$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft File: yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft (raw, json) Hash identifier: da+X//coTEdT7kUy5X5LAbA8kZdkPJtB9586zKLDuDA= Subject key identifier: 0D:39:7B:1E:74:5D:6D:F4:6E:3B:8E:CD:FE:54:C9:3F:66:DD:53:EA Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D Certificate issuer: /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D Certificate serial: 58 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft Manifest number: CA Signing time: Thu 30 May 2024 01:37:50 +0000 Manifest this update: Thu 30 May 2024 01:37:50 +0000 Manifest next update: Sun 09 Jun 2024 01:37:50 +0000 Files and hashes: 1: 9yEbpXHcOIsD4xNpPdB4ge-L3-0.roa (hash: EanWUC5WMO0lQxfEUdNvT7htEI/GTov6jwjd+duAgH0=) 2: A3PvVGytY0o0sroaU8vQMiXFn5Q.roa (hash: 2XD+eVv07lZhiq/fR4qFylP/EVy7bVR5sSax/qoJ3aA=) 3: KLUGZLWC2PV_qT8uBQ4vTmDlpXU.roa (hash: QDc3vxfNapgq5F3JGOdJmUsftwnZDHLG3bRt4HSTqxE=) 4: PXlxVIGRHQVd6-FOlkVTgT7QdP8.roa (hash: yYs/2I2i+zoCLMVgRkcpqdTS/wPTogLuNttPrQI3DdA=) 5: VeBJUnZe1KsUZnPCXpJnZj3ttgg.roa (hash: rJk1ay8VbnTfnNxCZnYsmvmPGvUzs+1HRelDHMpgygA=) 6: aD2QkOlWwco93y-oa6fqVa9IE5s.roa (hash: 1145/jLUPe6zQ70WzVEUaM8FlAsG7KoWeX/y10cxyH4=) 7: jpwIICk2YNnNmcv6GlEXSm5u9q8.roa (hash: yUFwa1Oop4MTi42AImAF57m5PTiigqPDNnqDQ3buCvw=) 8: t4RXnVdfqEysN8WeqsFeHwbmiJk.roa (hash: Bp8IXnfAYdsTtMxLArCBnCeR9UaxvSV8wboCxXsU2X0=) 9: x1XLQmwUhF1664doKN818CnxxzI.roa (hash: 5fiTlS6qIJGHqFCTzRtYhKRbQz+yEF+PEpDv3a6NZYQ=) 10: yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl (hash: 9/oKxQJgdjSQG5QOXC9QfgFv2oLZ7alnhsx9L37i/o4=) 11: z9PFhPieDm8FNrA78eRBljywUEY.roa (hash: y4L6ZFR1HFObFihZ39XD1xjd7YQ4Eo9qlynPn05mXGw=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D Validity Not Before: May 15 01:33:57 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=0D397B1E745D6DF46E3B8ECDFE54C93F66DD53EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d1:5c:88:61:a5:35:ad:2d:b1:ad:46:dc:9e: ea:07:f0:d8:12:ab:1f:79:83:85:cd:88:dc:8e:a9: 1d:bd:2d:53:48:06:a9:f2:0a:07:2d:6a:a1:32:d7: 93:38:be:1a:eb:c9:46:19:9f:c9:53:4d:ae:be:8b: 14:7f:72:11:79:bc:7a:f7:ff:5c:50:e4:55:f2:77: 29:83:eb:7b:c7:73:91:15:9e:23:69:d7:b9:49:fa: b7:1b:8f:d8:e8:56:61:c1:09:b3:cc:8c:35:72:3c: 6b:fa:c3:40:60:9b:75:b6:62:66:60:f1:07:03:e3: 5b:ea:3b:bf:e5:fc:e3:0b:f9:a1:52:80:c8:8d:a4: e6:24:bb:77:15:fa:9e:1f:42:89:46:65:32:54:6c: 7f:08:1c:e7:fa:fc:0c:15:ae:52:c9:7e:a3:41:42: 40:af:9a:b8:f1:65:66:2f:1a:c3:d8:d0:0d:3e:04: f3:70:a9:55:e0:25:c3:9d:46:46:89:8f:43:21:d8: 1a:4c:74:de:fc:fd:82:fd:13:76:96:da:bf:fb:a1: fa:a9:40:46:f2:1d:be:4e:0d:cc:c1:3f:9d:09:63: 27:cd:6d:11:f8:de:e6:d8:48:1a:90:42:57:04:74: 35:fe:e1:a2:b7:a2:f4:fc:d1:0f:5d:65:f6:ce:16: 8f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:39:7B:1E:74:5D:6D:F4:6E:3B:8E:CD:FE:54:C9:3F:66:DD:53:EA X509v3 Authority Key Identifier: keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:fb:a7:09:b7:ff:b0:43:18:90:61:c9:ac:b6:8b:95:23:2e: 2f:c1:47:18:55:b0:f9:93:75:e7:0a:2d:74:ab:88:f0:6d:1c: 6f:e5:95:02:6a:63:ec:30:bb:f8:41:bc:59:a9:f3:49:aa:c0: 21:16:94:25:e3:35:6d:06:68:c1:b8:f7:83:ef:e0:c2:ef:51: 68:08:10:de:72:dd:62:5e:d3:20:2f:95:8f:ac:fe:6e:fe:19: 0f:1f:b5:e6:66:92:fc:13:88:8f:d7:29:94:9e:c7:11:09:83: 1d:1f:16:ea:aa:32:fd:16:a9:8c:4a:22:92:13:2d:97:af:cd: 74:7f:c5:a2:75:c1:07:d9:77:64:e4:4f:80:62:9b:71:04:af: e2:6d:20:7d:df:0f:67:c0:2d:28:41:6a:ee:5a:eb:9c:be:8d: 0e:b7:48:c8:80:da:55:30:0a:37:81:cd:5d:18:31:36:52:4a: e1:4f:f2:ea:81:ef:c6:17:5a:9d:00:fe:5a:01:8c:d3:c2:2f: 14:1a:33:24:94:af:15:0f:84:d2:b1:27:00:0c:b9:19:c9:6e: 55:aa:48:c8:62:db:c5:5d:5f:98:1b:da:77:ef:fd:76:14:cd: b8:50:ac:14:b7:da:ec:6a:56:df:6a:8e:73:4b:81:bb:9c:9f: 73:05:d8:4f -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDODE0 RDg1QkQ0ODM2MEE2NUQ5RDQxNDRFQzZEMjA3NTJDMUVEQzdEMB4XDTI0MDUxNTAx MzM1N1oXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoMEQzOTdCMUU3NDVENkRG NDZFM0I4RUNERkU1NEM5M0Y2NkRENTNFQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKvRXIhhpTWtLbGtRtye6gfw2BKrH3mDhc2I3I6pHb0tU0gGqfIK By1qoTLXkzi+GuvJRhmfyVNNrr6LFH9yEXm8evf/XFDkVfJ3KYPre8dzkRWeI2nX uUn6txuP2OhWYcEJs8yMNXI8a/rDQGCbdbZiZmDxBwPjW+o7v+X84wv5oVKAyI2k 5iS7dxX6nh9CiUZlMlRsfwgc5/r8DBWuUsl+o0FCQK+auPFlZi8aw9jQDT4E83Cp VeAlw51GRomPQyHYGkx03vz9gv0Tdpbav/uh+qlARvIdvk4NzME/nQljJ81tEfje 5thIGpBCVwR0Nf7horei9PzRD11l9s4Wj+0CAwEAAaOCAj0wggI5MB0GA1UdDgQW BBQNOXsedF1t9G47js3+VMk/Zt1T6jAfBgNVHSMEGDAWgBTIFNhb1INgpl2dQUTs bSB1LB7cfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTczL3lCVFlXOVNEWUtaZG5VRkU3RzBnZFN3ZTNIMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3lCVFlXOVNEWUtaZG5VRkU3RzBnZFN3 ZTNIMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81NzMveUJUWVc5U0RZS1pkblVGRTdHMGdkU3dlM0gwLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFb7pwm3/7BDGJBhyay2i5UjLi/BRxhVsPmTdecKLXSriPBtHG/llQJqY+ww u/hBvFmp80mqwCEWlCXjNW0GaMG494Pv4MLvUWgIEN5y3WJe0yAvlY+s/m7+GQ8f teZmkvwTiI/XKZSexxEJgx0fFuqqMv0WqYxKIpITLZevzXR/xaJ1wQfZd2TkT4Bi m3EEr+JtIH3fD2fALShBau5a65y+jQ63SMiA2lUwCjeBzV0YMTZSSuFP8uqB78YX Wp0A/loBjNPCLxQaMySUrxUPhNKxJwAMuRnJblWqSMhi28VdX5gb2nfv/XYUzbhQ rBS32uxqVt9qjnNLgbucn3MF2E8= -----END CERTIFICATE-----Generated at Thu May 30 03:08:55 2024 by rpki-client on console-fra.rpki-client.org