$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft File: nbB2TG38Hj32vVgOpplKHnCY9So.mft (raw, json) Hash identifier: pKaosog7ji7y3NM64HD1Qr20FVTRpUViQ5J1U2UG060= Subject key identifier: E5:05:68:92:5C:7D:8A:DF:CF:4D:83:CD:E7:37:62:40:6C:9C:7E:06 Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A Certificate issuer: /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A Certificate serial: 97 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft Manifest number: 0445 Signing time: Sat 05 Apr 2025 13:28:05 +0000 Manifest this update: Sat 05 Apr 2025 13:28:05 +0000 Manifest next update: Sun 20 Apr 2025 13:28:05 +0000 Files and hashes: 1: 5soV4SXyAXlLTVQGmp_jy9aoauA.roa (hash: 9hSPp9zMhPWpiX2O0JOJjFrBKCzy4HT9umVBuJUU/zI=) 2: 7dF6CMhHERIRrwEPv7QXrpTsm84.roa (hash: ISxihiehJjOuRn5dGX2H0IhT5v6/4HiTFP+a9JLKivA=) 3: VXWrI6rbsJMMzTQtZT1tmCfvECg.roa (hash: sXWeaUKZG0A1qpAwYn4lBaEPV/9lhKaf2tJ6B3G0bPg=) 4: hvrC2RgjCcsGi-GENDhuNRQxa74.roa (hash: K52ZpkP4cS9oU+TMiXVf+oG1YqOe9bw9J/a2AIiB1dE=) 5: nbB2TG38Hj32vVgOpplKHnCY9So.crl (hash: /RUWcuKZTfpwNrksdcjjGOrj2PBii2ZxCIAeDSMcQgw=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A Validity Not Before: Mar 15 01:35:45 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=E50568925C7D8ADFCF4D83CDE73762406C9C7E06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d9:cc:bb:f9:61:09:99:bd:48:ad:3b:d8:bc: 2b:13:55:3c:5d:3a:b2:69:0e:96:2b:40:bb:36:df: fa:5d:39:7e:ed:85:9c:7e:9b:5a:34:07:c9:64:0d: 33:85:5a:4b:7f:17:87:d5:38:7b:a1:6f:0e:b4:e8: f6:94:6a:b6:f5:45:55:91:f0:23:56:cc:83:99:20: 77:22:32:c5:d5:b3:34:05:18:d3:c0:38:89:81:e1: 60:fa:63:02:37:f1:dc:86:6a:99:13:66:7d:56:08: ee:e1:d5:cd:db:34:9a:53:19:a7:e1:ce:86:d1:d9: 46:0f:1c:b7:ab:ad:01:d1:a5:21:6c:7c:b5:2e:69: 3c:e6:54:65:4e:83:a8:9f:b7:79:a8:65:87:78:fa: 25:58:87:a4:da:6e:6a:5e:1d:5e:ca:e8:87:66:30: fb:a0:91:1c:85:9e:78:7d:86:14:8c:6e:d4:b8:9a: f6:67:04:ce:31:42:86:98:d3:ee:c4:71:ef:30:94: 55:1f:33:6c:f0:91:b5:65:4e:b4:48:20:40:d7:77: 48:68:a4:66:d5:40:c1:3f:54:26:3b:cc:ea:b7:49: 78:3d:e6:2e:24:4a:e2:9c:70:8e:dc:be:f1:80:81: 14:b1:83:68:74:de:ad:2d:b1:9c:5d:89:db:d9:28: 5a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:05:68:92:5C:7D:8A:DF:CF:4D:83:CD:E7:37:62:40:6C:9C:7E:06 X509v3 Authority Key Identifier: keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:e4:40:bb:ce:a5:d7:7c:47:18:2a:47:0c:4c:6a:03:2e:e8: 68:c7:39:44:27:30:ca:f5:ad:af:32:18:fb:f2:c0:03:76:f5: 7c:b9:50:fe:44:08:42:fd:75:9f:c5:59:5c:e7:3d:bb:5b:fb: d3:67:00:3f:99:06:97:a6:ae:62:f7:a5:f8:97:a7:12:bf:37: fb:77:c0:56:05:c6:24:f8:de:a6:d9:f9:5a:23:5e:f3:4e:86: e0:f5:7a:7d:93:d4:72:d7:fd:74:21:40:22:8a:a3:90:c7:8a: 87:1c:7d:47:50:55:81:00:0b:10:b0:ca:94:b6:5b:4f:32:1e: 6d:69:9d:a9:df:db:03:95:d4:76:28:f5:d8:32:d5:75:f1:18: 96:02:8c:ec:91:2d:83:1a:b6:46:e1:5e:ff:4c:ab:cd:61:02: 78:17:6e:91:0e:e9:1c:3f:1b:92:89:4f:05:95:7c:d7:b1:3f: 2c:6a:dd:b9:13:46:63:cd:0d:df:a7:4f:5d:2f:a6:23:63:37: 80:1d:ab:34:68:ee:df:57:c8:55:2f:7b:d5:5c:00:d4:7e:b1: 06:5b:1a:4f:04:54:3a:3c:d0:98:83:b8:e8:0c:52:a8:0d:30: e6:4c:ca:5a:0c:a6:2e:87:e4:60:82:83:cd:4c:31:bd:2b:79: b1:b0:e7:c1 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOURC MDc2NEM2REZDMUUzREY2QkQ1ODBFQTY5OTRBMUU3MDk4RjUyQTAeFw0yNTAzMTUw MTM1NDVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEU1MDU2ODkyNUM3RDhB REZDRjREODNDREU3Mzc2MjQwNkM5QzdFMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDj2cy7+WEJmb1IrTvYvCsTVTxdOrJpDpYrQLs23/pdOX7thZx+ m1o0B8lkDTOFWkt/F4fVOHuhbw606PaUarb1RVWR8CNWzIOZIHciMsXVszQFGNPA OImB4WD6YwI38dyGapkTZn1WCO7h1c3bNJpTGafhzobR2UYPHLerrQHRpSFsfLUu aTzmVGVOg6ift3moZYd4+iVYh6TabmpeHV7K6IdmMPugkRyFnnh9hhSMbtS4mvZn BM4xQoaY0+7Ece8wlFUfM2zwkbVlTrRIIEDXd0hopGbVQME/VCY7zOq3SXg95i4k SuKccI7cvvGAgRSxg2h03q0tsZxdidvZKFpLAgMBAAGjggJBMIICPTAdBgNVHQ4E FgQU5QVoklx9it/PTYPN5zdiQGycfgYwHwYDVR0jBBgwFoAUnbB2TG38Hj32vVgO pplKHnCY9SowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDYzL25iQjJURzM4SGozMnZWZ09wcGxLSG5DWTlTby5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL25iQjJURzM4SGozMnZWZ09wcGxL SG5DWTlTby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA2My9uYkIyVEczOEhqMzJ2VmdPcHBsS0huQ1k5U28u bWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0B AQsFAAOCAQEAa+RAu86l13xHGCpHDExqAy7oaMc5RCcwyvWtrzIY+/LAA3b1fLlQ /kQIQv11n8VZXOc9u1v702cAP5kGl6auYvel+JenEr83+3fAVgXGJPjeptn5WiNe 806G4PV6fZPUctf9dCFAIoqjkMeKhxx9R1BVgQALELDKlLZbTzIebWmdqd/bA5XU dij12DLVdfEYlgKM7JEtgxq2RuFe/0yrzWECeBdukQ7pHD8bkolPBZV817E/LGrd uRNGY80N36dPXS+mI2M3gB2rNGju31fIVS971VwA1H6xBlsaTwRUOjzQmIO46AxS qA0w5kzKWgymLofkYIKDzUwxvSt5sbDnwQ== -----END CERTIFICATE-----Generated at Sat Apr 5 17:22:51 2025 by rpki-client