$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/nIZpvxizEBJxD0jJqN4Ltx18L2Y.mft File: nIZpvxizEBJxD0jJqN4Ltx18L2Y.mft (raw, json) Hash identifier: w+JFgFgdkStJIT9Ngt4yYXYBK4iBrVFWIU4EB1AO2rw= Subject key identifier: D1:28:E8:7A:F9:69:15:68:3B:54:71:AF:33:09:E0:F9:05:1E:A8:5D Authority key identifier: 9C:86:69:BF:18:B3:10:12:71:0F:48:C9:A8:DE:0B:B7:1D:7C:2F:66 Certificate issuer: /CN=9C8669BF18B31012710F48C9A8DE0BB71D7C2F66 Certificate serial: 0C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nIZpvxizEBJxD0jJqN4Ltx18L2Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/nIZpvxizEBJxD0jJqN4Ltx18L2Y.mft Manifest number: 2E Signing time: Thu 30 May 2024 01:42:46 +0000 Manifest this update: Thu 30 May 2024 01:42:46 +0000 Manifest next update: Sun 09 Jun 2024 01:42:46 +0000 Files and hashes: 1: FXLyGkDhS5fdpMr-Wj494M3fP_Q.roa (hash: G+rAlNrcMvSBnOoK1iqwLpwnLTXi7iXpXvIHnsRvjwI=) 2: nDnYNoODcc_dB-lsamOW-21LMNE.roa (hash: Ia1jkO9DBrT7cGj2CMZl53j36GCw9Y7S40LLBOtouPU=) 3: nIZpvxizEBJxD0jJqN4Ltx18L2Y.crl (hash: a7BSNhCV8NbSKKJBZbMxExu9VY0II+FWKApwVL/s6po=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/nIZpvxizEBJxD0jJqN4Ltx18L2Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/nIZpvxizEBJxD0jJqN4Ltx18L2Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nIZpvxizEBJxD0jJqN4Ltx18L2Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8669BF18B31012710F48C9A8DE0BB71D7C2F66 Validity Not Before: May 15 01:37:39 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=D128E87AF96915683B5471AF3309E0F9051EA85D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1f:ea:d3:58:7e:6e:45:47:91:e5:86:81:91: fb:bb:93:ca:59:a0:7a:97:91:cd:9f:7d:7b:52:79: a9:44:af:5a:f1:b3:3e:9f:87:bd:dd:1c:34:1c:45: 6e:5c:a8:53:3a:31:68:64:34:97:33:dc:24:a0:1b: 27:ac:30:14:84:ac:d5:4a:14:ef:dc:d5:be:c8:50: 95:12:1f:cc:70:1b:9e:5d:da:6c:11:f9:34:a2:57: dd:27:4c:4e:5b:af:07:55:4b:5f:33:7d:76:7c:aa: 35:bf:0e:8e:d8:33:5a:79:f2:0f:a2:01:27:89:e1: 00:bc:d0:18:01:c3:fe:3c:ae:57:64:0b:87:a6:5f: 71:ea:64:9a:3d:4c:c6:92:c1:08:8b:7f:84:66:b3: ed:30:ac:c5:e5:4b:31:b8:de:8a:fb:89:05:a4:68: a7:96:8b:f0:59:89:ce:ff:f9:85:84:41:d5:ab:38: d2:eb:c2:3f:25:d4:fc:67:d8:1d:0f:84:d4:da:1f: 3c:f8:25:6d:6f:24:54:d4:88:3a:d0:5d:44:45:c4: b6:30:f2:66:ac:db:76:7d:0e:f4:39:89:bf:74:7b: 99:e2:33:20:40:58:5b:3d:21:2f:1c:63:62:f1:f1: 93:91:e4:9f:bf:96:78:38:73:bd:65:52:d5:56:13: d0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:28:E8:7A:F9:69:15:68:3B:54:71:AF:33:09:E0:F9:05:1E:A8:5D X509v3 Authority Key Identifier: keyid:9C:86:69:BF:18:B3:10:12:71:0F:48:C9:A8:DE:0B:B7:1D:7C:2F:66 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/nIZpvxizEBJxD0jJqN4Ltx18L2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nIZpvxizEBJxD0jJqN4Ltx18L2Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/nIZpvxizEBJxD0jJqN4Ltx18L2Y.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:c7:ab:f2:68:3d:d6:50:f7:e6:12:83:b6:20:2f:12:d2:ea: 96:75:28:b3:43:6c:7a:6f:cf:32:a5:23:27:35:4c:a0:32:e6: bc:32:c8:0b:fe:de:e4:a6:fe:a2:b7:3d:db:a1:08:38:4a:cd: e2:72:dc:51:0c:00:84:37:a5:f0:67:2b:1b:50:00:dc:a4:25: 63:d3:24:bc:73:43:85:f4:57:77:46:b1:73:dd:57:9d:b9:f8: 95:c4:45:26:95:3e:03:e2:21:60:31:7e:15:c6:4c:0a:27:6f: 4c:26:62:1a:67:98:f6:b4:ca:b6:0b:68:25:2a:ad:1d:7c:42: 8c:f0:d3:c2:7e:fe:d3:62:44:a8:ec:e6:90:d7:9a:ae:21:7c: ba:0c:b2:93:25:46:58:96:57:0b:29:08:bf:7f:33:bc:dc:7c: 9a:a8:ec:64:91:76:af:88:f9:5b:92:93:f0:f1:a8:5b:c5:98: 28:98:8d:59:ca:d0:ef:6d:f3:d1:ed:66:7a:35:b2:52:25:a4: 2d:58:6a:a1:af:61:d3:b6:28:b9:83:5c:80:c9:f9:9f:79:ed: 39:d6:6f:11:f1:bd:1c:f5:e8:73:1f:88:3f:7c:f6:81:4c:8f: 54:b1:f3:42:3c:ba:e4:bb:e9:ad:cf:09:30:1e:6e:df:ba:ca: e4:a9:3e:73 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5Qzg2 NjlCRjE4QjMxMDEyNzEwRjQ4QzlBOERFMEJCNzFEN0MyRjY2MB4XDTI0MDUxNTAx MzczOVoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoRDEyOEU4N0FGOTY5MTU2 ODNCNTQ3MUFGMzMwOUUwRjkwNTFFQTg1RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANof6tNYfm5FR5HlhoGR+7uTylmgepeRzZ99e1J5qUSvWvGzPp+H vd0cNBxFblyoUzoxaGQ0lzPcJKAbJ6wwFISs1UoU79zVvshQlRIfzHAbnl3abBH5 NKJX3SdMTluvB1VLXzN9dnyqNb8OjtgzWnnyD6IBJ4nhALzQGAHD/jyuV2QLh6Zf cepkmj1MxpLBCIt/hGaz7TCsxeVLMbjeivuJBaRop5aL8FmJzv/5hYRB1as40uvC PyXU/GfYHQ+E1NofPPglbW8kVNSIOtBdREXEtjDyZqzbdn0O9DmJv3R7meIzIEBY Wz0hLxxjYvHxk5Hkn7+WeDhzvWVS1VYT0F0CAwEAAaOCAj0wggI5MB0GA1UdDgQW BBTRKOh6+WkVaDtUca8zCeD5BR6oXTAfBgNVHSMEGDAWgBSchmm/GLMQEnEPSMmo 3gu3HXwvZjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjQwL25JWnB2eGl6RUJKeEQwakpxTjRMdHgxOEwyWS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL25JWnB2eGl6RUJKeEQwakpxTjRMdHgx OEwyWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yNDAvbklacHZ4aXpFQkp4RDBqSnFONEx0eDE4TDJZLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGbHq/JoPdZQ9+YSg7YgLxLS6pZ1KLNDbHpvzzKlIyc1TKAy5rwyyAv+3uSm /qK3PduhCDhKzeJy3FEMAIQ3pfBnKxtQANykJWPTJLxzQ4X0V3dGsXPdV525+JXE RSaVPgPiIWAxfhXGTAonb0wmYhpnmPa0yrYLaCUqrR18Qozw08J+/tNiRKjs5pDX mq4hfLoMspMlRliWVwspCL9/M7zcfJqo7GSRdq+I+VuSk/DxqFvFmCiYjVnK0O9t 89HtZno1slIlpC1YaqGvYdO2KLmDXIDJ+Z957TnWbxHxvRz16HMfiD989oFMj1Sx 80I8uuS76a3PCTAebt+6yuSpPnM= -----END CERTIFICATE-----Generated at Thu May 30 03:38:40 2024 by rpki-client on console-ams.rpki-client.org