$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft File: uOU8UkS3-adtX535-69h5XsuqTs.mft (raw, json) Hash identifier: f1yUhHejdA564e7HMzUlLgH4cnTedSoD1+Xw/SwM/GI= Subject key identifier: EF:2F:4A:82:80:F3:AC:92:05:AF:4C:D7:11:C6:3E:3E:68:98:A1:E7 Authority key identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B Certificate issuer: /CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B Certificate serial: 5B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft Manifest number: 160E Signing time: Sat 05 Apr 2025 13:47:23 +0000 Manifest this update: Sat 05 Apr 2025 13:47:23 +0000 Manifest next update: Sun 20 Apr 2025 13:47:23 +0000 Files and hashes: 1: O_RGIZAFz59qyCcmCLBPl1x1ut8.roa (hash: R+L0on/bfCIEZAYHyqZG+zyOXNhRamkO2cZdwmqe8Qc=) 2: X6bdYSXuTkb3OLZsF_J9hZVrWEk.roa (hash: BiAErEwTz9R+bJw7vxAhfQxs3AjtUAUXChLhrDrbHH8=) 3: nwhcBCNxX68lWdfehoInri0a1Fg.roa (hash: daBUu7L35iQhp1AGXZNYZT5U+jEeZARAW6XIjoLgPmM=) 4: pIHKM4G6po9acqaquHNuyVnX_uk.roa (hash: oOp0rnmHS75/WbdGfJ31w2jWHEddI4Mb+GQ1pEOIOtM=) 5: pM6tY8tuDj3VZpt0QsWcQ1Yrk7I.roa (hash: MN2d/F1BeVohp7Dfzg/+VmUkYJI9SDpUzMvqwMY4YGw=) 6: sCf0qI8J32zZgs2le8XWbpU5Z8U.roa (hash: ee+t4f12JejZkzbKEdtD1jC+Per9DG0K10/ArJ8rocg=) 7: tc9YL4JAXC3NqASONMQz7PScN58.roa (hash: FdZIpga27RivdGUq73NDukdkrlhxwjwgigUav316iRI=) 8: uOU8UkS3-adtX535-69h5XsuqTs.crl (hash: 6l3TJSnUvK2vLoFsMhmFGajAgab/e9HJFXRRqKlSstg=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B Validity Not Before: Mar 15 01:37:44 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=EF2F4A8280F3AC9205AF4CD711C63E3E6898A1E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:91:43:4c:8b:23:50:f5:6f:ea:0d:b1:01:c5: ec:2d:8f:2f:be:07:e8:cc:e0:0f:38:8a:47:86:a5: d4:cd:05:3a:f2:bd:74:31:69:0b:8a:7a:f4:4a:25: 68:e4:eb:2b:0c:68:33:71:0f:e3:06:97:fe:49:f5: 48:db:bb:ec:db:14:de:aa:e0:0a:05:03:fd:1f:8d: ae:ea:3b:74:d2:e8:49:9e:16:60:b5:8d:bd:0b:f1: 0f:6a:3e:9b:72:92:6a:a5:c8:e5:60:28:dd:08:dd: ba:b8:19:df:30:a3:18:a7:e6:2f:ee:17:61:08:01: a7:94:86:7a:27:0f:83:00:11:67:17:a8:c4:b9:5c: f8:94:c9:ee:e3:27:83:be:3f:f9:ad:32:11:61:a7: 2c:29:77:1d:40:3f:d3:f6:be:f4:64:38:94:e5:62: 43:de:55:08:7e:ea:f0:2d:f5:24:5f:69:fb:38:2a: f3:77:16:a8:2a:23:c4:77:8f:6a:d7:33:0a:b1:3f: bb:32:3d:95:75:68:80:f2:81:08:12:68:bf:b1:1e: ff:e3:ec:1a:10:dd:29:76:71:f3:19:f0:01:85:6d: ba:f2:77:23:ca:3d:62:e8:d8:67:4f:3d:f6:a9:52: 2b:e9:aa:f4:f2:7e:a3:d7:8d:5a:10:6f:2c:9e:07: 96:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:2F:4A:82:80:F3:AC:92:05:AF:4C:D7:11:C6:3E:3E:68:98:A1:E7 X509v3 Authority Key Identifier: keyid:B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:10:34:00:02:b4:42:95:92:76:49:f6:25:4b:20:00:4b:5b: 6e:95:fd:b3:77:c6:23:0b:48:85:d2:9e:c9:d0:9d:8c:be:21: 09:c4:ac:91:8b:7f:e2:cc:84:0f:07:64:21:e5:1f:63:02:ee: c6:db:db:4a:d4:50:8a:af:29:73:c6:42:31:6f:20:c6:0c:9c: e5:ec:8d:1c:95:3e:83:36:92:16:0b:29:f9:1b:e9:b1:58:65: 70:b3:fb:72:67:48:77:b5:56:27:62:d3:e3:bd:2b:eb:a1:9f: f5:8c:29:6b:93:36:05:89:d2:be:a2:b0:c6:d7:d7:fc:54:42: 8c:d7:7d:30:8a:6f:15:c0:00:22:51:4e:1d:42:e2:e2:0d:19: d4:b2:b4:95:e5:5d:d5:da:ea:46:30:17:ff:8a:b5:d9:65:bf: 2f:4a:3e:fa:3c:07:a2:ed:e2:97:c3:75:cc:38:80:eb:33:5d: a5:43:d6:6c:a8:61:06:91:fc:2d:b3:ad:97:75:52:f5:6e:c4: b0:4d:68:87:ea:b9:7b:d9:6f:6f:95:5e:ef:f5:a9:84:26:75: d5:65:7e:94:9c:d6:3d:50:80:aa:87:85:b4:f9:fd:8f:49:8a: 62:3c:70:42:cf:11:9d:42:58:64:bf:c9:2b:91:5f:e0:cb:38: e7:52:c4:f8 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEU1 M0M1MjQ0QjdGOUE3NkQ1RjlERjlGQkFGNjFFNTdCMkVBOTNCMB4XDTI1MDMxNTAx Mzc0NFoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoRUYyRjRBODI4MEYzQUM5 MjA1QUY0Q0Q3MTFDNjNFM0U2ODk4QTFFNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMiRQ0yLI1D1b+oNsQHF7C2PL74H6MzgDziKR4al1M0FOvK9dDFp C4p69EolaOTrKwxoM3EP4waX/kn1SNu77NsU3qrgCgUD/R+Nruo7dNLoSZ4WYLWN vQvxD2o+m3KSaqXI5WAo3QjdurgZ3zCjGKfmL+4XYQgBp5SGeicPgwARZxeoxLlc +JTJ7uMng74/+a0yEWGnLCl3HUA/0/a+9GQ4lOViQ95VCH7q8C31JF9p+zgq83cW qCojxHePatczCrE/uzI9lXVogPKBCBJov7Ee/+PsGhDdKXZx8xnwAYVtuvJ3I8o9 YujYZ0899qlSK+mq9PJ+o9eNWhBvLJ4Hlo8CAwEAAaOCAj8wggI7MB0GA1UdDgQW BBTvL0qCgPOskgWvTNcRxj4+aJih5zAfBgNVHSMEGDAWgBS45TxSRLf5p21fnfn7 r2Hley6pOzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjQ5MC91T1U4VWtTMy1hZHRYNTM1LTY5aDVYc3VxVHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91T1U4VWtTMy1hZHRYNTM1LTY5aDVY c3VxVHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjQ5MC91T1U4VWtTMy1hZHRYNTM1LTY5aDVYc3VxVHMubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEABhA0AAK0QpWSdkn2JUsgAEtbbpX9s3fGIwtIhdKeydCdjL4hCcSskYt/ 4syEDwdkIeUfYwLuxtvbStRQiq8pc8ZCMW8gxgyc5eyNHJU+gzaSFgsp+RvpsVhl cLP7cmdId7VWJ2LT470r66Gf9Ywpa5M2BYnSvqKwxtfX/FRCjNd9MIpvFcAAIlFO HULi4g0Z1LK0leVd1drqRjAX/4q12WW/L0o++jwHou3il8N1zDiA6zNdpUPWbKhh BpH8LbOtl3VS9W7EsE1oh+q5e9lvb5Ve7/WphCZ11WV+lJzWPVCAqoeFtPn9j0mK YjxwQs8RnUJYZL/JK5Ff4Ms451LE+A== -----END CERTIFICATE-----Generated at Sat Apr 5 17:27:52 2025 by rpki-client