$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft File: jIbjLs6aPIUP6-ppZB81RCc9U3E.mft (raw, json) Hash identifier: 2/0BooICEXFJRXpIxfY0A26809JWTr5nO20hkbJErlk= Subject key identifier: 5E:CE:2B:36:42:4F:7F:10:C9:ED:27:AD:CA:06:CD:77:6B:94:A6:BF Authority key identifier: 8C:86:E3:2E:CE:9A:3C:85:0F:EB:EA:69:64:1F:35:44:27:3D:53:71 Certificate issuer: /CN=8C86E32ECE9A3C850FEBEA69641F3544273D5371 Certificate serial: 0D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft Manifest number: 038A Signing time: Sat 05 Apr 2025 12:52:35 +0000 Manifest this update: Sat 05 Apr 2025 12:52:35 +0000 Manifest next update: Sun 20 Apr 2025 12:52:35 +0000 Files and hashes: 1: 4x5a0Mk3ks_PlWC3C8hulDbbwR0.roa (hash: CxJiCQGLleqCmqGEXa06iF2gOZ1zcxP5VUFnrCsxEBk=) 2: VS6Dyh2blpj35aYjCGLrljr4Q6E.roa (hash: Xa1wCryL5pGUz40/Q/4Yvy2AsNOlEslmigjawYuNWgs=) 3: VxW2dGsDSxTbLIKgHIDXUOAkLi0.roa (hash: DDH6gVdQir1fVPcY9xW0QyELWDpCuu4V2xXCEejuBss=) 4: jIbjLs6aPIUP6-ppZB81RCc9U3E.crl (hash: n58K3zDiQWhURMvIInEDDNSA3dDs97Ur33s5PfBRCyY=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C86E32ECE9A3C850FEBEA69641F3544273D5371 Validity Not Before: Mar 15 01:33:00 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=5ECE2B36424F7F10C9ED27ADCA06CD776B94A6BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:15:dc:d6:93:72:f4:2b:6a:0e:3f:9c:c7:f6: 38:f7:be:dd:56:80:77:bb:61:ef:bf:8c:bd:2b:8f: 63:ea:51:5b:d3:7b:ee:15:ae:f3:a0:59:39:f4:39: 8a:ed:56:cd:4f:cc:b7:02:99:fb:23:41:65:3a:9f: c6:fb:6e:80:f0:37:85:51:b0:71:b6:21:32:8f:ca: cc:d2:be:0f:91:d0:68:83:dd:c1:76:6a:d9:68:7e: 34:9e:8c:61:a7:fa:9d:ef:06:90:0a:43:80:5a:ed: d4:45:60:a2:8c:f3:4e:20:ed:51:53:98:dd:d3:c7: e4:9f:6b:28:45:9e:01:c8:5b:4c:d0:95:77:bd:e9: 4a:a5:52:d6:09:85:25:67:28:6a:1e:05:26:78:a0: 16:ac:6e:e0:a5:8b:cd:3c:15:84:7f:4e:5f:67:bd: 65:01:be:d2:71:4e:7d:3c:b4:fc:94:40:76:21:19: 72:91:32:5a:58:6b:70:20:82:c0:84:6a:c4:cd:cd: 45:8d:7c:0b:fd:6b:09:c7:6d:52:5c:69:53:4c:0f: 6a:4d:31:db:fa:9e:bd:e1:54:31:2e:b7:de:9d:dd: 43:72:2f:0e:d9:23:cc:50:5a:e4:9b:18:4b:a1:e6: 50:67:11:4e:cb:e7:29:ff:cd:f5:ad:a2:94:3f:e5: 0a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CE:2B:36:42:4F:7F:10:C9:ED:27:AD:CA:06:CD:77:6B:94:A6:BF X509v3 Authority Key Identifier: keyid:8C:86:E3:2E:CE:9A:3C:85:0F:EB:EA:69:64:1F:35:44:27:3D:53:71 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:60:d9:ae:d3:e1:b2:42:ce:76:33:fd:db:c5:94:40:96:2d: 9c:e0:9c:0b:d1:91:b5:65:7f:c7:63:d2:39:51:0e:89:0b:e2: d9:77:9c:ee:ba:4e:a2:c2:68:57:9e:05:1d:45:b0:55:5c:69: aa:7f:a5:a7:51:51:ef:34:72:ca:b2:df:9e:c0:6c:f3:28:37: 9e:19:57:a6:21:c2:71:3e:0d:9e:3c:a3:81:c9:74:e8:ef:d5: 8b:eb:f4:db:fb:4d:8a:90:29:1f:42:a3:70:9e:96:8e:70:86: 56:83:9b:91:71:06:7e:40:2d:8e:a8:44:9f:7a:12:d2:b3:8d: 4b:e0:0b:38:dd:48:7b:59:f4:7c:0a:c2:b8:74:18:2d:7a:e1: 93:69:90:85:8b:89:fd:55:31:c2:bc:ae:11:68:61:b3:fa:48: 15:c6:8f:4b:cb:81:1b:b1:01:da:2b:7f:fd:28:7b:19:ed:14: 0b:f2:57:50:f9:b1:95:e9:b7:21:e1:bf:42:22:b0:76:fc:f2: 0b:3f:3c:12:a9:b9:91:fc:84:48:e3:04:b6:68:6e:d6:27:d3: ba:0c:bd:5b:c7:18:6c:ad:04:93:05:30:2a:b8:7b:17:6d:51: 52:58:18:5f:45:55:51:2f:9e:05:7b:8e:5a:f0:d1:5d:45:69: 1c:91:ae:11 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4Qzg2 RTMyRUNFOUEzQzg1MEZFQkVBNjk2NDFGMzU0NDI3M0Q1MzcxMB4XDTI1MDMxNTAx MzMwMFoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoNUVDRTJCMzY0MjRGN0Yx MEM5RUQyN0FEQ0EwNkNENzc2Qjk0QTZCRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ8V3NaTcvQrag4/nMf2OPe+3VaAd7th77+MvSuPY+pRW9N77hWu 86BZOfQ5iu1WzU/MtwKZ+yNBZTqfxvtugPA3hVGwcbYhMo/KzNK+D5HQaIPdwXZq 2Wh+NJ6MYaf6ne8GkApDgFrt1EVgoozzTiDtUVOY3dPH5J9rKEWeAchbTNCVd73p SqVS1gmFJWcoah4FJnigFqxu4KWLzTwVhH9OX2e9ZQG+0nFOfTy0/JRAdiEZcpEy WlhrcCCCwIRqxM3NRY18C/1rCcdtUlxpU0wPak0x2/qeveFUMS633p3dQ3IvDtkj zFBa5JsYS6HmUGcRTsvnKf/N9a2ilD/lCmsCAwEAAaOCAj8wggI7MB0GA1UdDgQW BBRezis2Qk9/EMntJ63KBs13a5SmvzAfBgNVHSMEGDAWgBSMhuMuzpo8hQ/r6mlk HzVEJz1TcTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA5MS9qSWJqTHM2YVBJVVA2LXBwWkI4MVJDYzlVM0UuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9qSWJqTHM2YVBJVVA2LXBwWkI4MVJD YzlVM0UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTA5MS9qSWJqTHM2YVBJVVA2LXBwWkI4MVJDYzlVM0UubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEAi2DZrtPhskLOdjP928WUQJYtnOCcC9GRtWV/x2PSOVEOiQvi2Xec7rpO osJoV54FHUWwVVxpqn+lp1FR7zRyyrLfnsBs8yg3nhlXpiHCcT4Nnjyjgcl06O/V i+v02/tNipApH0KjcJ6WjnCGVoObkXEGfkAtjqhEn3oS0rONS+ALON1Ie1n0fArC uHQYLXrhk2mQhYuJ/VUxwryuEWhhs/pIFcaPS8uBG7EB2it//Sh7Ge0UC/JXUPmx lem3IeG/QiKwdvzyCz88Eqm5kfyESOMEtmhu1ifTugy9W8cYbK0EkwUwKrh7F21R UlgYX0VVUS+eBXuOWvDRXUVpHJGuEQ== -----END CERTIFICATE-----Generated at Sat Apr 5 16:53:59 2025 by rpki-client