$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/hTvMypswbARZZY4oio0_3nUbT2s.mft File: hTvMypswbARZZY4oio0_3nUbT2s.mft (raw, json) Hash identifier: uY39REys/HI9lR44REYR0nWbx9mX48SoBSjd/hvl2To= Subject key identifier: 99:00:8B:21:A2:5A:0E:57:17:43:E3:E6:6F:A8:AC:04:45:30:8A:43 Authority key identifier: 85:3B:CC:CA:9B:30:6C:04:59:65:8E:28:8A:8D:3F:DE:75:1B:4F:6B Certificate issuer: /CN=853BCCCA9B306C0459658E288A8D3FDE751B4F6B Certificate serial: 0B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hTvMypswbARZZY4oio0_3nUbT2s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/hTvMypswbARZZY4oio0_3nUbT2s.mft Manifest number: 2F Signing time: Fri 14 Jun 2024 01:47:43 +0000 Manifest this update: Fri 14 Jun 2024 01:47:43 +0000 Manifest next update: Mon 24 Jun 2024 01:47:43 +0000 Files and hashes: 1: 0-goShRmQgxmx-dEA67vzr_WCVA.roa (hash: qQP1N0WP7ZPHDRz9whIMAAFRNV1Yo8YtfHSL8lA4NM0=) 2: hTvMypswbARZZY4oio0_3nUbT2s.crl (hash: /UKFrLAtBg/8AjMhf8Ui017bKdbIYpaUWkQ6XnpMTcQ=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/hTvMypswbARZZY4oio0_3nUbT2s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/hTvMypswbARZZY4oio0_3nUbT2s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hTvMypswbARZZY4oio0_3nUbT2s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 23:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=853BCCCA9B306C0459658E288A8D3FDE751B4F6B Validity Not Before: May 15 01:37:40 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=99008B21A25A0E571743E3E66FA8AC0445308A43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ea:ee:f0:77:fa:04:78:20:44:92:dd:e3:6b: 86:e2:9b:56:f6:22:36:43:ea:9f:93:fb:a0:53:51: 9c:5c:93:b8:7b:bc:b5:67:f8:4c:72:03:e7:96:de: 7d:ca:73:69:5a:71:d8:58:fd:ad:b4:a8:61:57:5a: 16:5b:f5:b8:1c:32:9a:ce:e2:ff:88:2e:a6:06:49: 3b:ae:6c:0d:ab:0c:25:d3:7e:6f:1a:dc:e3:a3:0c: 4f:44:af:06:75:a3:83:29:2e:41:9b:db:15:0a:dd: 13:b4:77:a9:8b:99:06:14:1f:37:b5:76:c9:61:e3: e8:4f:2f:f5:96:58:d0:7f:14:99:c8:60:be:c6:0b: 64:a6:74:f7:b1:43:5f:d4:db:82:51:f7:27:30:d8: 3a:bf:6b:50:b7:48:3b:f3:54:8b:cc:bb:ec:bf:8c: cf:fa:66:df:79:8b:b8:50:42:36:22:44:ee:82:84: d9:11:7a:a9:ae:d7:a6:cb:ed:85:a1:5c:ce:aa:a8: 54:12:c9:80:0c:71:00:60:73:f2:e6:89:74:4c:57: 55:4b:e1:9d:63:5d:54:87:f4:19:d9:16:ff:31:a1: c2:9b:94:dd:b4:f6:d6:84:68:f3:58:ca:fc:da:b3: bf:a5:4d:a3:0b:5f:fc:00:4d:e2:6c:45:02:69:70: 10:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:00:8B:21:A2:5A:0E:57:17:43:E3:E6:6F:A8:AC:04:45:30:8A:43 X509v3 Authority Key Identifier: keyid:85:3B:CC:CA:9B:30:6C:04:59:65:8E:28:8A:8D:3F:DE:75:1B:4F:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/hTvMypswbARZZY4oio0_3nUbT2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hTvMypswbARZZY4oio0_3nUbT2s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/hTvMypswbARZZY4oio0_3nUbT2s.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:82:8e:aa:f1:9f:62:43:51:a7:25:87:02:d7:d9:6e:03:45: 02:b9:ca:27:78:d4:64:de:7a:84:8d:81:6c:cc:e4:f8:0f:28: bd:26:c5:31:19:9c:c4:f7:94:5f:e6:98:4a:eb:7e:39:08:57: f3:fa:7e:7e:34:36:3b:4d:8e:4f:97:b0:e8:5a:4f:d4:4a:3f: 79:1b:9c:80:52:9d:6c:69:a5:48:a3:f6:8e:1a:cc:5b:5a:9d: c4:5f:72:73:8f:de:dc:5b:b8:c1:08:b4:cd:d4:9d:2d:1f:0b: f2:60:f8:f5:f6:5b:d1:31:1d:c4:71:67:bb:f6:c3:07:a5:60: 81:1c:4e:94:5a:36:98:4b:98:fe:06:c6:17:c1:28:de:2b:98: c3:ac:d6:77:e4:0e:ff:c3:7c:6d:a8:8e:4a:77:de:b8:57:66: a4:95:c1:82:4d:9c:d2:be:d9:f3:09:80:36:c5:94:43:22:35: b6:ff:0d:b5:e8:57:dc:6a:85:1e:6b:2d:c4:34:f8:0f:2b:92: ad:b2:8d:9c:fb:2f:1f:fc:c3:47:64:ef:9c:13:82:49:72:bf: 62:51:8f:08:8a:8d:cc:c6:b0:f7:be:cd:ae:c9:2d:b7:ca:10: 85:51:97:73:96:5f:54:52:71:32:fc:8e:28:7a:8a:e2:a1:1c: 68:30:71:e8 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NTNC Q0NDQTlCMzA2QzA0NTk2NThFMjg4QThEM0ZERTc1MUI0RjZCMB4XDTI0MDUxNTAx Mzc0MFoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoOTkwMDhCMjFBMjVBMEU1 NzE3NDNFM0U2NkZBOEFDMDQ0NTMwOEE0MzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAObq7vB3+gR4IESS3eNrhuKbVvYiNkPqn5P7oFNRnFyTuHu8tWf4 THID55befcpzaVpx2Fj9rbSoYVdaFlv1uBwyms7i/4gupgZJO65sDasMJdN+bxrc 46MMT0SvBnWjgykuQZvbFQrdE7R3qYuZBhQfN7V2yWHj6E8v9ZZY0H8UmchgvsYL ZKZ097FDX9TbglH3JzDYOr9rULdIO/NUi8y77L+Mz/pm33mLuFBCNiJE7oKE2RF6 qa7XpsvthaFczqqoVBLJgAxxAGBz8uaJdExXVUvhnWNdVIf0GdkW/zGhwpuU3bT2 1oRo81jK/Nqzv6VNowtf/ABN4mxFAmlwEEUCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBSZAIsholoOVxdD4+ZvqKwERTCKQzAfBgNVHSMEGDAWgBSFO8zKmzBsBFlljiiK jT/edRtPazAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjQwL2hUdk15cHN3YkFSWlpZNG9pbzBfM25VYlQycy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hUdk15cHN3YkFSWlpZNG9pbzBfM25V YlQycy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yNDAvaFR2TXlwc3diQVJaWlk0b2lvMF8zblViVDJzLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADeCjqrxn2JDUaclhwLX2W4DRQK5yid41GTeeoSNgWzM5PgPKL0mxTEZnMT3 lF/mmErrfjkIV/P6fn40NjtNjk+XsOhaT9RKP3kbnIBSnWxppUij9o4azFtancRf cnOP3txbuMEItM3UnS0fC/Jg+PX2W9ExHcRxZ7v2wwelYIEcTpRaNphLmP4GxhfB KN4rmMOs1nfkDv/DfG2ojkp33rhXZqSVwYJNnNK+2fMJgDbFlEMiNbb/DbXoV9xq hR5rLcQ0+A8rkq2yjZz7Lx/8w0dk75wTgklyv2JRjwiKjczGsPe+za7JLbfKEIVR l3OWX1RScTL8jih6iuKhHGgwceg= -----END CERTIFICATE-----Generated at Fri Jun 14 16:47:56 2024 by rpki-client on console-fra.rpki-client.org