$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.mft File: ENGH2x2fTTa03kSL5DdnEpp512Q.mft (raw, json) Hash identifier: WedA7o6Ao8FMY6wFbnP31hduRqi5Qi9IrejBRBi627s= Subject key identifier: 09:0C:30:9B:19:10:0E:B9:54:43:7C:26:B6:B2:85:9C:BE:C9:7E:76 Authority key identifier: 10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64 Certificate issuer: /CN=10D187DB1D9F4D36B4DE448BE43767129A79D764 Certificate serial: 5A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.mft Manifest number: 1045 Signing time: Sat 05 Apr 2025 15:45:32 +0000 Manifest this update: Sat 05 Apr 2025 15:45:32 +0000 Manifest next update: Sun 20 Apr 2025 15:45:32 +0000 Files and hashes: 1: ENGH2x2fTTa03kSL5DdnEpp512Q.crl (hash: R5yulXdh8eKsuHtU8O7rNqYS/bQTkNC+JBhJd6uBDng=) 2: oFrEMSaesTlCzCJ4ryJS2h7FsI8.roa (hash: lYobvXTrtKaVXpAz+lpk4PixIFwHr+V5ZR+snTd91JM=) 3: sCgQg9_ZgkAvSBlxBIOYM_pVLVQ.roa (hash: k9LUMyFaLBoab8zVK1Vm/pivMO/sZL6tTHIjy4D9Z6Q=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10D187DB1D9F4D36B4DE448BE43767129A79D764 Validity Not Before: Mar 15 01:34:03 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=090C309B19100EB954437C26B6B2859CBEC97E76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6c:2d:41:b6:5e:a2:cb:30:aa:30:25:5b:06: 40:07:29:63:ef:eb:1e:1f:ff:b1:b4:af:f3:29:b4: ff:9f:d1:9a:e7:29:f6:bf:09:a1:fb:5a:b8:2e:d6: 11:bc:63:41:de:aa:d7:eb:25:41:2b:18:78:ca:bd: ca:99:05:45:9e:72:ad:8d:85:1d:e8:37:24:61:29: 92:84:a5:48:98:20:55:c6:17:3c:56:05:2b:78:0f: c2:cf:64:81:9b:31:7a:a1:e7:03:63:43:cf:2c:3c: e0:c5:2f:7c:3d:c8:f2:01:31:23:ca:eb:51:2f:56: d0:3a:a4:12:0e:3b:ff:92:d6:69:4b:a3:8b:e4:ce: ad:d8:20:75:d8:5d:38:da:5c:23:9a:ec:83:6f:95: 28:8d:c7:3d:c9:89:ee:42:4a:80:e8:c7:6a:f6:ca: cd:aa:b1:36:7d:f0:85:6f:16:93:88:77:c4:89:4e: 2a:74:e1:cf:f0:60:e5:28:fd:88:a3:fb:1c:3f:a0: f5:52:0b:96:40:06:3b:af:cd:78:51:99:03:ed:23: a8:48:2b:ce:15:84:64:b8:4e:56:dd:2e:47:14:00: 79:8f:5b:7b:54:26:88:e3:31:eb:4e:c5:47:7b:ae: b1:8c:f7:9a:47:a8:86:a3:dc:cd:f0:79:d3:ca:c7: eb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0C:30:9B:19:10:0E:B9:54:43:7C:26:B6:B2:85:9C:BE:C9:7E:76 X509v3 Authority Key Identifier: keyid:10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:a2:01:db:42:5b:9b:89:70:55:70:dc:2d:b9:06:69:0f:06: 70:a9:94:1b:28:03:1c:12:4d:ca:b9:1e:81:7b:e5:9b:6f:ea: 43:61:93:90:1f:e9:8d:77:b2:45:47:d8:dc:d9:b1:44:2a:73: a5:a3:ce:32:50:25:15:31:a5:b2:42:f0:c8:71:34:e7:72:29: 14:71:c1:30:bc:51:45:f1:f4:78:db:cd:00:cf:df:eb:b9:f3: 6f:23:71:8b:e0:d7:de:3b:68:d0:52:6b:02:55:2e:c5:92:f4: 0f:27:cf:d9:2c:d6:f9:ed:53:16:97:bb:cc:34:27:8d:b3:3e: 7b:02:8d:3b:f7:18:6d:8e:ab:72:12:13:ae:bb:4b:1e:59:47: a5:2f:07:10:74:07:92:ce:be:0f:2f:15:12:e6:b1:74:ad:f1: b3:c5:ec:27:18:dc:31:2d:50:eb:bf:4d:c6:5b:e4:dc:9d:ab: f6:97:e7:e6:e3:20:ba:9b:be:95:5e:7b:21:e5:dc:48:55:5f: 48:99:af:2c:f1:95:97:a6:54:36:c7:bd:8e:e0:f3:c9:76:69: 82:76:2d:76:c2:0e:e4:e9:5a:ab:09:38:49:b4:fd:b9:bf:6f: 16:7e:78:fb:7b:cb:88:87:d1:1d:4a:f0:45:ba:a3:97:f5:ba: 0a:f5:d8:56 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBWjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMEQx ODdEQjFEOUY0RDM2QjRERTQ0OEJFNDM3NjcxMjlBNzlENzY0MB4XDTI1MDMxNTAx MzQwM1oXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoMDkwQzMwOUIxOTEwMEVC OTU0NDM3QzI2QjZCMjg1OUNCRUM5N0U3NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM5sLUG2XqLLMKowJVsGQAcpY+/rHh//sbSv8ym0/5/Rmucp9r8J oftauC7WEbxjQd6q1+slQSsYeMq9ypkFRZ5yrY2FHeg3JGEpkoSlSJggVcYXPFYF K3gPws9kgZsxeqHnA2NDzyw84MUvfD3I8gExI8rrUS9W0DqkEg47/5LWaUuji+TO rdggddhdONpcI5rsg2+VKI3HPcmJ7kJKgOjHavbKzaqxNn3whW8Wk4h3xIlOKnTh z/Bg5Sj9iKP7HD+g9VILlkAGO6/NeFGZA+0jqEgrzhWEZLhOVt0uRxQAeY9be1Qm iOMx607FR3uusYz3mkeohqPczfB508rH60sCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQJDDCbGRAOuVRDfCa2soWcvsl+djAfBgNVHSMEGDAWgBQQ0YfbHZ9NNrTeRIvk N2cSmnnXZDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNjQvRU5HSDJ4MmZUVGEwM2tTTDVEZG5FcHA1MTJRLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRU5HSDJ4MmZUVGEwM2tTTDVEZG5F cHA1MTJRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDY0L0VOR0gyeDJmVFRhMDNrU0w1RGRuRXBwNTEyUS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2ogHbQlubiXBVcNwtuQZpDwZwqZQbKAMcEk3KuR6Be+Wbb+pDYZOQ H+mNd7JFR9jc2bFEKnOlo84yUCUVMaWyQvDIcTTncikUccEwvFFF8fR4280Az9/r ufNvI3GL4NfeO2jQUmsCVS7FkvQPJ8/ZLNb57VMWl7vMNCeNsz57Ao079xhtjqty EhOuu0seWUelLwcQdAeSzr4PLxUS5rF0rfGzxewnGNwxLVDrv03GW+Tcnav2l+fm 4yC6m76VXnsh5dxIVV9Ima8s8ZWXplQ2x72O4PPJdmmCdi12wg7k6VqrCThJtP25 v28Wfnj7e8uIh9EdSvBFuqOX9boK9dhW -----END CERTIFICATE-----Generated at Sun Apr 6 01:44:24 2025 by rpki-client