$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.mft File: Kf4eeVQuss76Tig7_K8Yo5i8dhE.mft (raw, json) Hash identifier: FbhPBC7EX6WVHqdVeQTg0LxuipDs/B2YWBvgFhd2ok4= Subject key identifier: E3:6F:43:EF:57:0B:FE:24:A5:E0:A0:1E:1A:E2:65:98:1B:8D:61:16 Authority key identifier: 29:FE:1E:79:54:2E:B2:CE:FA:4E:28:3B:FC:AF:18:A3:98:BC:76:11 Certificate issuer: /CN=29FE1E79542EB2CEFA4E283BFCAF18A398BC7611 Certificate serial: 14 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.mft Manifest number: 03A2 Signing time: Sat 05 Apr 2025 12:58:44 +0000 Manifest this update: Sat 05 Apr 2025 12:58:44 +0000 Manifest next update: Sun 20 Apr 2025 12:58:44 +0000 Files and hashes: 1: Kf4eeVQuss76Tig7_K8Yo5i8dhE.crl (hash: U11de8LdiKN/KgI/46J2V6/YgB1JWWQDXehL/+zEf3Q=) 2: ReVLeqIW3TWPrBpxowzM2HVvsEk.roa (hash: T9FqI9gzfHK5oTuIKxX6qoW5gM9SSHIeXl7okn72L9s=) 3: sV6WpENkf8IrmFdiBforWuYwfGo.roa (hash: m7LvWXnR1TMlwszzLcAap/JgVgFzAKRWIgkhjlhb51c=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29FE1E79542EB2CEFA4E283BFCAF18A398BC7611 Validity Not Before: Mar 15 01:32:28 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=E36F43EF570BFE24A5E0A01E1AE265981B8D6116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c1:03:70:0d:d3:f5:40:f5:ad:1e:f1:16:3b: d5:96:99:68:75:b8:1c:52:c3:6f:63:4c:4e:c4:ee: 22:da:29:e3:cb:03:b0:32:8a:3f:8f:76:9c:b7:66: d9:43:15:17:e5:40:c8:67:a1:34:8c:31:08:dd:3d: 7b:ca:21:21:33:9f:78:69:21:c8:30:27:ba:f0:24: bd:87:2a:b5:f0:cd:bc:9a:48:fa:3a:8a:41:f0:bd: 1e:c8:7d:17:63:80:ab:1b:33:0f:0c:8b:a1:27:bf: 99:3a:cb:e6:1e:ce:72:1d:bb:9f:ec:f4:dd:77:06: ce:33:3c:64:4e:c9:b3:8c:b3:85:2e:24:72:9e:f8: 9d:ae:41:b8:ef:ab:8e:41:fd:05:5d:5d:68:ae:2c: b5:b2:2f:5e:5b:99:1c:86:52:ae:44:ba:85:f0:50: 25:cb:17:1b:ad:42:cb:10:3e:27:6f:ab:c5:33:3d: 52:96:15:fb:33:03:e9:19:22:45:7b:ee:d3:3e:d0: 97:01:4f:97:15:5d:a9:55:e0:ff:bd:bb:83:e5:3a: d9:f1:9b:56:1a:3e:54:a2:39:37:65:6c:23:67:bb: 30:1e:e3:30:f0:7f:9a:64:87:f9:c4:08:70:72:56: 03:59:e5:a3:cc:09:ed:4c:75:2d:d3:11:e9:b3:f9: 01:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6F:43:EF:57:0B:FE:24:A5:E0:A0:1E:1A:E2:65:98:1B:8D:61:16 X509v3 Authority Key Identifier: keyid:29:FE:1E:79:54:2E:B2:CE:FA:4E:28:3B:FC:AF:18:A3:98:BC:76:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:cf:3c:f3:ba:36:59:e2:02:72:ee:4b:3a:7e:27:c5:23:bb: 8e:c6:8c:55:7a:3a:1a:f8:8f:a1:a8:ac:a5:a6:1c:37:58:42: 85:06:c8:2c:e0:7a:a6:45:ee:be:4c:8b:cf:76:35:f6:fb:93: 02:60:7c:2c:fd:b0:d7:37:9a:6e:57:e4:43:db:39:a9:a0:1e: b6:79:bb:79:65:32:6f:66:7a:f2:be:e3:7b:0b:2e:33:08:d2: c9:7d:67:ad:f1:40:aa:aa:65:73:92:8c:3b:da:6a:f0:a1:f6: 75:9c:05:2f:e0:2e:9a:45:66:c4:e7:b2:a7:3e:bc:c5:17:01: d5:9c:21:5c:bd:f1:6d:1e:97:42:de:b5:1f:5e:06:e9:34:ac: 25:e4:07:70:41:f3:68:8c:d5:34:37:8d:4d:04:72:4f:7a:1a: 74:c0:cf:8b:ae:35:62:6e:88:ff:36:60:c1:54:e5:b0:a6:38: be:0b:3c:73:43:5e:a8:81:93:c0:7e:2e:b9:f7:5d:88:ab:5a: d3:6c:a7:84:e7:d1:5b:dd:ae:a5:22:cd:eb:6a:fd:14:d6:2b: 93:c4:20:00:4c:40:75:74:7d:c7:31:02:10:1c:2c:72:ec:5d: ba:75:27:d5:18:a9:74:33:10:b1:66:53:63:c1:4f:13:51:1c: c5:89:95:5a -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOUZF MUU3OTU0MkVCMkNFRkE0RTI4M0JGQ0FGMThBMzk4QkM3NjExMB4XDTI1MDMxNTAx MzIyOFoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoRTM2RjQzRUY1NzBCRkUy NEE1RTBBMDFFMUFFMjY1OTgxQjhENjExNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKPBA3AN0/VA9a0e8RY71ZaZaHW4HFLDb2NMTsTuItop48sDsDKK P492nLdm2UMVF+VAyGehNIwxCN09e8ohITOfeGkhyDAnuvAkvYcqtfDNvJpI+jqK QfC9Hsh9F2OAqxszDwyLoSe/mTrL5h7Och27n+z03XcGzjM8ZE7Js4yzhS4kcp74 na5BuO+rjkH9BV1daK4stbIvXluZHIZSrkS6hfBQJcsXG61CyxA+J2+rxTM9UpYV +zMD6RkiRXvu0z7QlwFPlxVdqVXg/727g+U62fGbVho+VKI5N2VsI2e7MB7jMPB/ mmSH+cQIcHJWA1nlo8wJ7Ux1LdMR6bP5AVcCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBTjb0PvVwv+JKXgoB4a4mWYG41hFjAfBgNVHSMEGDAWgBQp/h55VC6yzvpOKDv8 rxijmLx2ETAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwOTUvS2Y0ZWVWUXVzczc2VGlnN19LOFlvNWk4ZGhFLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS2Y0ZWVWUXVzczc2VGlnN19LOFlv NWk4ZGhFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDk1L0tmNGVlVlF1c3M3NlRpZzdfSzhZbzVpOGRoRS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQzzzzujZZ4gJy7ks6fifFI7uOxoxVejoa+I+hqKylphw3WEKFBsgs 4HqmRe6+TIvPdjX2+5MCYHws/bDXN5puV+RD2zmpoB62ebt5ZTJvZnryvuN7Cy4z CNLJfWet8UCqqmVzkow72mrwofZ1nAUv4C6aRWbE57KnPrzFFwHVnCFcvfFtHpdC 3rUfXgbpNKwl5AdwQfNojNU0N41NBHJPehp0wM+LrjViboj/NmDBVOWwpji+Czxz Q16ogZPAfi65912Iq1rTbKeE59Fb3a6lIs3rav0U1iuTxCAATEB1dH3HMQIQHCxy 7F26dSfVGKl0MxCxZlNjwU8TURzFiZVa -----END CERTIFICATE-----Generated at Sat Apr 5 17:25:00 2025 by rpki-client