$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft File: sO8BlKUNHPsce5lL7-S-faasGWg.mft (raw, json) Hash identifier: NfBJEu0UuQloiAlBFFN7vxh4GDSpMexxBmpQ9EhwGAU= Subject key identifier: 43:57:90:D5:43:86:5E:8A:1D:68:31:C3:51:22:4F:21:6D:16:DD:E9 Authority key identifier: B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68 Certificate issuer: /CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968 Certificate serial: 07 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft Manifest number: 0120 Signing time: Wed 05 Feb 2025 08:49:25 +0000 Manifest this update: Wed 05 Feb 2025 08:49:25 +0000 Manifest next update: Thu 20 Feb 2025 08:49:25 +0000 Files and hashes: 1: 0x-rrUTd9nok7mEJT2vaOUEVTIo.roa (hash: KYe3JFWEd7Ju9Y4MDg1bJ9Yjn4/z0xkJzb9erY23pdU=) 2: 3xLq0pwBnZzX_pHVqJ_Mggzm6TE.roa (hash: 7iukbyWl7D5DXmV3FR2Qx091iDdLZZ415tB95Mzcgek=) 3: IWEaDib74erm2XbaPR7vJOODhX0.roa (hash: 1IwFXkgtqrcgFP5fFSvjt04xivmPiyFzNNAakuEIT4Y=) 4: SVed5hzfvN3CVTc-9GaRFD6AKi0.roa (hash: 3wKq6m2FDDY3g6/LFD04FjvRRGOfou31JAN3/uNB/AI=) 5: _72FyXIMgjujFJ6a52htX9_Qnig.roa (hash: YhnTKjDD3S0L2owaBnm8LWkErGn3qQ5X7fblh2s5nps=) 6: sO8BlKUNHPsce5lL7-S-faasGWg.crl (hash: FGbQo7MB8GVwrZYBHc6vGRGLf4pnZlY+GPLwGGgxnxI=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 09:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968 Validity Not Before: Jan 15 01:34:51 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=435790D543865E8A1D6831C351224F216D16DDE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:34:d9:8f:ad:0c:fe:b0:a3:86:8d:06:42:b8: ce:71:47:42:ff:fe:1e:c2:bb:21:31:2d:82:99:a9: 9a:26:76:5c:98:7f:d9:8e:33:dd:03:38:75:79:44: a0:38:1c:60:34:29:af:00:46:be:c3:c0:7b:d7:08: cd:5e:df:60:11:62:0a:99:08:e6:15:1c:02:07:70: a3:1d:91:09:16:8f:c5:b2:81:ce:5a:c5:fd:8f:76: 37:48:e3:b9:da:35:48:18:7e:53:38:b9:71:f6:d3: fc:d4:c0:b6:85:78:df:90:73:06:5c:69:1a:07:b5: 4a:1f:96:5c:61:92:27:38:19:b9:f9:f6:b8:c7:c3: fa:98:3c:d8:75:03:6a:64:29:60:89:da:e0:09:74: 21:bf:27:2b:69:a6:6a:a6:47:7b:ef:b9:9c:39:09: 06:26:66:27:4c:66:d4:63:60:aa:f8:0f:2c:a4:8a: aa:db:85:36:5d:f9:6c:aa:6b:38:8b:a6:06:5a:ee: e4:44:15:6a:80:da:86:4b:82:5b:88:e9:19:34:78: b7:3b:41:e4:a6:1d:8f:e6:27:e9:fb:8a:5a:f6:60: ff:bc:bf:62:35:da:1b:91:5c:20:9b:7f:51:b3:5b: 25:f6:8f:c9:8b:a5:ea:2b:f1:f6:40:ed:f9:97:ac: aa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:57:90:D5:43:86:5E:8A:1D:68:31:C3:51:22:4F:21:6D:16:DD:E9 X509v3 Authority Key Identifier: keyid:B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d0:48:e2:78:48:3e:d6:7d:dc:cf:16:03:83:72:be:ee:d9: 23:a7:e0:bf:62:90:68:1b:9b:6d:e3:17:12:b6:54:de:9b:da: 57:fb:a3:20:0c:03:ad:96:82:f3:b5:60:59:74:25:24:69:72: 9b:73:aa:ca:82:fa:49:86:d7:fd:f1:72:c8:2f:87:f4:fa:c8: 0f:c9:c2:ce:8a:dd:44:b9:61:29:e1:6e:16:01:2e:8d:2c:0b: 37:9c:b8:db:09:d7:ba:d6:22:c5:23:8f:fe:fa:bf:fb:07:69: 99:89:65:a5:83:1f:8c:e3:8a:6c:9e:9e:6e:6d:38:23:7c:de: bc:6e:28:c7:ba:ea:56:89:30:7d:ad:ed:85:1b:bb:36:e3:10: c3:d4:e0:40:22:56:87:cd:de:d9:a0:17:51:2a:73:ac:97:be: 13:2e:4c:cc:1b:53:33:ee:02:40:2f:82:28:d4:0f:10:93:0e: 19:b4:55:e3:4c:5b:26:2c:bc:c8:8b:d5:63:e5:9d:a5:13:9a: 41:1d:ef:67:82:35:bb:6f:25:c4:ed:f8:e6:b4:ce:be:b8:6b: f3:58:02:c5:24:ef:7f:f6:e0:b1:63:2f:c1:5c:e5:d7:2b:13: 30:f1:bb:48:f5:44:fe:42:aa:7c:55:9b:8e:06:d1:74:56:db: d8:3f:e9:2c -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMEVG MDE5NEE1MEQxQ0ZCMUM3Qjk5NEJFRkU0QkU3REE2QUMxOTY4MB4XDTI1MDExNTAx MzQ1MVoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoNDM1NzkwRDU0Mzg2NUU4 QTFENjgzMUMzNTEyMjRGMjE2RDE2RERFOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKI02Y+tDP6wo4aNBkK4znFHQv/+HsK7ITEtgpmpmiZ2XJh/2Y4z 3QM4dXlEoDgcYDQprwBGvsPAe9cIzV7fYBFiCpkI5hUcAgdwox2RCRaPxbKBzlrF /Y92N0jjudo1SBh+Uzi5cfbT/NTAtoV435BzBlxpGge1Sh+WXGGSJzgZufn2uMfD +pg82HUDamQpYIna4Al0Ib8nK2mmaqZHe++5nDkJBiZmJ0xm1GNgqvgPLKSKqtuF Nl35bKprOIumBlru5EQVaoDahkuCW4jpGTR4tztB5KYdj+Yn6fuKWvZg/7y/YjXa G5FcIJt/UbNbJfaPyYul6ivx9kDt+ZesqvMCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRDV5DVQ4Zeih1oMcNRIk8hbRbd6TAfBgNVHSMEGDAWgBSw7wGUpQ0c+xx7mUvv 5L59pqwZaDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxNTkvc084QmxLVU5IUHNjZTVsTDctUy1mYWFzR1dnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvc084QmxLVU5IUHNjZTVsTDctUy1m YWFzR1dnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTU5L3NPOEJsS1VOSFBzY2U1bEw3LVMtZmFhc0dXZy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA80EjieEg+1n3czxYDg3K+7tkjp+C/YpBoG5tt4xcStlTem9pX+6Mg DAOtloLztWBZdCUkaXKbc6rKgvpJhtf98XLIL4f0+sgPycLOit1EuWEp4W4WAS6N LAs3nLjbCde61iLFI4/++r/7B2mZiWWlgx+M44psnp5ubTgjfN68bijHuupWiTB9 re2FG7s24xDD1OBAIlaHzd7ZoBdRKnOsl74TLkzMG1Mz7gJAL4Io1A8Qkw4ZtFXj TFsmLLzIi9Vj5Z2lE5pBHe9ngjW7byXE7fjmtM6+uGvzWALFJO9/9uCxYy/BXOXX KxMw8btI9UT+Qqp8VZuOBtF0VtvYP+ks -----END CERTIFICATE-----Generated at Wed Feb 5 13:04:21 2025 by rpki-client