$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.mft File: 4sshHyk-VOhOPL2dIrCIRnW7HGM.mft (raw, json) Hash identifier: BH3vADcr63Ays9CTF4eOx0CuIZA244PgxcOvA/5Xcng= Subject key identifier: 7C:62:18:37:61:D8:73:BF:23:C8:28:A2:16:BC:E2:11:3D:D8:E6:73 Authority key identifier: E2:CB:21:1F:29:3E:54:E8:4E:3C:BD:9D:22:B0:88:46:75:BB:1C:63 Certificate issuer: /CN=E2CB211F293E54E84E3CBD9D22B0884675BB1C63 Certificate serial: 1C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4sshHyk-VOhOPL2dIrCIRnW7HGM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.mft Manifest number: 02B4 Signing time: Sun 16 Feb 2025 17:45:52 +0000 Manifest this update: Sun 16 Feb 2025 17:45:52 +0000 Manifest next update: Mon 03 Mar 2025 17:45:52 +0000 Files and hashes: 1: 4sshHyk-VOhOPL2dIrCIRnW7HGM.crl (hash: NmIF+SgTXCS0ENas5gvXE98Z3578zmrVEGcQdzXTsEI=) 2: uO3PkguR4v349WZNgEF0GxU-Pmw.roa (hash: tZGwntwJHmyPSWvCQdp+02hsPJsWlys8MVuXgCR/jGg=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4sshHyk-VOhOPL2dIrCIRnW7HGM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2CB211F293E54E84E3CBD9D22B0884675BB1C63 Validity Not Before: Feb 15 01:32:54 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=7C62183761D873BF23C828A216BCE2113DD8E673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:83:2f:41:c9:a5:54:99:3e:2f:ac:f4:fe:ed: 59:a2:65:4e:98:e3:0d:f9:28:8a:8c:3c:9a:9b:4c: 49:65:5d:b6:5d:02:ed:51:3f:78:e7:e6:8f:bf:a6: c0:bc:7d:44:ff:33:27:8b:a6:41:47:06:49:1a:28: d9:6c:35:a7:34:3e:97:37:95:90:14:e5:fd:88:6f: be:83:2d:ba:8d:94:b6:50:a6:10:c2:a0:d3:23:68: 5b:65:26:ce:6d:9b:13:c7:d0:d1:9e:15:1f:14:25: 3b:20:58:41:f4:de:30:62:fc:42:6c:fa:1e:4c:ca: ac:8b:2d:15:fd:93:b9:73:0d:0e:4e:31:01:cc:d8: 14:79:c7:96:2d:af:34:65:4e:3b:bf:aa:20:62:77: b7:5d:b4:56:cc:43:f5:d8:a4:2a:ec:7f:a4:c6:78: 58:08:5d:64:50:15:8c:6b:54:b5:6a:39:5b:96:2e: 2d:91:8c:cd:94:cf:a2:9b:dd:1c:ef:11:ce:02:c6: 56:9c:40:59:3b:49:a9:b9:4d:50:d8:43:63:94:98: 57:88:6b:b1:2d:5b:93:1c:4d:c8:15:78:ac:f6:57: 8f:cb:29:00:7e:a5:b4:14:e1:55:9b:e2:f2:9c:61: ac:78:c8:0d:c8:17:da:9a:0a:49:3d:da:5a:34:36: 6d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:62:18:37:61:D8:73:BF:23:C8:28:A2:16:BC:E2:11:3D:D8:E6:73 X509v3 Authority Key Identifier: keyid:E2:CB:21:1F:29:3E:54:E8:4E:3C:BD:9D:22:B0:88:46:75:BB:1C:63 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4sshHyk-VOhOPL2dIrCIRnW7HGM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:5a:ee:bb:e9:c9:d2:3c:07:a3:d7:26:30:fd:e4:55:02:92: a3:26:0c:62:37:33:4f:00:34:b3:4d:30:53:4f:bf:0b:7a:7c: 2b:19:5e:b9:a6:31:6b:b9:fd:c4:c0:5b:e6:02:94:f8:ad:9f: 2f:17:01:be:e0:b5:21:d1:94:0d:fe:11:39:72:75:24:36:6e: 08:c3:13:8c:1d:26:e0:7e:ac:24:f4:e6:7c:2f:f2:9c:e1:8e: 29:57:f7:31:8c:6c:82:6b:4c:99:31:33:83:0f:18:ee:55:d7: 56:0b:1a:f9:1e:0b:b9:2e:ef:19:38:a5:ce:67:68:7b:6e:dc: ca:05:18:b9:06:f9:7a:94:2e:b0:80:da:71:3b:6e:ed:84:0b: d8:2e:cd:1c:1a:d2:9c:46:a4:60:23:8c:3f:ee:1e:97:31:eb: 52:03:6a:dc:d1:00:2e:b2:8a:98:51:cd:3b:46:1d:b5:85:14: 05:03:b3:0c:92:02:6c:f0:dc:e8:ee:bc:6c:e8:63:41:11:c1: 20:63:7e:5b:71:eb:61:ca:43:8e:bc:93:c5:0b:8b:ed:2a:68: 30:fc:65:12:4b:cf:1a:75:4c:e1:05:25:36:95:f0:58:32:ae: 74:40:58:05:79:01:dc:e9:33:c3:22:1b:eb:2f:90:f5:96:82: 71:53:93:9d -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMkNC MjExRjI5M0U1NEU4NEUzQ0JEOUQyMkIwODg0Njc1QkIxQzYzMB4XDTI1MDIxNTAx MzI1NFoXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoN0M2MjE4Mzc2MUQ4NzNC RjIzQzgyOEEyMTZCQ0UyMTEzREQ4RTY3MzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOaDL0HJpVSZPi+s9P7tWaJlTpjjDfkoiow8mptMSWVdtl0C7VE/ eOfmj7+mwLx9RP8zJ4umQUcGSRoo2Ww1pzQ+lzeVkBTl/YhvvoMtuo2UtlCmEMKg 0yNoW2Umzm2bE8fQ0Z4VHxQlOyBYQfTeMGL8Qmz6HkzKrIstFf2TuXMNDk4xAczY FHnHli2vNGVOO7+qIGJ3t120VsxD9dikKux/pMZ4WAhdZFAVjGtUtWo5W5YuLZGM zZTPopvdHO8RzgLGVpxAWTtJqblNUNhDY5SYV4hrsS1bkxxNyBV4rPZXj8spAH6l tBThVZvi8pxhrHjIDcgX2poKST3aWjQ2bT8CAwEAAaOCAkEwggI9MB0GA1UdDgQW BBR8Yhg3YdhzvyPIKKIWvOIRPdjmczAfBgNVHSMEGDAWgBTiyyEfKT5U6E48vZ0i sIhGdbscYzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MDYvNHNzaEh5ay1WT2hPUEwyZElyQ0lSblc3SEdNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNHNzaEh5ay1WT2hPUEwyZElyQ0lS blc3SEdNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDA2LzRzc2hIeWstVk9oT1BMMmRJckNJUm5XN0hHTS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgWu676cnSPAej1yYw/eRVApKjJgxiNzNPADSzTTBTT78LenwrGV65 pjFruf3EwFvmApT4rZ8vFwG+4LUh0ZQN/hE5cnUkNm4IwxOMHSbgfqwk9OZ8L/Kc 4Y4pV/cxjGyCa0yZMTODDxjuVddWCxr5Hgu5Lu8ZOKXOZ2h7btzKBRi5Bvl6lC6w gNpxO27thAvYLs0cGtKcRqRgI4w/7h6XMetSA2rc0QAusoqYUc07Rh21hRQFA7MM kgJs8Nzo7rxs6GNBEcEgY35bcethykOOvJPFC4vtKmgw/GUSS88adUzhBSU2lfBY Mq50QFgFeQHc6TPDIhvrL5D1loJxU5Od -----END CERTIFICATE-----Generated at Sun Feb 16 22:16:04 2025 by rpki-client