$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20267/kgaRO193VLjhEW8TXUo7j3WVllg.mft File: kgaRO193VLjhEW8TXUo7j3WVllg.mft (raw, json) Hash identifier: Me1u/pv3fPfUuu5PRD7TIN5JaDOXD4rzbvLx7Mo+niw= Subject key identifier: 94:99:F9:51:96:52:C5:0D:90:4A:BB:B1:A2:3D:8A:8F:89:B4:99:5B Authority key identifier: 92:06:91:3B:5F:77:54:B8:E1:11:6F:13:5D:4A:3B:8F:75:95:96:58 Certificate issuer: /CN=9206913B5F7754B8E1116F135D4A3B8F75959658 Certificate serial: 0D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kgaRO193VLjhEW8TXUo7j3WVllg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20267/kgaRO193VLjhEW8TXUo7j3WVllg.mft Manifest number: 038A Signing time: Sat 05 Apr 2025 08:39:00 +0000 Manifest this update: Sat 05 Apr 2025 08:39:00 +0000 Manifest next update: Sun 20 Apr 2025 08:39:00 +0000 Files and hashes: 1: CIij_m_3fGs1XKNgbcdk8Nx_cJk.roa (hash: CKEbYLDQHz8eHblW3VEJyjoEFGnNzi8i+AZeE9G/2Vk=) 2: _a1Wf4M4_L--PkE2mTLptF4HTHY.roa (hash: InksD0cOCTTbUZKnKXFbBKLkME4fz5p25UwG0Uv3NXA=) 3: kgaRO193VLjhEW8TXUo7j3WVllg.crl (hash: opEJmSRivVsseXXyIKrszc3kmv7i8fRuvCyLuoTPleI=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20267/kgaRO193VLjhEW8TXUo7j3WVllg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20267/kgaRO193VLjhEW8TXUo7j3WVllg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kgaRO193VLjhEW8TXUo7j3WVllg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9206913B5F7754B8E1116F135D4A3B8F75959658 Validity Not Before: Mar 15 01:32:57 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=9499F9519652C50D904ABBB1A23D8A8F89B4995B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:72:87:1f:ff:1c:97:bc:95:f5:e7:04:bc:57: c1:22:72:f0:af:31:8b:b1:b2:0a:2e:6d:a8:77:7f: e6:42:1f:8b:a9:72:60:99:b5:cc:a4:59:e9:cb:b0: 11:7f:70:e2:72:6f:c1:c8:ed:d5:5a:e6:9c:9c:4f: 15:ed:38:b1:3e:fa:96:54:0e:d1:45:e9:ba:4c:c3: e3:e8:4f:0c:c3:39:11:20:6c:45:07:82:41:e6:10: ee:dc:60:b7:69:7b:f5:f7:e3:8d:3c:19:b3:e4:96: 72:53:94:6a:7c:78:e7:5c:9d:40:19:2e:c4:7e:e8: 2c:a5:77:4c:4c:d3:e0:77:3a:44:96:aa:82:51:d5: 5e:9b:ca:9f:eb:36:66:51:a3:4b:a2:c6:68:46:c5: 9d:ba:2a:bf:60:e8:16:ce:86:34:08:e5:fb:43:6d: 6b:31:89:88:ad:29:e7:ca:d0:12:01:5e:5a:6e:92: 39:58:fb:40:39:d3:ba:90:1b:82:3f:20:42:03:60: ec:1e:38:9b:f9:c4:9d:4c:c4:47:21:31:fe:00:34: 97:f3:ea:e5:3e:7e:61:39:aa:91:68:f6:8c:52:6e: fe:10:4b:99:80:a3:7b:00:8c:a3:4f:e2:6b:6b:84: 26:27:4e:64:ba:a7:7f:b7:75:c7:a9:5e:3a:ca:dc: eb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:99:F9:51:96:52:C5:0D:90:4A:BB:B1:A2:3D:8A:8F:89:B4:99:5B X509v3 Authority Key Identifier: keyid:92:06:91:3B:5F:77:54:B8:E1:11:6F:13:5D:4A:3B:8F:75:95:96:58 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20267/kgaRO193VLjhEW8TXUo7j3WVllg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kgaRO193VLjhEW8TXUo7j3WVllg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20267/kgaRO193VLjhEW8TXUo7j3WVllg.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:3d:52:13:d7:1f:96:29:d3:14:2b:2b:2c:6f:5a:79:f7:06: 5b:51:07:d4:e9:4b:aa:81:b2:14:73:fd:05:a3:16:ae:85:82: 3f:e2:83:5c:b5:19:62:8e:3c:a3:8d:6a:f3:52:d3:c4:56:70: 23:64:ce:c9:82:29:bd:40:4e:e9:d3:ef:24:52:e2:7c:ea:90: 04:de:0e:b4:a2:5d:34:84:1d:f6:cf:31:86:62:89:5b:f4:dd: 5d:93:4c:1c:3a:93:09:2b:e6:61:20:81:07:15:2f:93:1f:6b: b3:67:cb:4d:b2:7a:1f:6e:0e:62:a2:db:d6:c2:f9:72:8b:7e: 86:9f:86:c4:1a:b0:20:e6:40:e4:e2:e9:4e:85:13:4d:2d:fb: 0a:82:70:86:b7:68:b2:92:be:8a:4d:fa:7a:5e:50:12:db:51: b2:8e:ae:9b:03:fe:1d:9b:03:87:96:8c:80:5f:df:90:34:b1: c4:81:ec:1e:b7:92:7f:03:43:76:59:c8:7a:95:68:33:6d:bc: 73:d4:14:76:9e:53:d8:2f:76:c7:84:d2:f0:1c:06:20:e5:d6: fd:3c:a1:fd:5e:fc:37:89:b1:ac:cb:c2:dc:aa:f5:84:61:dc: 49:a9:4d:43:2c:6e:a7:d9:87:45:57:e3:74:ba:49:a0:e4:2e: 12:b2:0d:ff -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MjA2 OTEzQjVGNzc1NEI4RTExMTZGMTM1RDRBM0I4Rjc1OTU5NjU4MB4XDTI1MDMxNTAx MzI1N1oXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoOTQ5OUY5NTE5NjUyQzUw RDkwNEFCQkIxQTIzRDhBOEY4OUI0OTk1QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALRyhx//HJe8lfXnBLxXwSJy8K8xi7GyCi5tqHd/5kIfi6lyYJm1 zKRZ6cuwEX9w4nJvwcjt1VrmnJxPFe04sT76llQO0UXpukzD4+hPDMM5ESBsRQeC QeYQ7txgt2l79ffjjTwZs+SWclOUanx451ydQBkuxH7oLKV3TEzT4Hc6RJaqglHV XpvKn+s2ZlGjS6LGaEbFnboqv2DoFs6GNAjl+0NtazGJiK0p58rQEgFeWm6SOVj7 QDnTupAbgj8gQgNg7B44m/nEnUzERyEx/gA0l/Pq5T5+YTmqkWj2jFJu/hBLmYCj ewCMo0/ia2uEJidOZLqnf7d1x6leOsrc698CAwEAAaOCAkEwggI9MB0GA1UdDgQW BBSUmflRllLFDZBKu7GiPYqPibSZWzAfBgNVHSMEGDAWgBSSBpE7X3dUuOERbxNd SjuPdZWWWDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyNjcva2dhUk8xOTNWTGpoRVc4VFhVbzdqM1dWbGxnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAva2dhUk8xOTNWTGpoRVc4VFhVbzdq M1dWbGxnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMjY3L2tnYVJPMTkzVkxqaEVXOFRYVW83ajNXVmxsZy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGPVIT1x+WKdMUKyssb1p59wZbUQfU6UuqgbIUc/0FoxauhYI/4oNc tRlijjyjjWrzUtPEVnAjZM7Jgim9QE7p0+8kUuJ86pAE3g60ol00hB32zzGGYolb 9N1dk0wcOpMJK+ZhIIEHFS+TH2uzZ8tNsnofbg5iotvWwvlyi36Gn4bEGrAg5kDk 4ulOhRNNLfsKgnCGt2iykr6KTfp6XlAS21Gyjq6bA/4dmwOHloyAX9+QNLHEgewe t5J/A0N2Wch6lWgzbbxz1BR2nlPYL3bHhNLwHAYg5db9PKH9Xvw3ibGsy8LcqvWE YdxJqU1DLG6n2YdFV+N0ukmg5C4Ssg3/ -----END CERTIFICATE-----Generated at Sat Apr 5 11:57:55 2025 by rpki-client