$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft File: FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft (raw, json) Hash identifier: DY2R4HOVpGJlAiiQLaZB+EIzwZlHzTDC+4/J/2oY9Fg= Subject key identifier: B9:43:24:40:9B:59:15:BC:C5:9B:9F:13:CE:4C:B4:27:46:E4:1E:2A Authority key identifier: 14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85 Certificate issuer: /CN=1426C384E2A49283FA747D079E83DD32B65D7E85 Certificate serial: 41 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft Manifest number: 0475 Signing time: Mon 25 Nov 2024 21:56:48 +0000 Manifest this update: Mon 25 Nov 2024 21:56:48 +0000 Manifest next update: Tue 10 Dec 2024 21:56:48 +0000 Files and hashes: 1: ChIYvB20E4LjNyxz6zjydPwXnx8.roa (hash: d1JhskVfDcsaD2idFFD1oooRMsV2wlbdD/2A8WmNC/g=) 2: FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl (hash: 91EZeq1ODgr15lKA5jLNLqODYPzBe9L4qK3nDV0BRdQ=) 3: qrYqTNW-RWwTHCFebrqhZuB9txU.roa (hash: BalFKsHzX5MIl2xGNO3UGRQrmUvNO6tKJS1dn9Xgjcw=) 4: sAfGbWMwjd9rukP-3qXb8y5uxUY.roa (hash: jetwxezV93oZdnlmmz1SGbw/AeipdfXJXckG1qhmxAo=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 00:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1426C384E2A49283FA747D079E83DD32B65D7E85 Validity Not Before: Nov 15 01:34:14 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=B94324409B5915BCC59B9F13CE4CB42746E41E2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:52:97:0c:2c:8e:9a:c6:90:9d:04:a0:79:eb: f2:64:c2:46:b4:3e:99:44:a2:f6:7a:81:4b:a6:df: af:b7:f2:e9:e6:0e:64:32:00:12:a8:6c:33:80:20: e4:c9:3d:a5:8c:de:7d:45:29:63:45:04:95:96:1c: f0:64:7c:7c:82:b1:40:a3:63:19:b2:42:58:03:03: b3:ac:af:c7:33:62:08:fe:d6:04:6e:8a:29:09:be: 5c:e9:da:45:a7:ec:aa:05:4e:07:14:91:f7:b1:0c: ee:54:a5:71:7e:00:28:d8:a5:d2:65:af:55:82:49: 0b:43:f1:45:68:17:64:e4:7d:38:8a:86:d9:4a:43: a1:47:09:78:4d:a3:36:ae:52:a2:3c:c3:bf:f5:ce: aa:46:68:b6:f6:2e:46:12:ba:3d:7f:0b:8c:1e:df: 82:a2:1d:88:d3:39:2d:6d:c2:a5:51:9b:76:0c:65: 87:0a:3b:7d:5e:f7:6e:f2:2a:39:94:bc:6b:68:a1: 50:6a:00:03:1d:af:17:b1:92:6e:0c:58:2d:d2:71: 0f:c3:35:3e:18:e7:a4:56:3d:f7:dc:9c:1a:e1:f2: 2c:cb:39:b0:14:ea:6a:6a:31:fc:64:b2:d9:bf:a6: 20:d8:59:42:f0:ea:e7:f6:f6:d8:13:f2:1b:9f:18: 1e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:43:24:40:9B:59:15:BC:C5:9B:9F:13:CE:4C:B4:27:46:E4:1E:2A X509v3 Authority Key Identifier: keyid:14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:17:50:73:8a:77:37:70:bd:bc:b5:39:e8:ab:30:dd:08:53: 99:9d:68:eb:98:69:0d:cd:00:c1:3e:aa:2a:a7:e6:c8:31:c0: ee:c9:b5:e5:51:3e:46:e7:cd:61:21:93:e3:ca:70:f8:29:3c: 98:19:3b:6f:32:8e:59:7b:d5:b7:c8:d4:2e:75:fe:57:d2:73: c6:e2:16:dd:73:a2:49:70:68:18:14:0d:ba:8d:33:48:f9:56: 10:a9:59:23:d1:2b:1f:e0:15:c3:04:bf:a3:89:4e:b0:02:6f: fa:c4:66:29:80:8a:03:54:1a:2a:b2:82:37:05:e5:99:17:06: 81:11:8f:96:49:32:20:10:97:8b:ab:4d:f0:13:fe:f8:dd:15: 7f:bd:1b:b7:96:4b:ac:85:a5:cf:da:ac:db:03:a0:0a:3f:53: c4:ac:07:e6:28:a2:88:26:35:39:bd:db:ab:58:a0:64:9e:c4: cd:bb:5a:2a:b8:65:fe:83:41:d6:82:c7:c4:c5:c0:c8:4e:00: 98:f5:46:f4:44:04:ff:97:70:62:53:89:59:88:70:c0:41:c7: 9c:57:db:09:73:f5:76:c0:42:75:0f:38:4f:38:f3:b9:90:72: cd:ad:43:3f:f8:f8:e5:bc:85:15:3f:67:05:cc:3f:3a:de:69: c6:90:ea:b3 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNDI2 QzM4NEUyQTQ5MjgzRkE3NDdEMDc5RTgzREQzMkI2NUQ3RTg1MB4XDTI0MTExNTAx MzQxNFoXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoQjk0MzI0NDA5QjU5MTVC Q0M1OUI5RjEzQ0U0Q0I0Mjc0NkU0MUUyQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM9SlwwsjprGkJ0EoHnr8mTCRrQ+mUSi9nqBS6bfr7fy6eYOZDIA EqhsM4Ag5Mk9pYzefUUpY0UElZYc8GR8fIKxQKNjGbJCWAMDs6yvxzNiCP7WBG6K KQm+XOnaRafsqgVOBxSR97EM7lSlcX4AKNil0mWvVYJJC0PxRWgXZOR9OIqG2UpD oUcJeE2jNq5SojzDv/XOqkZotvYuRhK6PX8LjB7fgqIdiNM5LW3CpVGbdgxlhwo7 fV73bvIqOZS8a2ihUGoAAx2vF7GSbgxYLdJxD8M1PhjnpFY999ycGuHyLMs5sBTq amox/GSy2b+mINhZQvDq5/b22BPyG58YHpkCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBS5QyRAm1kVvMWbnxPOTLQnRuQeKjAfBgNVHSMEGDAWgBQUJsOE4qSSg/p0fQee g90ytl1+hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTI1L0ZDYkRoT0tra29QNmRIMEhub1BkTXJaZGZvVS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZDYkRoT0tra29QNmRIMEhub1BkTXJa ZGZvVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MjUvRkNiRGhPS2trb1A2ZEgwSG5vUGRNclpkZm9VLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGcXUHOKdzdwvby1OeirMN0IU5mdaOuYaQ3NAME+qiqn5sgxwO7JteVRPkbn zWEhk+PKcPgpPJgZO28yjll71bfI1C51/lfSc8biFt1zoklwaBgUDbqNM0j5VhCp WSPRKx/gFcMEv6OJTrACb/rEZimAigNUGiqygjcF5ZkXBoERj5ZJMiAQl4urTfAT /vjdFX+9G7eWS6yFpc/arNsDoAo/U8SsB+YooogmNTm926tYoGSexM27Wiq4Zf6D QdaCx8TFwMhOAJj1RvREBP+XcGJTiVmIcMBBx5xX2wlz9XbAQnUPOE8487mQcs2t Qz/4+OW8hRU/ZwXMPzreacaQ6rM= -----END CERTIFICATE-----Generated at Tue Nov 26 02:27:26 2024 by rpki-client on console-ams.rpki-client.org