$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft File: GbT9rpYvSWBYix0r5qHtQvE3CY4.mft (raw, json) Hash identifier: Y4qJiYCxlk8cZgClF7Q7VqmEQ3qJtHWPaAybg+YyKMw= Subject key identifier: D1:75:0D:07:33:AA:16:84:F4:CE:10:B9:17:B0:62:CC:41:00:D2:E9 Authority key identifier: 19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E Certificate issuer: /CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E Certificate serial: 56 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft Manifest number: 0831 Signing time: Sat 05 Apr 2025 14:55:27 +0000 Manifest this update: Sat 05 Apr 2025 14:55:27 +0000 Manifest next update: Sun 20 Apr 2025 14:55:27 +0000 Files and hashes: 1: 5NtwJDKw7aN72kMkAGdME-Bkdyk.roa (hash: aih7U5A2ZYFvePC46lOc+jI2bSCubcVA4ehSKk8NqCc=) 2: GbT9rpYvSWBYix0r5qHtQvE3CY4.crl (hash: 78fOt2C+BHiHqTNN6cyrRB8AkHEWVhy5Cdb5ABvEZPw=) 3: _O1GniIa9Sv6jEx8l2n-SZu-m9A.roa (hash: 2pH7lB602EN4j0SDFwl5fVcd5IWbNlPs5sWwipuVQ6k=) 4: skQok6BMG5hOtqlBCcPAOegtqC4.roa (hash: dqm/XgGn73MgdB3XJ08x2NWplA/p6c6Hpc/PBVbmfFs=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E Validity Not Before: Mar 15 01:37:48 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=D1750D0733AA1684F4CE10B917B062CC4100D2E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f9:e5:21:f4:cd:32:dd:b0:8f:ac:e3:88:d9: 47:e2:4c:cf:5d:7a:74:c5:77:e8:83:20:c1:06:74: 2e:ae:69:58:ce:3c:56:74:11:ff:62:e6:71:25:55: 3e:05:e5:cf:47:56:3e:96:db:eb:6c:8a:f7:0c:2e: 80:41:ea:2a:72:97:19:e9:17:9c:31:6b:ea:9e:f0: 16:0a:88:ec:9d:84:22:a2:2f:a6:a1:04:dd:ad:e8: a5:8d:a9:ea:49:f8:25:51:89:30:cd:51:e8:78:20: fc:90:72:59:fd:a4:76:e2:26:38:50:fd:78:40:13: c4:65:91:a8:d7:f8:8a:8c:b3:58:96:ee:ac:d9:d8: 8c:cf:6a:e3:8c:b6:50:a8:ec:d8:c3:15:05:7b:16: 45:ac:13:36:c7:f0:e5:af:3f:18:77:60:a9:2c:9c: cd:19:a2:c2:92:c5:7c:92:b6:54:8a:98:b3:45:36: f0:af:66:4c:e4:e1:9a:45:10:63:a8:60:1d:e1:63: aa:9d:17:c8:4d:f3:8a:f6:0a:b5:d9:0b:e2:ee:ac: f6:34:38:75:81:02:b3:7b:7a:5c:d5:21:3c:d7:5e: fc:a8:4c:5c:5e:38:03:15:5a:d1:78:a5:47:aa:77: 38:b1:d3:37:24:cb:93:a3:fe:c5:96:ff:0b:fb:72: 0d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:75:0D:07:33:AA:16:84:F4:CE:10:B9:17:B0:62:CC:41:00:D2:E9 X509v3 Authority Key Identifier: keyid:19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:6a:c6:0b:33:c7:bb:95:e1:74:d0:49:1d:ef:21:ec:06:b8: 2f:1f:fb:81:ad:59:29:41:5f:66:81:34:f8:b8:f7:ad:2d:90: 63:97:a0:62:4e:46:88:39:d6:af:b4:e4:b9:e9:dd:36:4a:89: da:cc:73:61:88:5d:4a:c1:22:8b:c7:c9:7b:9f:60:dc:28:a6: fe:b2:ee:10:52:fa:9f:90:9d:5d:da:27:51:e1:6f:86:bb:2e: 0f:3a:51:7e:d8:4a:92:b2:4e:c5:45:af:8e:2c:52:59:28:c4: 03:7b:7e:3a:27:48:f0:c1:25:6c:c1:94:a4:aa:69:bd:e3:19: 67:df:ae:8e:94:bb:9c:a3:8f:56:1d:ce:75:eb:81:9e:16:c1: 73:fc:3e:d3:a0:f4:15:13:1a:cf:33:fc:da:36:81:d6:b7:bd: e5:11:bd:92:37:e7:02:4c:61:b9:14:76:8b:19:fc:f5:9e:44: 42:01:15:eb:98:21:29:d6:65:4b:4a:5d:0d:f0:89:c8:e6:a6: 2b:a0:62:ef:2c:d9:85:64:e7:3e:2b:93:1e:f9:a2:6f:ee:9a: 87:a0:dc:ad:32:f7:b8:ad:83:ec:35:55:11:3f:e0:11:f8:8d: 69:54:dc:f8:f8:d0:bf:5d:21:0b:3d:f6:02:5e:3f:21:75:ff: c1:2d:72:c5 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxOUI0 RkRBRTk2MkY0OTYwNTg4QjFEMkJFNkExRUQ0MkYxMzcwOThFMB4XDTI1MDMxNTAx Mzc0OFoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoRDE3NTBEMDczM0FBMTY4 NEY0Q0UxMEI5MTdCMDYyQ0M0MTAwRDJFOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM/55SH0zTLdsI+s44jZR+JMz116dMV36IMgwQZ0Lq5pWM48VnQR /2LmcSVVPgXlz0dWPpbb62yK9wwugEHqKnKXGekXnDFr6p7wFgqI7J2EIqIvpqEE 3a3opY2p6kn4JVGJMM1R6Hgg/JByWf2kduImOFD9eEATxGWRqNf4ioyzWJburNnY jM9q44y2UKjs2MMVBXsWRawTNsfw5a8/GHdgqSyczRmiwpLFfJK2VIqYs0U28K9m TOThmkUQY6hgHeFjqp0XyE3zivYKtdkL4u6s9jQ4dYECs3t6XNUhPNde/KhMXF44 AxVa0XilR6p3OLHTNyTLk6P+xZb/C/tyDekCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBTRdQ0HM6oWhPTOELkXsGLMQQDS6TAfBgNVHSMEGDAWgBQZtP2uli9JYFiLHSvm oe1C8TcJjjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTIyMDcvR2JUOXJwWXZTV0JZaXgwcjVxSHRRdkUzQ1k0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvR2JUOXJwWXZTV0JZaXgwcjVxSHRR dkUzQ1k0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEyMjA3L0diVDlycFl2U1dCWWl4MHI1cUh0UXZFM0NZNC5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIasYLM8e7leF00Ekd7yHsBrgvH/uBrVkpQV9mgTT4uPetLZBjl6Bi TkaIOdavtOS56d02SonazHNhiF1KwSKLx8l7n2DcKKb+su4QUvqfkJ1d2idR4W+G uy4POlF+2EqSsk7FRa+OLFJZKMQDe346J0jwwSVswZSkqmm94xln366OlLuco49W Hc5164GeFsFz/D7ToPQVExrPM/zaNoHWt73lEb2SN+cCTGG5FHaLGfz1nkRCARXr mCEp1mVLSl0N8InI5qYroGLvLNmFZOc+K5Me+aJv7pqHoNytMve4rYPsNVURP+AR +I1pVNz4+NC/XSELPfYCXj8hdf/BLXLF -----END CERTIFICATE-----Generated at Sat Apr 5 20:00:50 2025 by rpki-client