$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft File: zgXnGt3sD442G7VasQP1PThWxgo.mft (raw, json) Hash identifier: KgTEaUKNqTQ2gUTylXbkMMC8aMTzj0vPW2ObPieE1MA= Subject key identifier: BB:89:C0:2D:63:E5:1E:AD:61:74:D3:61:08:C1:A9:29:38:DB:16:31 Authority key identifier: CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A Certificate issuer: /CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A Certificate serial: 11 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft Manifest number: 84 Signing time: Fri 22 Nov 2024 14:56:24 +0000 Manifest this update: Fri 22 Nov 2024 14:56:25 +0000 Manifest next update: Sat 07 Dec 2024 14:56:25 +0000 Files and hashes: 1: -JTakOPT9VEt0TTodUcBJR76veM.roa (hash: xvqpfqAX7e4Q9cl0TP6JAmrposozlLWWWrTBU43O37g=) 2: G6d34D7QhN9pkK3mMGzW3DlSZEw.roa (hash: uLKqo2WAtCp9Sk9A6I6inoJkq3hWuErxSYrFQwyzFOQ=) 3: YXS-d4Gl9FnGeafylLnIvjunyAc.roa (hash: gHnbKm2/9FRzv/kSY6WV+Y7iyL3O21LfQNf3f2YNIuQ=) 4: cwAAmeI_JOmYlLTC2pDSfodTCl0.roa (hash: 7e54G7UYXzqhZJq16ZGxpiC8uZVg3i3uBnQTnc9NvEM=) 5: sqQ12tk3meNnwr0-z1q4HrAWI64.roa (hash: +G8r4xYe5ZpJ18zpz6voRxvZq3111RXXUjQVWNVf9D0=) 6: zgXnGt3sD442G7VasQP1PThWxgo.crl (hash: eRJt0PzEQNRV1BOn7b7hxvy0L83R0bEaSuBwqAHg9mc=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A Validity Not Before: Nov 15 01:37:22 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=BB89C02D63E51EAD6174D36108C1A92938DB1631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:58:8b:f6:1d:a0:50:6d:4a:b7:b8:f4:05:42: ab:f1:61:76:e7:81:24:bd:b0:b1:f8:33:b7:70:f5: b2:34:10:0f:c1:39:c1:42:01:16:cc:89:a7:ae:ae: b2:a0:6c:0e:71:6a:ec:20:2c:8d:e8:a0:f6:96:5d: 17:64:c5:e6:b0:03:03:cf:cb:4c:ca:3d:a8:c8:23: ba:83:5c:37:8a:39:6a:45:54:66:dc:c8:49:96:72: f0:7f:aa:18:26:18:16:eb:a7:c9:97:ab:e2:63:24: be:85:82:df:c6:d4:2e:83:53:2f:d7:86:d5:23:31: 76:8c:d7:04:8e:81:12:65:4d:3e:15:e5:4d:03:3f: 9c:0b:0c:c8:4a:9d:45:66:42:10:94:5a:f3:77:5a: 3c:a9:8e:f3:fa:59:a8:a4:81:6d:b5:55:23:87:28: dd:29:6b:1c:1e:25:ea:bb:61:eb:d7:0f:95:e4:81: e4:03:2c:f8:d1:70:2f:54:8b:e9:c3:6b:d8:30:b2: 8b:4d:02:e9:ca:e0:53:7f:31:43:12:f1:2c:9e:81: ba:80:3a:13:59:1f:e9:98:9a:b0:56:48:1a:af:70: 29:5f:3e:ae:91:73:98:40:c0:5a:8a:d7:3f:db:52: 00:44:96:fd:bd:d3:c1:6b:df:1c:11:e2:2f:57:68: 38:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:89:C0:2D:63:E5:1E:AD:61:74:D3:61:08:C1:A9:29:38:DB:16:31 X509v3 Authority Key Identifier: keyid:CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:8f:41:8a:e5:37:10:bd:7d:8d:e8:8f:b2:84:f4:61:df:a5: 4d:83:52:8d:a7:f3:3d:b2:3b:2a:d0:8b:03:d1:f0:5b:99:33: 1a:ef:1b:a9:d8:82:d9:ac:fd:00:41:c6:e7:58:9a:09:04:35: 3e:ca:f0:13:2b:37:95:9c:fd:b6:1f:6e:f5:c3:7b:98:d0:08: be:46:ab:18:fc:bd:ff:e7:4c:86:e7:c6:64:c1:4c:75:f4:4f: f0:a0:39:e0:cd:3e:82:3a:07:a6:d8:e1:c3:49:2b:37:89:56: 49:39:03:da:00:48:f0:b2:16:5f:b8:69:0e:cd:bc:55:3a:54: a2:7f:16:77:f7:2f:c1:bf:9d:c6:5d:1f:56:c9:ef:68:c6:a1: 45:47:0a:07:28:6f:4d:fd:89:09:00:5d:68:f2:76:62:ed:0a: f3:55:98:d0:aa:0b:16:32:70:7f:6b:24:52:38:6a:b9:ed:03: 4b:63:9e:8f:b6:b6:e5:2b:fe:d5:80:a2:ea:51:16:1d:d9:70: 85:30:13:bc:84:cb:81:5e:2b:d8:9b:4a:af:4b:3a:7d:f4:71: a3:61:64:c3:c9:a5:11:e3:96:6a:e0:0f:77:36:d2:47:36:2e: 9f:08:81:b7:54:53:ea:67:12:b4:3f:6d:bd:76:95:a0:9e:2d: 85:a2:95:d7 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIBETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRTA1 RTcxQURERUMwRjhFMzYxQkI1NUFCMTAzRjUzRDM4NTZDNjBBMB4XDTI0MTExNTAx MzcyMloXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoQkI4OUMwMkQ2M0U1MUVB RDYxNzREMzYxMDhDMUE5MjkzOERCMTYzMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKxYi/YdoFBtSre49AVCq/FhdueBJL2wsfgzt3D1sjQQD8E5wUIB FsyJp66usqBsDnFq7CAsjeig9pZdF2TF5rADA8/LTMo9qMgjuoNcN4o5akVUZtzI SZZy8H+qGCYYFuunyZer4mMkvoWC38bULoNTL9eG1SMxdozXBI6BEmVNPhXlTQM/ nAsMyEqdRWZCEJRa83daPKmO8/pZqKSBbbVVI4co3SlrHB4l6rth69cPleSB5AMs +NFwL1SL6cNr2DCyi00C6crgU38xQxLxLJ6BuoA6E1kf6ZiasFZIGq9wKV8+rpFz mEDAWorXP9tSAESW/b3TwWvfHBHiL1doOG0CAwEAAaOCAjswggI3MB0GA1UdDgQW BBS7icAtY+UerWF002EIwakpONsWMTAfBgNVHSMEGDAWgBTOBeca3ewPjjYbtVqx A/U9OFbGCjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzMvemdYbkd0M3NENDQyRzdWYXNRUDFQVGhXeGdvLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvemdYbkd0M3NENDQyRzdWYXNRUDFQVGhX eGdvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMzL3pnWG5HdDNzRDQ0Mkc3VmFzUVAxUFRoV3hnby5tZnQwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCfj0GK5TcQvX2N6I+yhPRh36VNg1KNp/M9sjsq0IsD0fBbmTMa7xup2ILZrP0A QcbnWJoJBDU+yvATKzeVnP22H271w3uY0Ai+RqsY/L3/50yG58ZkwUx19E/woDng zT6COgem2OHDSSs3iVZJOQPaAEjwshZfuGkOzbxVOlSifxZ39y/Bv53GXR9Wye9o xqFFRwoHKG9N/YkJAF1o8nZi7QrzVZjQqgsWMnB/ayRSOGq57QNLY56PtrblK/7V gKLqURYd2XCFMBO8hMuBXivYm0qvSzp99HGjYWTDyaUR45Zq4A93NtJHNi6fCIG3 VFPqZxK0P229dpWgni2FopXX -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:42 2024 by rpki-client on console-ams.rpki-client.org