$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20186/sAZ8lnPhi4HKpSStiMW8Fw3ZTpc.mft File: sAZ8lnPhi4HKpSStiMW8Fw3ZTpc.mft (raw, json) Hash identifier: BWUIwSHJ1KTvsQGDcQOGDBZfIZVx+wqOOiMeMowqbwA= Subject key identifier: EC:40:9A:3A:DE:71:08:37:37:4B:60:BC:1A:10:6E:B3:17:8C:BA:98 Authority key identifier: B0:06:7C:96:73:E1:8B:81:CA:A5:24:AD:88:C5:BC:17:0D:D9:4E:97 Certificate issuer: /CN=B0067C9673E18B81CAA524AD88C5BC170DD94E97 Certificate serial: 2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sAZ8lnPhi4HKpSStiMW8Fw3ZTpc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/sAZ8lnPhi4HKpSStiMW8Fw3ZTpc.mft Manifest number: 0413 Signing time: Sat 05 Apr 2025 13:20:25 +0000 Manifest this update: Sat 05 Apr 2025 13:20:25 +0000 Manifest next update: Sun 20 Apr 2025 13:20:25 +0000 Files and hashes: 1: sAZ8lnPhi4HKpSStiMW8Fw3ZTpc.crl (hash: Lo6GVtsDgJjdK0wF1i+ejwvNYh06OKxpNjzRHLvafxA=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/sAZ8lnPhi4HKpSStiMW8Fw3ZTpc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/sAZ8lnPhi4HKpSStiMW8Fw3ZTpc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sAZ8lnPhi4HKpSStiMW8Fw3ZTpc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0067C9673E18B81CAA524AD88C5BC170DD94E97 Validity Not Before: Mar 15 01:36:29 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=EC409A3ADE710837374B60BC1A106EB3178CBA98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ce:01:4b:79:fb:79:52:87:c3:1c:2e:a6:71: c6:59:97:95:56:28:d4:86:3c:2a:26:29:cd:58:18: a3:46:c5:c9:7b:79:a2:f0:70:89:df:7e:60:b4:0e: 56:7c:14:9c:f7:ad:9d:57:24:48:77:2b:54:60:06: 5e:0a:fa:ec:a4:17:3b:29:25:42:93:eb:39:b9:d6: be:62:ad:bd:6c:a2:3c:b3:ea:cf:65:18:fa:cb:72: cb:3c:c4:de:2c:fb:10:c8:70:4d:49:21:c2:69:85: 28:71:a7:66:c1:a8:62:7c:ce:8e:60:78:22:68:9c: 65:20:3b:a3:2f:ad:6b:b8:f3:af:51:df:1d:25:b1: ce:9d:63:04:6f:af:88:88:e2:a0:81:72:5f:2a:36: 21:b1:db:b0:43:60:63:fc:93:9d:0b:dc:4e:ac:7d: 46:bd:1d:1c:00:cd:3a:5d:2c:38:e8:a9:0a:e2:88: 20:20:d1:f6:c5:e4:38:14:40:21:42:ff:87:2f:5a: 11:79:a9:a9:0f:83:7b:a7:83:64:09:7c:bc:b6:f3: a0:b7:d4:b7:d1:c6:9d:0d:47:8d:63:5b:82:6e:1c: c9:fd:d6:a5:b2:72:a4:91:35:1d:3b:28:7a:24:9d: 17:7f:bc:67:c4:f1:21:94:f0:c0:d7:19:7c:5c:ae: 2c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:40:9A:3A:DE:71:08:37:37:4B:60:BC:1A:10:6E:B3:17:8C:BA:98 X509v3 Authority Key Identifier: keyid:B0:06:7C:96:73:E1:8B:81:CA:A5:24:AD:88:C5:BC:17:0D:D9:4E:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/sAZ8lnPhi4HKpSStiMW8Fw3ZTpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sAZ8lnPhi4HKpSStiMW8Fw3ZTpc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/sAZ8lnPhi4HKpSStiMW8Fw3ZTpc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:ee:27:9b:df:85:e7:4f:67:b2:91:6c:64:97:8b:96:07:80: 5c:57:3b:3d:8b:1a:d1:8c:c0:56:06:72:50:a7:c9:4f:7e:6a: e3:92:14:68:11:c9:73:b1:1b:f5:0b:6d:4d:f3:69:b9:57:c5: c8:16:74:e7:90:fa:25:36:4e:0e:2c:d9:e3:37:2e:22:66:f0: 6f:92:92:06:fc:f4:c0:84:20:10:88:c9:82:10:4f:d2:34:3c: 59:69:3b:16:30:ab:f7:f4:00:1b:0a:d4:10:20:19:44:f9:31: 48:e4:36:27:af:df:f9:5b:77:92:bf:2b:1f:d2:31:44:d9:13: 81:f2:06:e1:ba:06:b9:79:27:ac:12:30:74:6d:f9:16:48:3d: 0c:9d:93:11:46:8b:01:00:42:2e:40:6b:43:97:82:43:74:cb: 65:ff:99:4f:c2:72:d1:db:40:22:f5:d6:87:02:c4:c1:d4:26: df:c5:a2:75:d8:60:43:35:6a:7f:2a:b4:45:1d:7d:7a:c1:47: e5:79:42:00:ff:16:02:23:1c:88:ea:52:01:b6:52:59:0d:88: 9d:44:1d:d9:c2:e7:4b:04:8c:63:53:90:df:d7:ee:54:58:99: a9:9b:ca:ec:e6:64:6b:ec:46:f8:3a:18:db:d5:3f:ce:de:4f: 11:6c:04:77 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMDA2 N0M5NjczRTE4QjgxQ0FBNTI0QUQ4OEM1QkMxNzBERDk0RTk3MB4XDTI1MDMxNTAx MzYyOVoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoRUM0MDlBM0FERTcxMDgz NzM3NEI2MEJDMUExMDZFQjMxNzhDQkE5ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL7OAUt5+3lSh8McLqZxxlmXlVYo1IY8KiYpzVgYo0bFyXt5ovBw id9+YLQOVnwUnPetnVckSHcrVGAGXgr67KQXOyklQpPrObnWvmKtvWyiPLPqz2UY +styyzzE3iz7EMhwTUkhwmmFKHGnZsGoYnzOjmB4ImicZSA7oy+ta7jzr1HfHSWx zp1jBG+viIjioIFyXyo2IbHbsENgY/yTnQvcTqx9Rr0dHADNOl0sOOipCuKIICDR 9sXkOBRAIUL/hy9aEXmpqQ+De6eDZAl8vLbzoLfUt9HGnQ1HjWNbgm4cyf3WpbJy pJE1HTsoeiSdF3+8Z8TxIZTwwNcZfFyuLEcCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBTsQJo63nEINzdLYLwaEG6zF4y6mDAfBgNVHSMEGDAWgBSwBnyWc+GLgcqlJK2I xbwXDdlOlzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxODYvc0FaOGxuUGhpNEhLcFNTdGlNVzhGdzNaVHBjLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvc0FaOGxuUGhpNEhLcFNTdGlNVzhG dzNaVHBjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMTg2L3NBWjhsblBoaTRIS3BTU3RpTVc4RnczWlRwYy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDG7ieb34XnT2eykWxkl4uWB4BcVzs9ixrRjMBWBnJQp8lPfmrjkhRo EclzsRv1C21N82m5V8XIFnTnkPolNk4OLNnjNy4iZvBvkpIG/PTAhCAQiMmCEE/S NDxZaTsWMKv39AAbCtQQIBlE+TFI5DYnr9/5W3eSvysf0jFE2ROB8gbhuga5eSes EjB0bfkWSD0MnZMRRosBAEIuQGtDl4JDdMtl/5lPwnLR20Ai9daHAsTB1CbfxaJ1 2GBDNWp/KrRFHX16wUfleUIA/xYCIxyI6lIBtlJZDYidRB3ZwudLBIxjU5Df1+5U WJmpm8rs5mRr7Eb4Ohjb1T/O3k8RbAR3 -----END CERTIFICATE-----Generated at Sun Apr 6 01:26:25 2025 by rpki-client