a:31:d7:b0:fe:51:ff:d8:11:d9:80:7d:83: 78:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:53:63:2F:AD:C1:4A:FD:9D:9E:07:E8:A8:25:96:C0:A7:A5:5E:5D X509v3 Authority Key Identifier: keyid:03:70:6F:A3:9B:8E:45:4E:BA:1D:C3:E7:3F:ED:C8:8A:1E:40:AF:74 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:56:68:38:b1:59:37:5d:df:4e:21:b3:55:eb:3e:72:97:bc: 29:b2:4e:4f:91:3d:a4:74:d3:20:ea:cb:f2:3d:3a:0f:fc:ae: 39:26:17:06:a5:6a:c2:61:35:ba:86:d2:93:e1:52:a4:b3:e9: bb:e8:66:11:33:49:98:87:70:fa:ef:3b:d6:98:60:f8:60:f9: b6:13:27:e7:f8:67:7f:50:94:95:4c:a0:48:68:e6:ae:1e:0e: 07:76:62:c5:6c:67:7c:e5:8b:97:e4:41:6b:7c:1a:39:1a:11: 4b:ee:56:88:60:e3:10:f5:f5:24:c0:c0:42:e4:af:9a:9c:cd: d7:87:8b:24:9e:30:5b:40:6f:e0:08:e2:ec:b7:2a:12:10:49: 67:18:ec:50:94:df:aa:11:45:22:0a:df:59:de:b3:71:fc:d1: e2:ca:d2:26:63:83:0a:0c:a7:d1:91:9a:09:93:1d:37:e7:38: 5d:32:35:10:9e:7e:16:6f:17:92:29:75:7d:5c:e2:12:24:a5: 69:c0:5e:ff:24:aa:e6:00:14:d4:18:a8:84:69:1c:07:fe:8a: 69:88:42:af:1c:5c:16:53:1e:6b:de:cf:30:e4:89:06:aa:01: ad:f5:01:b9:67:b7:33:22:a3:cd:38:fe:de:a6:d2:85:f2:55: 7f:86:58:aa -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwMzcw NkZBMzlCOEU0NTRFQkExREMzRTczRkVEQzg4QTFFNDBBRjc0MB4XDTI0MTExNTAx MzgwMFoXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoNDM1MzYzMkZBREMxNEFG RDlEOUUwN0U4QTgyNTk2QzBBN0E1NUU1RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALmR5biSj5asx+jiYe+aw9hDEDqvATl8WthJ1DYBapUXGFLQ6Fft gNYJQDUxsG/BhMNPqo4DRtXMKog8/mIZqGK+9E19pOCM4iNKtRmMqac1RieRGzsZ 1OZ9pKDhzCwSwDPTcKJC2dHH7lPi1HAt8BHhO9voRrd7/4pTtu550HTQNo/UZUry SWLDYf1gJ9xf0zmBaHc0759cYkC/nBhUf9QGAortEQAUXF8e4TXBRwPVOBjD6sck xYWNpfhhbzQ+RzGY3ZvEAMu4ukGEMd+vA8ff7bUVvrjQow8JW42ilK1fxRmDtT2P zJzr0A5fvLG4OQ1aMdew/lH/2BHZgH2DeGECAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRDU2MvrcFK/Z2eB+ioJZbAp6VeXTAfBgNVHSMEGDAWgBQDcG+jm45FTrodw+c/ 7ciKHkCvdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyNTUvQTNCdm81dU9SVTY2SGNQblAtM0lpaDVBcjNRLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQTNCdm81dU9SVTY2SGNQblAtM0lp aDVBcjNRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMjU1L0EzQnZvNXVPUlU2NkhjUG5QLTNJaWg1QXIzUS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOVmg4sVk3Xd9OIbNV6z5yl7wpsk5PkT2kdNMg6svyPToP/K45JhcG pWrCYTW6htKT4VKks+m76GYRM0mYh3D67zvWmGD4YPm2Eyfn+Gd/UJSVTKBIaOau Hg4HdmLFbGd85YuX5EFrfBo5GhFL7laIYOMQ9fUkwMBC5K+anM3Xh4sknjBbQG/g COLstyoSEElnGOxQlN+qEUUiCt9Z3rNx/NHiytImY4MKDKfRkZoJkx035zhdMjUQ nn4WbxeSKXV9XOISJKVpwF7/JKrmABTUGKiEaRwH/oppiEKvHFwWUx5r3s8w5IkG qgGt9QG5Z7czIqPNOP7eptKF8lV/hliq -----END CERTIFICATE-----Generated at Tue Nov 26 02:17:05 2024 by rpki-client on console-fra.rpki-client.org