$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.mft File: GTPePvlkUMoSDHel6oJkNN0UlUk.mft (raw, json) Hash identifier: fQPM+YM6H/fJcY33wbji6NAJ/tb8WsYskyqkzDjDdmk= Subject key identifier: FE:9B:FF:F3:75:8E:7A:F8:AE:E1:D7:61:DA:90:5D:04:F3:54:B2:59 Authority key identifier: 19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49 Certificate issuer: /CN=1933DE3EF96450CA120C77A5EA826434DD149549 Certificate serial: 45 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.mft Manifest number: 02F8 Signing time: Sun 16 Feb 2025 17:39:24 +0000 Manifest this update: Sun 16 Feb 2025 17:39:24 +0000 Manifest next update: Mon 03 Mar 2025 17:39:24 +0000 Files and hashes: 1: 6IFd0jowXubJRB3p2jcFfox_07s.roa (hash: Fl1km/KN+RaRmrUjm2mrJOSl4VgIP7pJoahS9D0ai0g=) 2: FmckM6DoBXobTN3OoWAJJOfkyWU.roa (hash: nUjeCuk8KZAoWx6Ezg2koczx4OuNtm3ulLO0PP/GBWY=) 3: GTPePvlkUMoSDHel6oJkNN0UlUk.crl (hash: jSIT2zBl1l0rOfKRiQvSZB+lvukkKELQr00weh5rEE0=) 4: fAcV3D9zZ9PPRvU-KFggdk11vlY.roa (hash: ks+hObg801++pSg/HvfkelEmU9gvXmMGQgzPhmxWbIQ=) 5: fzj2SAo08Y94Xi3rmJLD567jfAU.roa (hash: m9N5nM9U1Bh+1N4MWLySde7mookMkz/F+nW7D+AvY94=) 6: qgvt6_jIW4nWLTxZXMImM_clEpM.roa (hash: uILINXlx+qLd1IWn+jEXpzFGjfWXQWr7YFWsYhsVi7w=) 7: x4R9BN7zS6iOjQ-tGMMHornbkBI.roa (hash: wid4bFW3qa4KmdXMsIX+CnA/4qDgpalQwiwN6UVtwKM=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1933DE3EF96450CA120C77A5EA826434DD149549 Validity Not Before: Feb 15 01:31:03 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=FE9BFFF3758E7AF8AEE1D761DA905D04F354B259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:de:24:72:cc:67:52:6e:27:6b:ed:79:28:b8: f9:ce:f8:91:bb:35:ed:3e:4d:93:0a:47:c4:c9:f5: 40:ac:b1:99:b3:21:b7:1f:c5:bd:96:50:8d:87:17: 8a:3d:ae:5c:9d:5c:27:c8:78:9c:78:1a:48:df:05: e8:8b:60:f7:1c:71:7a:97:c1:1c:6e:eb:08:71:8a: 15:6f:b8:00:95:25:37:18:ed:00:24:2f:ef:c5:a1: 5b:aa:af:04:5f:6b:3b:3d:74:19:49:b5:28:20:ab: 01:6b:77:85:5d:13:8e:96:a4:a1:83:61:c8:eb:9b: 2c:24:6b:85:43:3a:aa:f6:1e:c9:23:9a:79:ec:3e: 51:bb:7f:3c:f3:bb:36:c5:b8:df:01:4f:66:e1:58: 3e:9a:3b:65:f8:42:a1:97:35:aa:7e:ca:4b:f5:78: 4a:e0:23:43:62:25:20:6e:0e:f0:09:fd:69:ff:54: 05:d6:d2:b4:69:05:6d:c7:08:5b:0e:70:29:a9:2b: ce:06:d8:ed:29:0a:57:fc:7d:2e:d1:99:20:63:41: af:17:52:69:16:a2:47:b1:7c:d1:4b:0d:b8:24:20: ba:4b:bb:6f:a5:cd:0b:d6:ab:01:89:59:2e:49:21: bd:01:64:f6:e6:be:e9:8f:59:29:44:03:62:8f:0b: 30:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:9B:FF:F3:75:8E:7A:F8:AE:E1:D7:61:DA:90:5D:04:F3:54:B2:59 X509v3 Authority Key Identifier: keyid:19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:ed:66:ad:89:9a:e5:c2:32:9b:72:78:2f:07:4b:0c:ee:ea: b0:8a:46:e7:01:54:ee:73:96:ff:4f:2f:20:74:ef:cc:31:02: 3d:f7:e7:e7:89:19:82:ca:96:ac:e5:2f:b9:a5:ee:67:5f:5c: 8b:ee:05:44:ad:5a:07:ba:1c:da:bc:d3:33:d1:bf:10:17:8c: 63:4f:22:28:68:fd:f0:78:12:48:0a:eb:42:20:52:12:54:b0: 3d:1c:01:e6:c7:b7:40:a5:91:22:ac:04:21:22:45:3c:bf:1c: ed:ae:2c:d4:28:b2:cd:11:f6:ba:bd:33:97:88:58:35:6f:ec: d9:0e:b1:32:da:3f:2c:0d:19:2a:ca:2f:92:33:8b:16:c1:68: d0:3c:c1:73:a1:f6:96:b1:a1:52:f1:9d:af:23:8a:2e:f2:43: fc:87:4a:8c:6c:00:1b:31:91:24:8f:31:28:ed:03:85:76:8c: 57:3c:80:29:99:d0:1b:12:0d:80:40:b1:e1:9a:72:b7:72:7f: fd:65:23:d6:d5:78:43:e7:0a:f8:85:21:8c:70:7f:64:3c:25: ff:8f:ce:46:0d:19:39:57:1c:af:bf:d0:f6:89:40:40:7f:08: 2e:f4:08:11:6e:ad:3a:44:35:0d:8c:0a:9d:2b:21:c6:ca:0b: 99:06:f3:2f -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxOTMz REUzRUY5NjQ1MENBMTIwQzc3QTVFQTgyNjQzNEREMTQ5NTQ5MB4XDTI1MDIxNTAx MzEwM1oXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoRkU5QkZGRjM3NThFN0FG OEFFRTFENzYxREE5MDVEMDRGMzU0QjI1OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKjeJHLMZ1JuJ2vteSi4+c74kbs17T5NkwpHxMn1QKyxmbMhtx/F vZZQjYcXij2uXJ1cJ8h4nHgaSN8F6Itg9xxxepfBHG7rCHGKFW+4AJUlNxjtACQv 78WhW6qvBF9rOz10GUm1KCCrAWt3hV0TjpakoYNhyOubLCRrhUM6qvYeySOaeew+ Ubt/PPO7NsW43wFPZuFYPpo7ZfhCoZc1qn7KS/V4SuAjQ2IlIG4O8An9af9UBdbS tGkFbccIWw5wKakrzgbY7SkKV/x9LtGZIGNBrxdSaRaiR7F80UsNuCQguku7b6XN C9arAYlZLkkhvQFk9ua+6Y9ZKUQDYo8LMOMCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBT+m//zdY56+K7h12HakF0E81SyWTAfBgNVHSMEGDAWgBQZM94++WRQyhIMd6Xq gmQ03RSVSTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODc3L0dUUGVQdmxrVU1vU0RIZWw2b0prTk4wVWxVay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0dUUGVQdmxrVU1vU0RIZWw2b0prTk4w VWxVay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84NzcvR1RQZVB2bGtVTW9TREhlbDZvSmtOTjBVbFVrLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEbtZq2JmuXCMptyeC8HSwzu6rCKRucBVO5zlv9PLyB078wxAj335+eJGYLK lqzlL7ml7mdfXIvuBUStWge6HNq80zPRvxAXjGNPIiho/fB4EkgK60IgUhJUsD0c AebHt0ClkSKsBCEiRTy/HO2uLNQoss0R9rq9M5eIWDVv7NkOsTLaPywNGSrKL5Iz ixbBaNA8wXOh9paxoVLxna8jii7yQ/yHSoxsABsxkSSPMSjtA4V2jFc8gCmZ0BsS DYBAseGacrdyf/1lI9bVeEPnCviFIYxwf2Q8Jf+PzkYNGTlXHK+/0PaJQEB/CC70 CBFurTpENQ2MCp0rIcbKC5kG8y8= -----END CERTIFICATE-----Generated at Sun Feb 16 22:33:26 2025 by rpki-client