$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.mft File: Xe_54al9RszcEvYG7rOKPmTbyB8.mft (raw, json) Hash identifier: bizdvfG3pnDEYkQFALAgV13ulmaoI0r2T7g1fjQQfnY= Subject key identifier: 58:12:DA:EC:97:6F:6D:31:FF:20:1C:8A:6A:5E:66:77:F9:E2:E0:BC Authority key identifier: 5D:EF:F9:E1:A9:7D:46:CC:DC:12:F6:06:EE:B3:8A:3E:64:DB:C8:1F Certificate issuer: /CN=5DEFF9E1A97D46CCDC12F606EEB38A3E64DBC81F Certificate serial: 16 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.mft Manifest number: 4A Signing time: Thu 06 Jun 2024 13:44:25 +0000 Manifest this update: Thu 06 Jun 2024 13:44:25 +0000 Manifest next update: Sun 16 Jun 2024 13:44:25 +0000 Files and hashes: 1: JRfRDyNent-kY9eNHVXgwy14UNA.roa (hash: WiHAj1egKtntHlRMM3Grzv3XubO5NHdV47aI0KMVM1I=) 2: Lw5-fuCBaht0knPQ_slmlJbeADM.roa (hash: G3KzFz6k+/rx1FA/WKZ/hlZbF96l38wE0Q9yrtPhTcw=) 3: Xe_54al9RszcEvYG7rOKPmTbyB8.crl (hash: /vQSbSgciTk8oGFVqI3zFQRVdqtEjMcwKkKwfFUTwNI=) 4: zpvSJ3Fd1IML3uArZTHO1UX6W8A.roa (hash: 0KkSHARCC6irqiGZ7wulx8OkM1RY6pb6zrNTmRYY2NY=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DEFF9E1A97D46CCDC12F606EEB38A3E64DBC81F Validity Not Before: May 15 01:37:02 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=5812DAEC976F6D31FF201C8A6A5E6677F9E2E0BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a9:d0:35:86:7f:74:c3:2c:ed:a8:97:36:49: de:c6:da:f6:97:02:59:95:bb:4a:71:ce:b6:e8:e2: 04:12:68:f1:ec:21:b8:91:fc:6d:57:3c:f0:dd:a6: f0:4f:81:33:d2:cf:c2:17:7a:9c:74:68:e8:69:66: 2b:70:e3:d0:d7:60:65:fb:ad:b8:ad:f1:08:64:70: 11:26:5f:66:e2:12:98:ed:53:77:1e:67:7b:5e:e2: 06:37:e7:c8:b7:a2:17:61:f4:e4:40:ae:b8:15:bd: 69:b9:bd:7d:d6:2e:58:a8:01:9c:c1:51:53:02:a0: 84:48:12:9c:2b:f2:dd:1f:b5:f5:da:82:d7:00:d7: 2e:02:4f:20:d5:c1:da:c2:e3:f6:eb:33:38:09:72: de:91:3f:d9:25:50:f2:6b:10:14:d9:12:38:04:9e: ed:b3:f2:50:aa:98:70:2a:3c:cf:4a:58:15:62:39: 0b:96:77:01:5e:3a:eb:a4:d7:30:1b:62:b5:5b:c6: 03:a4:9f:41:95:f0:cc:93:f2:17:36:ff:05:31:be: 46:e7:13:7c:26:53:95:01:b9:94:27:fc:51:40:89: 5e:1e:a0:f3:a1:bd:f3:07:d1:9f:60:24:a0:58:89: 9c:f9:fa:18:0f:88:96:93:49:83:d3:27:f4:1a:70: f4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:12:DA:EC:97:6F:6D:31:FF:20:1C:8A:6A:5E:66:77:F9:E2:E0:BC X509v3 Authority Key Identifier: keyid:5D:EF:F9:E1:A9:7D:46:CC:DC:12:F6:06:EE:B3:8A:3E:64:DB:C8:1F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:96:c7:0c:bf:91:93:e3:a9:e6:76:02:f4:9a:28:97:c0:43: 51:e5:e8:e7:62:30:92:74:64:10:6d:36:64:85:63:d7:55:de: 28:96:42:fd:42:9c:49:01:f9:77:21:b1:b5:2e:65:6a:34:a0: aa:84:3c:9e:6e:18:93:33:21:f4:db:c9:eb:95:f9:87:43:4a: b8:ad:b6:02:0b:47:0b:ed:b0:4d:51:c9:27:a7:fd:d6:91:0e: b7:f0:75:d1:8f:5d:ba:55:c2:06:46:cd:34:00:5d:38:79:66: e0:7e:ba:23:a8:c1:30:df:6e:c1:c9:ff:95:0b:49:1b:75:d4: 8c:b9:1b:ec:9f:58:7b:af:ae:de:64:e4:e7:b3:64:06:d5:56: 52:3d:97:41:8c:23:a7:22:23:16:8a:e9:c6:d8:e2:61:c9:99: 52:88:b6:07:cc:19:87:7f:df:43:bf:20:13:f6:39:69:d0:53: 51:22:52:18:fb:fd:ce:9b:90:e4:21:7d:fe:54:12:d4:71:cf: 49:08:fe:22:4d:81:3c:70:1c:fa:c8:22:b7:2a:9e:89:2e:d3: 3c:0c:fa:a4:53:5e:48:40:a1:14:5c:8b:f9:44:79:c6:ca:8b: 2b:7c:6f:3a:14:22:29:9b:53:d0:8b:eb:6f:8e:21:49:d3:ef: a0:51:39:b4 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1REVG RjlFMUE5N0Q0NkNDREMxMkY2MDZFRUIzOEEzRTY0REJDODFGMB4XDTI0MDUxNTAx MzcwMloXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoNTgxMkRBRUM5NzZGNkQz MUZGMjAxQzhBNkE1RTY2NzdGOUUyRTBCQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMWp0DWGf3TDLO2olzZJ3sba9pcCWZW7SnHOtujiBBJo8ewhuJH8 bVc88N2m8E+BM9LPwhd6nHRo6GlmK3Dj0NdgZfutuK3xCGRwESZfZuISmO1Tdx5n e17iBjfnyLeiF2H05ECuuBW9abm9fdYuWKgBnMFRUwKghEgSnCvy3R+19dqC1wDX LgJPINXB2sLj9uszOAly3pE/2SVQ8msQFNkSOASe7bPyUKqYcCo8z0pYFWI5C5Z3 AV4666TXMBtitVvGA6SfQZXwzJPyFzb/BTG+RucTfCZTlQG5lCf8UUCJXh6g86G9 8wfRn2AkoFiJnPn6GA+IlpNJg9Mn9Bpw9HUCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRYEtrsl29tMf8gHIpqXmZ3+eLgvDAfBgNVHSMEGDAWgBRd7/nhqX1GzNwS9gbu s4o+ZNvIHzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNDAvWGVfNTRhbDlSc3pjRXZZRzdyT0tQbVRieUI4LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWGVfNTRhbDlSc3pjRXZZRzdyT0tQ bVRieUI4LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDQwL1hlXzU0YWw5UnN6Y0V2WUc3ck9LUG1UYnlCOC5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3lscMv5GT46nmdgL0miiXwENR5ejnYjCSdGQQbTZkhWPXVd4olkL9 QpxJAfl3IbG1LmVqNKCqhDyebhiTMyH028nrlfmHQ0q4rbYCC0cL7bBNUcknp/3W kQ638HXRj126VcIGRs00AF04eWbgfrojqMEw327Byf+VC0kbddSMuRvsn1h7r67e ZOTns2QG1VZSPZdBjCOnIiMWiunG2OJhyZlSiLYHzBmHf99DvyAT9jlp0FNRIlIY +/3Om5DkIX3+VBLUcc9JCP4iTYE8cBz6yCK3Kp6JLtM8DPqkU15IQKEUXIv5RHnG yosrfG86FCIpm1PQi+tvjiFJ0++gUTm0 -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:15 2024 by rpki-client on console-fra.rpki-client.org