$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft File: 4FbQUB1DDOD88NsGdbr8kLBdm_U.mft (raw, json) Hash identifier: IUBxT0Z1vkoTgPktNL5j7+3gZtk8hvStHHVW5vSejq8= Subject key identifier: 12:37:FA:2C:47:A9:61:C2:F9:66:F3:B2:0B:B0:9D:24:77:AE:F3:07 Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5 Certificate issuer: /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5 Certificate serial: 73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft Manifest number: 1096 Signing time: Sat 05 Apr 2025 13:47:23 +0000 Manifest this update: Sat 05 Apr 2025 13:47:23 +0000 Manifest next update: Sun 20 Apr 2025 13:47:23 +0000 Files and hashes: 1: 3o4efsy6CF7jZ61dtOW7PqQSq94.roa (hash: kBN7u6BGw6aX4jO6ee9sQffgu3wHtY2kw5tnWjAwSDc=) 2: 4FbQUB1DDOD88NsGdbr8kLBdm_U.crl (hash: ujo7Zb/DhteVDp9ONbm2iz0Z9oDL7mTJfoJIAYfd9LA=) 3: 8oH6agpp1ENa38mQLZQr1iG0qnY.roa (hash: kCgm9wR/qw1bOTiSB8WF7+qt79rPFX9Gruyq07nzcjY=) 4: Htn5TbuZ0ywFb2QUrta39pHLTsM.roa (hash: W8JiYZ8GhlKTsZI0eWdZQICZ8luw3Ek3h9OwUiFN7yw=) 5: qsVmoq0KHHiMzxcwMrvP3kU9hqo.roa (hash: cWbsDbS0XIg1G0NaeGS0yc6PGzej0S2xn1+oZEyO6vg=) 6: vxiw72qJLhOZWd4axelngyu2BMs.roa (hash: cWyZP78E8QjkwpLE90bWmmtG3kW6i8AXs2mNvKYd69g=) 7: wsGZYljcA1Ick8Kg4FH_ygf-Jf8.roa (hash: JKqvbMmvJoK14+TL/yEi8jX2l01b0FGxFTqnYJsg6Gw=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5 Validity Not Before: Mar 15 01:37:47 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=1237FA2C47A961C2F966F3B20BB09D2477AEF307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4e:1c:dd:e1:32:ba:b9:74:3f:c7:64:44:c7: 56:ee:be:36:7a:80:45:63:f4:2b:18:6d:35:9b:1b: 62:c6:04:b5:ce:f8:53:1b:26:fc:cd:ac:1f:6c:05: 53:4d:b4:c4:57:10:0c:0c:f6:b4:c1:69:6d:69:3e: 2b:3d:f2:d8:ae:1b:c5:85:1b:3d:29:da:19:da:f7: 08:60:29:81:db:3c:a4:92:82:9c:f1:2e:19:ce:0c: 71:ab:07:60:dd:f5:84:93:95:1d:c3:72:ab:c0:0b: bd:49:06:9b:06:cd:f2:2e:3f:12:da:33:54:97:ac: 57:d9:a1:d5:59:27:2c:88:b4:f9:04:17:3d:4e:8b: ee:29:6a:43:59:a1:1b:34:84:1c:0b:ab:f8:2d:be: a0:42:6b:4c:50:f7:95:7c:dc:05:12:64:12:17:c4: 97:a9:b2:1f:ee:f6:e8:89:81:8c:a1:44:2e:d2:a5: 83:b1:af:ba:3e:c2:3b:61:10:be:87:9c:e0:66:a3: 0a:c1:61:d3:84:79:19:f7:7c:82:bc:ed:5a:9e:63: 9e:81:d9:8e:b5:10:e0:b2:c9:e5:14:a8:a8:ed:ca: 1d:71:41:be:7d:97:a2:c2:3a:7a:36:e5:ff:87:71: 2f:46:1b:39:39:72:81:3d:01:18:af:40:4e:cd:dc: 50:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:37:FA:2C:47:A9:61:C2:F9:66:F3:B2:0B:B0:9D:24:77:AE:F3:07 X509v3 Authority Key Identifier: keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:aa:68:e9:6b:41:94:67:fd:c1:5c:22:ac:dd:2c:29:54:d1: 5f:6f:87:49:54:c1:fc:7f:f0:7f:3f:38:22:31:67:e1:ee:48: 73:fa:43:d2:da:2a:d8:0e:2b:7e:aa:f5:91:b0:53:c3:fc:de: 17:7c:39:dd:a2:73:21:00:2d:98:f3:70:3c:69:b1:33:13:eb: f7:22:74:00:18:59:9a:f4:ec:85:53:c2:6b:d5:65:dc:af:24: 7c:5c:a3:37:a7:0a:ae:a1:5b:03:80:05:75:61:af:e8:a9:f6: ea:02:06:06:1a:1b:f0:b2:74:04:06:b0:78:e8:2b:13:7d:c4: 9d:8a:5a:e7:2c:74:82:c8:a9:fb:f4:f6:14:53:59:33:2b:fb: 99:d2:f7:e3:b5:26:4b:94:dd:97:eb:0f:e6:88:85:a2:15:42: 6e:d4:00:63:0b:1f:43:4b:c8:c8:20:f3:52:88:2b:b3:d2:3f: 27:66:4f:a8:19:32:fd:14:12:85:a1:04:fb:08:e0:77:88:97: e5:60:b2:87:33:6f:78:c5:c8:fd:be:61:94:da:ea:8a:c5:5f: 89:ed:87:a2:86:5b:50:59:58:9a:b7:44:40:fe:5c:35:40:9c: 81:41:82:05:f5:d7:fd:f0:43:67:88:1a:2b:15:57:f1:43:12: c1:1b:a0:e6 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMDU2 RDA1MDFENDMwQ0UwRkNGMERCMDY3NUJBRkM5MEIwNUQ5QkY1MB4XDTI1MDMxNTAx Mzc0N1oXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoMTIzN0ZBMkM0N0E5NjFD MkY5NjZGM0IyMEJCMDlEMjQ3N0FFRjMwNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOZOHN3hMrq5dD/HZETHVu6+NnqARWP0KxhtNZsbYsYEtc74Uxsm /M2sH2wFU020xFcQDAz2tMFpbWk+Kz3y2K4bxYUbPSnaGdr3CGApgds8pJKCnPEu Gc4McasHYN31hJOVHcNyq8ALvUkGmwbN8i4/EtozVJesV9mh1VknLIi0+QQXPU6L 7ilqQ1mhGzSEHAur+C2+oEJrTFD3lXzcBRJkEhfEl6myH+726ImBjKFELtKlg7Gv uj7CO2EQvoec4GajCsFh04R5Gfd8grztWp5jnoHZjrUQ4LLJ5RSoqO3KHXFBvn2X osI6ejbl/4dxL0YbOTlygT0BGK9ATs3cUJECAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQSN/osR6lhwvlm87ILsJ0kd67zBzAfBgNVHSMEGDAWgBTgVtBQHUMM4Pzw2wZ1 uvyQsF2b9TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTEyMDcvNEZiUVVCMURET0Q4OE5zR2RicjhrTEJkbV9VLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNEZiUVVCMURET0Q4OE5zR2Ricjhr TEJkbV9VLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzExMjA3LzRGYlFVQjFERE9EODhOc0dkYnI4a0xCZG1fVS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkqmjpa0GUZ/3BXCKs3SwpVNFfb4dJVMH8f/B/PzgiMWfh7khz+kPS 2irYDit+qvWRsFPD/N4XfDndonMhAC2Y83A8abEzE+v3InQAGFma9OyFU8Jr1WXc ryR8XKM3pwquoVsDgAV1Ya/oqfbqAgYGGhvwsnQEBrB46CsTfcSdilrnLHSCyKn7 9PYUU1kzK/uZ0vfjtSZLlN2X6w/miIWiFUJu1ABjCx9DS8jIIPNSiCuz0j8nZk+o GTL9FBKFoQT7COB3iJflYLKHM294xcj9vmGU2uqKxV+J7YeihltQWViat0RA/lw1 QJyBQYIF9df98ENniBorFVfxQxLBG6Dm -----END CERTIFICATE-----Generated at Sat Apr 5 17:07:39 2025 by rpki-client