$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/1umiHoHKEuuEVa3sRmEEd-pfT0w.mft File: 1umiHoHKEuuEVa3sRmEEd-pfT0w.mft (raw, json) Hash identifier: Z4WDOecosg0vCJ131M8w445LmodvohOSEwNbFQkysHE= Subject key identifier: 14:B9:B6:16:0A:1A:90:DB:6E:81:3E:65:D8:4C:9F:CE:6C:95:57:3A Authority key identifier: D6:E9:A2:1E:81:CA:12:EB:84:55:AD:EC:46:61:04:77:EA:5F:4F:4C Certificate issuer: /CN=D6E9A21E81CA12EB8455ADEC46610477EA5F4F4C Certificate serial: 32 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1umiHoHKEuuEVa3sRmEEd-pfT0w.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/1umiHoHKEuuEVa3sRmEEd-pfT0w.mft Manifest number: 0685 Signing time: Sun 20 Jul 2025 19:52:12 +0000 Manifest this update: Sun 20 Jul 2025 19:52:12 +0000 Manifest next update: Mon 04 Aug 2025 19:52:12 +0000 Files and hashes: 1: 1umiHoHKEuuEVa3sRmEEd-pfT0w.crl (hash: QJeNbnxtyEnAzT99W5yzSkfhIRj7bshgaPCSpmJxBhc=) 2: 70U0r1cRjSONpL_UHhiDiY958Po.roa (hash: XR3YC8d3lhP8lBrbsPXK1g+e6MM7UOOW7wzM6Nck/G8=) 3: dcaQuBE44AwLuNd6dxZPWYD9438.roa (hash: oDkGhTTo4qslT5MFOngO6/aJZ0TE6+XDFLgbx9j629o=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/1umiHoHKEuuEVa3sRmEEd-pfT0w.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/1umiHoHKEuuEVa3sRmEEd-pfT0w.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1umiHoHKEuuEVa3sRmEEd-pfT0w.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6E9A21E81CA12EB8455ADEC46610477EA5F4F4C Validity Not Before: Jul 15 01:33:16 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=14B9B6160A1A90DB6E813E65D84C9FCE6C95573A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8b:59:c5:0e:1e:ec:77:07:18:39:6c:f8:ae: a9:fa:87:07:a8:ef:22:52:bb:b2:31:ef:8e:7a:42: 2e:5e:86:9d:cb:6f:01:c1:c6:b6:eb:4d:e5:67:0d: af:ca:27:8a:d6:a7:3e:48:39:15:10:f2:72:e3:b3: 29:60:0e:10:f4:c5:b7:66:d9:ed:d5:e6:97:17:33: be:9d:d5:e9:8e:ba:86:fe:61:34:b8:e3:ea:d3:78: 47:f8:66:71:a2:38:64:0e:c2:d3:40:33:0e:71:8e: 29:17:ff:f4:3c:e0:de:6c:7c:12:c7:bf:fb:6a:c0: f0:8c:a2:eb:1e:f4:51:ee:18:69:75:c8:95:c3:44: 0c:88:cf:9a:60:ff:6c:fe:bc:a0:a9:00:77:3a:e6: 03:e0:3b:a3:b6:aa:15:ba:3a:2d:b2:b7:f6:37:62: a1:3b:76:71:f7:98:23:ca:74:e4:43:1c:f4:1c:9e: 9e:6e:83:11:89:34:8b:cb:8a:1c:12:ff:31:10:6c: fc:6c:89:21:ed:35:05:51:53:05:fb:77:27:f0:e0: 8d:e0:f3:e0:76:cd:d1:ee:fd:6a:1e:2c:6a:e9:e5: 51:5f:48:11:27:ec:68:33:b7:b3:a7:ea:a4:4c:83: c2:36:45:ff:38:17:14:2a:e7:da:2b:cf:34:7b:a4: 82:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B9:B6:16:0A:1A:90:DB:6E:81:3E:65:D8:4C:9F:CE:6C:95:57:3A X509v3 Authority Key Identifier: keyid:D6:E9:A2:1E:81:CA:12:EB:84:55:AD:EC:46:61:04:77:EA:5F:4F:4C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/1umiHoHKEuuEVa3sRmEEd-pfT0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1umiHoHKEuuEVa3sRmEEd-pfT0w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/1umiHoHKEuuEVa3sRmEEd-pfT0w.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:17:83:1c:5b:65:e4:53:c6:cc:4f:e6:96:09:f5:a2:43:7f: 91:df:c5:0d:8c:d1:69:71:fc:4f:6d:7f:25:a6:f9:e7:a5:2b: e3:4c:71:48:a5:b6:aa:5f:70:10:d1:67:d7:f0:be:64:29:bd: b4:4b:64:bf:f6:c1:8d:37:72:af:c4:4a:d7:75:bb:fc:b3:57: 59:8c:0b:ca:5b:46:85:02:b1:b4:7c:ca:63:ad:ab:05:74:89: d1:dd:af:17:cf:07:8e:6d:65:60:8a:09:db:0d:4b:c0:ac:78: 97:b0:d4:a3:b1:a6:1e:06:7e:57:e6:bb:45:d2:04:7f:c4:83: bd:44:89:e7:62:c9:61:3d:a1:d8:a9:8c:30:b5:7a:6e:99:e6: 16:bd:09:4d:cc:c4:e3:86:c6:bc:fd:82:be:d4:a9:69:c4:28: db:d6:1c:c5:3c:ce:5d:b2:0d:8f:9e:ea:a7:cd:5d:31:f3:ac: a4:fb:bd:a8:d8:13:ca:ab:ac:96:91:a1:36:2d:7a:f7:1a:4c: 58:dc:56:62:6d:54:88:ca:e6:3a:43:a3:a5:f5:34:5c:8e:ee: e6:59:55:ea:80:7e:c1:a6:3d:37:fb:e0:4a:7b:0b:da:8b:f6: 88:d5:01:4a:6f:d6:57:8f:61:4f:bb:0e:1a:87:8f:04:0b:97: fe:39:d4:2c -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENkU5 QTIxRTgxQ0ExMkVCODQ1NUFERUM0NjYxMDQ3N0VBNUY0RjRDMB4XDTI1MDcxNTAx MzMxNloXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoMTRCOUI2MTYwQTFBOTBE QjZFODEzRTY1RDg0QzlGQ0U2Qzk1NTczQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANCLWcUOHux3Bxg5bPiuqfqHB6jvIlK7sjHvjnpCLl6GnctvAcHG tutN5WcNr8onitanPkg5FRDycuOzKWAOEPTFt2bZ7dXmlxczvp3V6Y66hv5hNLjj 6tN4R/hmcaI4ZA7C00AzDnGOKRf/9Dzg3mx8Ese/+2rA8Iyi6x70Ue4YaXXIlcNE DIjPmmD/bP68oKkAdzrmA+A7o7aqFbo6LbK39jdioTt2cfeYI8p05EMc9Byenm6D EYk0i8uKHBL/MRBs/GyJIe01BVFTBft3J/DgjeDz4HbN0e79ah4saunlUV9IESfs aDO3s6fqpEyDwjZF/zgXFCrn2ivPNHukglcCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBQUubYWChqQ226BPmXYTJ/ObJVXOjAfBgNVHSMEGDAWgBTW6aIegcoS64RVrexG YQR36l9PTDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjMyLzF1bWlIb0hLRXV1RVZhM3NSbUVFZC1wZlQwdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzF1bWlIb0hLRXV1RVZhM3NSbUVFZC1w ZlQwdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMzIvMXVtaUhvSEtFdXVFVmEzc1JtRUVkLXBmVDB3Lm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGwXgxxbZeRTxsxP5pYJ9aJDf5HfxQ2M0Wlx/E9tfyWm+eelK+NMcUiltqpf cBDRZ9fwvmQpvbRLZL/2wY03cq/EStd1u/yzV1mMC8pbRoUCsbR8ymOtqwV0idHd rxfPB45tZWCKCdsNS8CseJew1KOxph4Gflfmu0XSBH/Eg71EiediyWE9odipjDC1 em6Z5ha9CU3MxOOGxrz9gr7UqWnEKNvWHMU8zl2yDY+e6qfNXTHzrKT7vajYE8qr rJaRoTYtevcaTFjcVmJtVIjK5jpDo6X1NFyO7uZZVeqAfsGmPTf74Ep7C9qL9ojV AUpv1lePYU+7DhqHjwQLl/451Cw= -----END CERTIFICATE-----Generated at Sun Jul 20 23:10:47 2025 by rpki-client