$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft File: zgXnGt3sD442G7VasQP1PThWxgo.mft (raw, json) Hash identifier: +1WHNzJsVdhICe4cPFTkFqaU44Xc559dY3UmDtTL01c= Subject key identifier: BB:89:C0:2D:63:E5:1E:AD:61:74:D3:61:08:C1:A9:29:38:DB:16:31 Authority key identifier: CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A Certificate issuer: /CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A Certificate serial: 08 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft Manifest number: 0E Signing time: Thu 30 May 2024 01:34:23 +0000 Manifest this update: Thu 30 May 2024 01:34:23 +0000 Manifest next update: Sun 09 Jun 2024 01:34:23 +0000 Files and hashes: 1: -JTakOPT9VEt0TTodUcBJR76veM.roa (hash: xvqpfqAX7e4Q9cl0TP6JAmrposozlLWWWrTBU43O37g=) 2: G6d34D7QhN9pkK3mMGzW3DlSZEw.roa (hash: uLKqo2WAtCp9Sk9A6I6inoJkq3hWuErxSYrFQwyzFOQ=) 3: YXS-d4Gl9FnGeafylLnIvjunyAc.roa (hash: gHnbKm2/9FRzv/kSY6WV+Y7iyL3O21LfQNf3f2YNIuQ=) 4: cwAAmeI_JOmYlLTC2pDSfodTCl0.roa (hash: 7e54G7UYXzqhZJq16ZGxpiC8uZVg3i3uBnQTnc9NvEM=) 5: sqQ12tk3meNnwr0-z1q4HrAWI64.roa (hash: +G8r4xYe5ZpJ18zpz6voRxvZq3111RXXUjQVWNVf9D0=) 6: zgXnGt3sD442G7VasQP1PThWxgo.crl (hash: NRj8BfMQBDiRvOFwbc3UQGvsrrL7pXTnlp+1YWtl4Qk=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A Validity Not Before: May 15 01:30:18 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=BB89C02D63E51EAD6174D36108C1A92938DB1631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:58:8b:f6:1d:a0:50:6d:4a:b7:b8:f4:05:42: ab:f1:61:76:e7:81:24:bd:b0:b1:f8:33:b7:70:f5: b2:34:10:0f:c1:39:c1:42:01:16:cc:89:a7:ae:ae: b2:a0:6c:0e:71:6a:ec:20:2c:8d:e8:a0:f6:96:5d: 17:64:c5:e6:b0:03:03:cf:cb:4c:ca:3d:a8:c8:23: ba:83:5c:37:8a:39:6a:45:54:66:dc:c8:49:96:72: f0:7f:aa:18:26:18:16:eb:a7:c9:97:ab:e2:63:24: be:85:82:df:c6:d4:2e:83:53:2f:d7:86:d5:23:31: 76:8c:d7:04:8e:81:12:65:4d:3e:15:e5:4d:03:3f: 9c:0b:0c:c8:4a:9d:45:66:42:10:94:5a:f3:77:5a: 3c:a9:8e:f3:fa:59:a8:a4:81:6d:b5:55:23:87:28: dd:29:6b:1c:1e:25:ea:bb:61:eb:d7:0f:95:e4:81: e4:03:2c:f8:d1:70:2f:54:8b:e9:c3:6b:d8:30:b2: 8b:4d:02:e9:ca:e0:53:7f:31:43:12:f1:2c:9e:81: ba:80:3a:13:59:1f:e9:98:9a:b0:56:48:1a:af:70: 29:5f:3e:ae:91:73:98:40:c0:5a:8a:d7:3f:db:52: 00:44:96:fd:bd:d3:c1:6b:df:1c:11:e2:2f:57:68: 38:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:89:C0:2D:63:E5:1E:AD:61:74:D3:61:08:C1:A9:29:38:DB:16:31 X509v3 Authority Key Identifier: keyid:CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:47:d3:ff:85:e5:17:84:0f:53:86:38:7e:a5:77:1a:0f:8a: 7d:05:42:bb:35:cb:d3:41:d9:82:38:30:7e:e5:fc:74:5c:f4: f4:b9:5f:64:ef:9b:cb:50:7a:6a:9c:b4:66:dd:89:14:73:50: 28:d8:10:2e:f5:0b:1d:75:b4:e8:d8:2c:0a:41:32:46:b5:ef: 9d:a8:e2:f3:54:36:15:47:97:8b:db:0c:4a:bc:78:95:b7:96: 6f:fe:11:9a:7c:10:60:e4:52:7d:e9:06:61:7a:b7:63:1f:24: 1a:1d:51:fb:85:a9:a8:52:fe:ee:62:bb:2a:95:33:c4:2b:67: 44:16:9a:b5:9a:99:d0:5c:e3:db:a8:12:c2:6a:b8:c0:04:f0: 6b:78:1a:2e:49:a1:93:ad:f1:bc:94:e4:a9:72:02:7d:78:14: 5c:ca:cb:f1:d0:96:a8:df:20:1e:d1:c2:41:4d:6e:91:d5:b1: ca:28:f9:f0:d8:22:52:ff:b6:67:b7:7e:91:3b:b6:35:d1:39: 57:6b:a9:80:6d:88:2e:6d:08:cd:ae:d8:d4:c0:6c:58:09:44: f5:44:3e:0a:f7:f8:0e:aa:f8:60:a5:0a:8d:c1:73:32:41:f7: f7:46:85:3b:58:12:28:31:1b:26:a8:af:eb:91:9c:1b:4a:92: 3a:d2:b6:74 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRTA1 RTcxQURERUMwRjhFMzYxQkI1NUFCMTAzRjUzRDM4NTZDNjBBMB4XDTI0MDUxNTAx MzAxOFoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoQkI4OUMwMkQ2M0U1MUVB RDYxNzREMzYxMDhDMUE5MjkzOERCMTYzMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKxYi/YdoFBtSre49AVCq/FhdueBJL2wsfgzt3D1sjQQD8E5wUIB FsyJp66usqBsDnFq7CAsjeig9pZdF2TF5rADA8/LTMo9qMgjuoNcN4o5akVUZtzI SZZy8H+qGCYYFuunyZer4mMkvoWC38bULoNTL9eG1SMxdozXBI6BEmVNPhXlTQM/ nAsMyEqdRWZCEJRa83daPKmO8/pZqKSBbbVVI4co3SlrHB4l6rth69cPleSB5AMs +NFwL1SL6cNr2DCyi00C6crgU38xQxLxLJ6BuoA6E1kf6ZiasFZIGq9wKV8+rpFz mEDAWorXP9tSAESW/b3TwWvfHBHiL1doOG0CAwEAAaOCAjswggI3MB0GA1UdDgQW BBS7icAtY+UerWF002EIwakpONsWMTAfBgNVHSMEGDAWgBTOBeca3ewPjjYbtVqx A/U9OFbGCjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzMvemdYbkd0M3NENDQyRzdWYXNRUDFQVGhXeGdvLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvemdYbkd0M3NENDQyRzdWYXNRUDFQVGhX eGdvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMzL3pnWG5HdDNzRDQ0Mkc3VmFzUVAxUFRoV3hnby5tZnQwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA+R9P/heUXhA9Thjh+pXcaD4p9BUK7NcvTQdmCODB+5fx0XPT0uV9k75vLUHpq nLRm3YkUc1Ao2BAu9QsddbTo2CwKQTJGte+dqOLzVDYVR5eL2wxKvHiVt5Zv/hGa fBBg5FJ96QZherdjHyQaHVH7hamoUv7uYrsqlTPEK2dEFpq1mpnQXOPbqBLCarjA BPBreBouSaGTrfG8lOSpcgJ9eBRcysvx0Jao3yAe0cJBTW6R1bHKKPnw2CJS/7Zn t36RO7Y10TlXa6mAbYgubQjNrtjUwGxYCUT1RD4K9/gOqvhgpQqNwXMyQff3RoU7 WBIoMRsmqK/rkZwbSpI60rZ0 -----END CERTIFICATE-----Generated at Thu May 30 03:08:53 2024 by rpki-client on console-fra.rpki-client.org