$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft File: Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft (raw, json) Hash identifier: zuRQKQE+uVNilLnwG+JHP5FKgjcFlnrK6vviHEsm8Z4= Subject key identifier: C7:0D:F9:55:06:1E:0D:64:7C:29:B9:08:FE:0C:7C:C6:29:6B:D0:21 Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB Certificate issuer: /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB Certificate serial: 69 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft Manifest number: 0686 Signing time: Mon 25 Nov 2024 22:46:53 +0000 Manifest this update: Mon 25 Nov 2024 22:46:53 +0000 Manifest next update: Tue 10 Dec 2024 22:46:53 +0000 Files and hashes: 1: 1l3naGgIBQD7FaFoAoKG6_oZ0rA.roa (hash: +ra9TG5rIqBl24Iw12oXmv3a+tNvejf0N5isVU3yKf0=) 2: Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl (hash: fXi50rueQrisz1w1ATyCMVufsxOrkOgKxF8k8nR8Sg8=) 3: ZaDFr3eClrZHxoDvKv9aAfVn0aw.roa (hash: 2ne/9Ytk6Oq+0hDN7BTqazwJzYROBouNw7t6IPJBXpk=) 4: aNa5-_eNomqDN_tfvKuw6wRNvLA.roa (hash: FKXn40J9BgZNgkD2JOwwaYcNuYqwFftOIPo0sR6LFVk=) 5: l_2LV0J2P_paGOpl7rB3OG9l8aA.roa (hash: CN88z8mrcgKOgtSR4jGyl/iqc+OmzZL+Sk1Hh3IYbTc=) 6: nrw__AlLyXfIa3l4DlNA8rTjlCs.roa (hash: LpwExMyC6KRA7bgA15mFfBTVOWPPBNEKRQXLlZhAZSA=) 7: w7TbtB20SCUVilCz-5q5dBs8aME.roa (hash: 1HZ5t8PhFHqBxthkci6h3aT6HGmqM+q9ITF2U80msKU=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB Validity Not Before: Nov 15 01:34:49 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=C70DF955061E0D647C29B908FE0C7CC6296BD021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f7:90:79:e7:a5:b8:25:28:52:52:50:a9:7a: 9b:45:31:e9:23:d6:f8:ee:45:d6:4f:89:fa:6e:39: 1c:8e:f9:9f:ea:ae:6e:cc:00:f0:b7:4d:6f:1f:e0: d2:88:86:04:79:9b:19:c0:d0:f0:24:d2:bd:f6:0b: 58:9b:04:ab:86:6c:80:55:fe:11:74:be:80:b7:5d: a7:b7:5a:44:d2:46:63:7f:96:4f:b9:27:f9:74:d9: 0f:3f:8b:41:89:ed:d5:60:99:a5:5f:e2:4e:0c:12: 3e:15:f4:4e:a8:f4:60:f7:1d:de:6b:f8:ca:55:cb: 69:ab:31:a2:a3:d7:40:5f:3b:90:b8:19:e0:83:4f: 7f:a5:eb:fb:73:c5:14:f2:b0:f6:3c:af:8a:15:23: b9:21:96:4c:5a:f5:ef:a8:bf:04:1d:0e:3d:7d:58: 82:76:87:ae:59:51:7a:53:c2:b6:ea:c1:ea:d5:ad: b5:9a:09:d5:0b:92:75:77:47:b8:50:d2:3f:7c:65: f6:46:76:7d:8c:b6:8f:95:e1:f2:df:fb:11:ba:eb: 76:1d:a6:c9:02:8f:eb:94:1e:86:92:36:c0:7a:30: a1:cd:e5:00:8a:7e:48:2d:5f:b0:4a:ec:1d:17:06: d6:f5:d8:9c:b4:6e:86:63:75:8c:ac:ad:c7:a0:40: c8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0D:F9:55:06:1E:0D:64:7C:29:B9:08:FE:0C:7C:C6:29:6B:D0:21 X509v3 Authority Key Identifier: keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:a0:ce:64:f1:1d:f4:38:30:ad:4f:2a:82:c9:8f:df:cf:b1: 0a:16:1e:e2:3c:e2:4b:af:44:25:62:f2:5e:d4:6b:ba:c6:70: f9:cc:86:22:a6:9e:5a:72:14:87:7c:29:9d:a8:91:9b:d2:28: 52:ff:c8:a4:e6:69:b0:dd:3f:d1:78:87:c1:55:c8:80:78:f3: a3:fe:e9:2f:95:82:94:f9:60:81:6f:a8:86:96:83:a2:c6:03: a3:92:76:da:b8:08:8e:14:ce:44:d7:b1:a3:18:7b:de:58:8e: 58:f7:a0:be:cc:fe:f0:55:33:49:b3:3f:c6:75:ad:64:57:7d: 7b:05:c8:70:be:26:22:62:58:b2:4a:fe:e4:e4:3e:74:06:68: 85:9b:f7:fa:75:4c:3d:27:4f:0c:0b:d8:29:0e:71:30:6a:67: 03:57:f7:66:a1:79:fd:95:38:91:55:ef:b7:b5:47:5a:87:b5: 30:5d:2d:48:1a:9f:f9:88:eb:61:c0:54:34:af:86:68:f4:ff: 8a:3a:ca:7c:5e:e5:d0:a6:7c:ca:49:1f:9a:23:35:6a:f7:d0: 1f:41:28:e0:fe:53:e3:2b:65:dd:a0:7b:f1:25:f0:7c:d2:35: 96:8b:71:b4:8b:e8:56:b1:15:e2:87:8b:57:54:49:37:25:53: 52:ec:8c:9b -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyQTRD RkU5MDlDQTU4MzA3RTdDQTg3MzVBRjI0NUQ3MThEOTlGN0ZCMB4XDTI0MTExNTAx MzQ0OVoXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoQzcwREY5NTUwNjFFMEQ2 NDdDMjlCOTA4RkUwQzdDQzYyOTZCRDAyMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN73kHnnpbglKFJSUKl6m0Ux6SPW+O5F1k+J+m45HI75n+qubswA 8LdNbx/g0oiGBHmbGcDQ8CTSvfYLWJsEq4ZsgFX+EXS+gLddp7daRNJGY3+WT7kn +XTZDz+LQYnt1WCZpV/iTgwSPhX0Tqj0YPcd3mv4ylXLaasxoqPXQF87kLgZ4INP f6Xr+3PFFPKw9jyvihUjuSGWTFr176i/BB0OPX1YgnaHrllRelPCturB6tWttZoJ 1QuSdXdHuFDSP3xl9kZ2fYy2j5Xh8t/7Ebrrdh2myQKP65QehpI2wHowoc3lAIp+ SC1fsErsHRcG1vXYnLRuhmN1jKytx6BAyBsCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBTHDflVBh4NZHwpuQj+DHzGKWvQITAfBgNVHSMEGDAWgBQqTP6QnKWDB+fKhzWv JF1xjZn3+zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTM0L0trei1rSnlsZ3dmbnlvYzFyeVJkY1kyWjlfcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0trei1rSnlsZ3dmbnlvYzFyeVJkY1ky Wjlfcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MzQvS2t6LWtKeWxnd2ZueW9jMXJ5UmRjWTJaOV9zLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEigzmTxHfQ4MK1PKoLJj9/PsQoWHuI84kuvRCVi8l7Ua7rGcPnMhiKmnlpy FId8KZ2okZvSKFL/yKTmabDdP9F4h8FVyIB486P+6S+VgpT5YIFvqIaWg6LGA6OS dtq4CI4UzkTXsaMYe95Yjlj3oL7M/vBVM0mzP8Z1rWRXfXsFyHC+JiJiWLJK/uTk PnQGaIWb9/p1TD0nTwwL2CkOcTBqZwNX92ahef2VOJFV77e1R1qHtTBdLUgan/mI 62HAVDSvhmj0/4o6ynxe5dCmfMpJH5ojNWr30B9BKOD+U+MrZd2ge/El8HzSNZaL cbSL6FaxFeKHi1dUSTclU1LsjJs= -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:18 2024 by rpki-client on console-fra.rpki-client.org