$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.mft File: 2r9tldslaBbSlCNGufwuoMGv2AM.mft (raw, json) Hash identifier: Fl6ORhMJ+hexhcYPc2oN+StPP/8DlxjTtuG84+Ks06U= Subject key identifier: FE:AE:DB:5F:15:39:34:57:2A:87:D9:09:BD:5A:23:63:21:CB:F2:02 Authority key identifier: DA:BF:6D:95:DB:25:68:16:D2:94:23:46:B9:FC:2E:A0:C1:AF:D8:03 Certificate issuer: /CN=DABF6D95DB256816D2942346B9FC2EA0C1AFD803 Certificate serial: 1B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2r9tldslaBbSlCNGufwuoMGv2AM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.mft Manifest number: 0621 Signing time: Mon 21 Jul 2025 16:48:15 +0000 Manifest this update: Mon 21 Jul 2025 16:48:15 +0000 Manifest next update: Tue 05 Aug 2025 16:48:15 +0000 Files and hashes: 1: 2r9tldslaBbSlCNGufwuoMGv2AM.crl (hash: 8dXVu70H/NMV/5rCsL7Z3ro9xriFSqGOibbkUEYdadw=) 2: jUBZ3h95XcZ3vcS3YrGxyXcD14M.roa (hash: gLq7mQJhD6bWfiN2mlRsXihm/zbbDpqbw+m6asm9ss8=) 3: zEfVSLA6W_ogjqkTwfH3n0Yg2Xc.roa (hash: xVqL4eK/PEn0AJ3ejadbtmQdejI7TJmRQH+RrjrP4A8=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2r9tldslaBbSlCNGufwuoMGv2AM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 17:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DABF6D95DB256816D2942346B9FC2EA0C1AFD803 Validity Not Before: Jul 15 01:42:50 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=FEAEDB5F153934572A87D909BD5A236321CBF202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2e:d3:2a:5f:02:f3:ef:b1:68:50:bd:8a:d9: 92:0e:d8:39:58:08:cc:db:9f:a9:df:2e:cf:8e:28: 82:cb:f9:bd:d7:dc:09:71:bc:37:7f:67:b6:e5:52: b4:68:11:82:8a:07:20:98:ca:bf:f5:77:49:6a:fb: 32:68:64:ec:10:79:e3:18:d5:5f:6f:1c:f2:18:c4: ba:b8:73:f6:e0:1c:bc:90:6a:26:f8:ef:22:a5:72: 76:b4:fb:6e:30:00:d2:1c:bf:af:69:3f:22:fa:a7: 30:7c:8c:86:a7:ef:78:c2:fe:b2:a6:17:21:eb:c6: be:64:f6:96:50:40:6c:82:a6:14:24:92:14:59:8e: 19:1c:bc:85:4f:9f:b8:84:35:98:89:c7:f1:21:28: d3:ef:a0:9d:16:94:10:3d:31:1c:ba:e1:91:df:34: 53:28:3c:48:c8:83:a9:dc:24:f7:81:1a:7a:b3:da: 1d:b9:ce:7d:ba:f2:3a:ae:b9:b6:77:6a:ae:56:4c: 66:65:7b:3c:31:57:43:f1:86:ae:42:66:d3:3b:16: e6:a7:77:49:72:36:73:42:2b:54:2b:b3:7b:7a:e3: d3:86:17:d9:cc:bb:3d:ed:ad:ac:37:7c:02:a4:3f: c7:63:f9:c7:15:e3:55:be:ad:0a:16:e7:c4:77:bc: 07:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AE:DB:5F:15:39:34:57:2A:87:D9:09:BD:5A:23:63:21:CB:F2:02 X509v3 Authority Key Identifier: keyid:DA:BF:6D:95:DB:25:68:16:D2:94:23:46:B9:FC:2E:A0:C1:AF:D8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2r9tldslaBbSlCNGufwuoMGv2AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:6e:c7:6c:1f:b0:36:12:1a:10:dd:15:d9:8f:bb:57:f0:0e: ea:48:61:5d:b6:bf:73:82:aa:19:87:1e:27:7d:7b:7e:8f:8f: 10:14:89:55:aa:b5:29:ca:d7:e8:f1:ce:71:a4:75:c2:ee:6f: 0f:d5:ae:03:1a:4e:67:24:57:19:73:87:db:2c:f2:96:90:10: 42:e9:a7:dd:c7:9f:c7:27:61:8c:41:e2:0b:40:97:f6:37:46: 89:81:32:d9:23:5c:4c:a4:d5:e5:33:bc:88:09:81:5d:74:7c: 14:20:46:40:44:af:38:c7:6f:12:9d:a7:ee:51:ab:42:c9:b2: 62:47:aa:a2:5b:e4:26:63:f1:bb:cb:c3:56:70:8d:4f:5d:85: 16:93:05:11:85:14:0a:99:71:f8:c7:8d:88:bb:0e:bb:7d:b1: 8e:93:79:02:05:8d:52:50:7a:b7:30:d2:73:f5:30:17:e3:a8: d2:d0:62:c9:39:4b:9a:e0:c3:8b:d0:0d:5f:fc:97:c2:6f:a0: ba:37:fc:c6:7c:7f:50:9e:73:03:07:57:ba:76:7a:98:da:ea: f6:c4:f5:6e:e0:50:84:fb:e2:45:c1:5f:99:ce:47:6f:cf:25: b6:28:3a:17:0f:df:ca:a2:dd:3e:7d:da:c0:f4:c3:48:d8:89: f1:f2:df:34 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBGzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEQUJG NkQ5NURCMjU2ODE2RDI5NDIzNDZCOUZDMkVBMEMxQUZEODAzMB4XDTI1MDcxNTAx NDI1MFoXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoRkVBRURCNUYxNTM5MzQ1 NzJBODdEOTA5QkQ1QTIzNjMyMUNCRjIwMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALEu0ypfAvPvsWhQvYrZkg7YOVgIzNufqd8uz44ogsv5vdfcCXG8 N39ntuVStGgRgooHIJjKv/V3SWr7Mmhk7BB54xjVX28c8hjEurhz9uAcvJBqJvjv IqVydrT7bjAA0hy/r2k/IvqnMHyMhqfveML+sqYXIevGvmT2llBAbIKmFCSSFFmO GRy8hU+fuIQ1mInH8SEo0++gnRaUED0xHLrhkd80Uyg8SMiDqdwk94EaerPaHbnO fbryOq65tndqrlZMZmV7PDFXQ/GGrkJm0zsW5qd3SXI2c0IrVCuze3rj04YX2cy7 Pe2trDd8AqQ/x2P5xxXjVb6tChbnxHe8B58CAwEAAaOCAkEwggI9MB0GA1UdDgQW BBT+rttfFTk0VyqH2Qm9WiNjIcvyAjAfBgNVHSMEGDAWgBTav22V2yVoFtKUI0a5 /C6gwa/YAzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNTMvMnI5dGxkc2xhQmJTbENOR3Vmd3VvTUd2MkFNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMnI5dGxkc2xhQmJTbENOR3Vmd3Vv TUd2MkFNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDUzLzJyOXRsZHNsYUJiU2xDTkd1Znd1b01HdjJBTS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKbsdsH7A2EhoQ3RXZj7tX8A7qSGFdtr9zgqoZhx4nfXt+j48QFIlV qrUpytfo8c5xpHXC7m8P1a4DGk5nJFcZc4fbLPKWkBBC6afdx5/HJ2GMQeILQJf2 N0aJgTLZI1xMpNXlM7yICYFddHwUIEZARK84x28SnafuUatCybJiR6qiW+QmY/G7 y8NWcI1PXYUWkwURhRQKmXH4x42Iuw67fbGOk3kCBY1SUHq3MNJz9TAX46jS0GLJ OUua4MOL0A1f/JfCb6C6N/zGfH9QnnMDB1e6dnqY2ur2xPVu4FCE++JFwV+Zzkdv zyW2KDoXD9/Kot0+fdrA9MNI2Inx8t80 -----END CERTIFICATE-----Generated at Mon Jul 21 18:45:35 2025 by rpki-client