$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft File: 37zT-LypGRXEUzosCmnD01suaI0.mft (raw, json) Hash identifier: 4VYa0TqUkGTqQC8hLD0f/Ph6o1chnwe4KFpKpIvJLLA= Subject key identifier: 7B:E2:E2:1D:1C:EE:66:37:B7:53:20:27:D1:07:36:DC:92:95:8D:D2 Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D Certificate issuer: /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D Certificate serial: 1B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft Manifest number: 4F Signing time: Thu 30 May 2024 01:41:10 +0000 Manifest this update: Thu 30 May 2024 01:41:10 +0000 Manifest next update: Sun 09 Jun 2024 01:41:10 +0000 Files and hashes: 1: 37zT-LypGRXEUzosCmnD01suaI0.crl (hash: Gl2ZVETDpuuo9mVNegNWRMQvp3tHAalyq7BCtWZcWa0=) 2: 39garQBcWYbqJMkKJ1121AKAA1k.roa (hash: EYKDyXpP5OFbIrteQnROwbtHwGsiVgmu2cpYnr4aXKs=) 3: 5HjB2mHS5gTqeSMw075xaRno8OM.roa (hash: frfqjYgClm68iW+ZtTj90/ERzHmViDcvkQq8rp170nQ=) 4: Aq6pa4TyNrmyEc5uo52d9M5fDs8.roa (hash: RYNdp/HKjoZgyAO1adYCrfypygzYH4CZerdziKjaB8c=) 5: CRQLbxppftaYQN-HGGzv-Io-0qk.roa (hash: NeqtoSvWUb8XNTvn6qX09CmVP8WfD+WUnGW8+lLDHKc=) 6: QdcLbaElm1XUOYY-BaUpV0emsKk.roa (hash: 6286o7feSPZ4Am5BIkaNy1LN+dGT5lurtPuA9/P2v8g=) 7: TIgEuISRFfEagrWWcbN-Cs393yA.roa (hash: 7ilSKujXAyVV5OEcIQUSwxvxp6ql8d1uJtDVSXr37lA=) 8: hVK-ntGy0qI1jrPE94chJ24l-Mk.roa (hash: 4eAc6qtC5QrLEsHTjP1kaeQiMkMye2mIhYL6csnwm2g=) 9: o32ZrkRTBmqfwSbKrzdg2AOqrYk.roa (hash: meW0nsMc2BVSCFZ5bfZSHqON37zIk9GYab3o/+F8v9M=) 10: olq1oGxpKPOfE0cy9vc1ydhl1J0.roa (hash: h0ioso/LgT2xf0OnmVFKpdhCZF+VaCFXoCZV0GyeIbs=) 11: wbvc6Gtirhc2oCh7F2OpYfcN6HA.roa (hash: Go+1T5O+u5de6UKfWfEs9E3wGYFRQ5vsAXwVCwdSZLo=) 12: wzt1SeYZkHeiHvU88pgBnNbejV8.roa (hash: stXj8fH31frocodDoAtC7Le+bAkxni4chXVfnyWonys=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D Validity Not Before: May 15 01:37:04 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=7BE2E21D1CEE6637B7532027D10736DC92958DD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:88:d8:f6:56:01:c7:a9:1a:57:d7:a4:c8:f1: d8:d4:ee:ab:ce:4d:48:cb:e6:16:f1:7b:c2:8d:ac: 1d:2c:3c:53:f8:d4:12:ef:78:8f:f8:6f:a9:51:5e: f7:39:58:46:3d:5f:f5:c0:2d:69:f7:04:30:1a:86: d2:09:60:89:16:8c:15:6c:48:47:6a:96:18:70:02: e5:9d:07:17:ee:40:fe:1d:38:fb:b9:7c:a4:60:7c: 90:61:a8:b8:4c:af:b2:b8:9d:05:1d:11:51:a0:de: 9f:fa:d7:5a:1a:30:b5:01:a1:37:0e:cc:bf:21:76: 0f:e4:7e:18:02:4d:04:ec:f1:e6:a4:70:e4:ae:da: 92:56:bc:c8:2c:da:de:1d:cf:91:f3:06:9d:03:dc: a6:7e:6e:da:c2:7c:90:a8:51:ac:a4:64:83:24:ee: 5f:57:bf:c7:87:eb:75:8c:d1:92:39:f1:0a:0a:f4: 6d:e1:82:e4:83:06:fb:a1:6c:43:e7:cf:46:10:f0: 02:96:dc:99:14:3e:f5:23:43:92:5f:46:80:ac:19: 6e:88:1f:61:ea:c6:68:c4:af:1f:e7:98:b4:49:10: 93:7d:19:fe:4a:f3:f4:16:51:a1:31:f9:55:3f:e4: c7:ad:04:09:8b:02:c5:c4:39:54:21:af:10:15:90: 15:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E2:E2:1D:1C:EE:66:37:B7:53:20:27:D1:07:36:DC:92:95:8D:D2 X509v3 Authority Key Identifier: keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:ae:55:27:8b:08:f8:fd:21:43:d1:38:c6:dd:b8:8e:59:74: e2:8b:73:b5:fc:f8:dc:48:4e:38:18:9e:51:be:1f:75:46:65: c3:50:30:24:33:15:c9:38:ec:8f:5f:ec:51:6b:a3:96:e7:60: 1e:27:21:24:fe:e7:b9:9e:8a:9d:d3:d4:36:9d:43:29:4a:c2: 9f:b7:55:59:ba:bc:9a:26:95:19:1a:e2:17:d3:ab:3d:14:58: d2:89:00:f2:fe:79:1a:7b:ee:02:1e:0d:c2:8a:87:da:83:3d: 36:ad:93:de:2e:1d:08:71:c7:1b:24:ac:70:a5:cb:7c:2c:7d: 66:3f:c2:e9:bb:b0:4b:60:f5:7a:8a:2d:d6:69:2a:99:db:c1: b9:92:92:ee:20:89:16:8c:9f:09:cd:c0:94:9c:8c:09:17:29: b4:67:c7:87:f8:16:82:ad:3a:85:f9:ee:af:7a:29:91:1c:ba: 0c:b4:e8:87:7e:a1:3e:b1:a1:7d:84:0e:c9:a8:e1:b3:ed:49: 5a:87:9b:10:02:ab:29:17:b9:d6:03:b8:5d:64:97:29:a5:56: 77:4e:c7:1b:c0:50:f4:6f:b0:09:91:9e:a0:6d:dc:89:fc:44: c6:a5:67:aa:ce:21:f4:ec:bb:be:a3:2d:08:03:51:e4:6c:a3: 21:5f:ff:b6 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBGzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERkJD RDNGOEJDQTkxOTE1QzQ1MzNBMkMwQTY5QzNEMzVCMkU2ODhEMB4XDTI0MDUxNTAx MzcwNFoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoN0JFMkUyMUQxQ0VFNjYz N0I3NTMyMDI3RDEwNzM2REM5Mjk1OEREMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANiI2PZWAcepGlfXpMjx2NTuq85NSMvmFvF7wo2sHSw8U/jUEu94 j/hvqVFe9zlYRj1f9cAtafcEMBqG0glgiRaMFWxIR2qWGHAC5Z0HF+5A/h04+7l8 pGB8kGGouEyvsridBR0RUaDen/rXWhowtQGhNw7MvyF2D+R+GAJNBOzx5qRw5K7a kla8yCza3h3PkfMGnQPcpn5u2sJ8kKhRrKRkgyTuX1e/x4frdYzRkjnxCgr0beGC 5IMG+6FsQ+fPRhDwApbcmRQ+9SNDkl9GgKwZbogfYerGaMSvH+eYtEkQk30Z/krz 9BZRoTH5VT/kx60ECYsCxcQ5VCGvEBWQFTcCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBR74uIdHO5mN7dTICfRBzbckpWN0jAfBgNVHSMEGDAWgBTfvNP4vKkZFcRTOiwK acPTWy5ojTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxNzUvMzd6VC1MeXBHUlhFVXpvc0NtbkQwMXN1YUkwLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMzd6VC1MeXBHUlhFVXpvc0NtbkQw MXN1YUkwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTc1LzM3elQtTHlwR1JYRVV6b3NDbW5EMDFzdWFJMC5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCurlUniwj4/SFD0TjG3biOWXTii3O1/PjcSE44GJ5Rvh91RmXDUDAk MxXJOOyPX+xRa6OW52AeJyEk/ue5noqd09Q2nUMpSsKft1VZuryaJpUZGuIX06s9 FFjSiQDy/nkae+4CHg3Ciofagz02rZPeLh0IcccbJKxwpct8LH1mP8Lpu7BLYPV6 ii3WaSqZ28G5kpLuIIkWjJ8JzcCUnIwJFym0Z8eH+BaCrTqF+e6veimRHLoMtOiH fqE+saF9hA7JqOGz7Ulah5sQAqspF7nWA7hdZJcppVZ3TscbwFD0b7AJkZ6gbdyJ /ETGpWeqziH07Lu+oy0IA1HkbKMhX/+2 -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:21 2024 by rpki-client on console-ams.rpki-client.org