$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.mft File: OV2JJ1PBWV4Ha18QBloEhmHDB54.mft (raw, json) Hash identifier: +S/7gINKS04IyjcfoBpd0IkMQ6zD3XPzc5Er3a8Xlbs= Subject key identifier: C5:A9:65:0C:12:05:05:B0:7C:44:7A:F1:7B:31:39:1D:67:FE:5B:BB Authority key identifier: 39:5D:89:27:53:C1:59:5E:07:6B:5F:10:06:5A:04:86:61:C3:07:9E Certificate issuer: /CN=395D892753C1595E076B5F10065A048661C3079E Certificate serial: 5C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OV2JJ1PBWV4Ha18QBloEhmHDB54.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.mft Manifest number: 1402 Signing time: Sat 05 Apr 2025 11:33:23 +0000 Manifest this update: Sat 05 Apr 2025 11:33:23 +0000 Manifest next update: Sun 20 Apr 2025 11:33:23 +0000 Files and hashes: 1: Dg3Xx3zsJP9SYITqFNrAYCLK5xk.roa (hash: XJAdfG/VIdYc8rlQAvdjmxI91Oj7jJZlXNxPx+/7rsE=) 2: OV2JJ1PBWV4Ha18QBloEhmHDB54.crl (hash: MvxBHgCi7bE6Zi5ip3Cz7CSp4p1MKLzi0c1Rkg74MHg=) 3: nliHp25N6ClyucgJjptpOaTwmK8.roa (hash: kfkoE9BRd+7czxvR9LTowK8rWF/3hTUrvHicWzWy1mk=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OV2JJ1PBWV4Ha18QBloEhmHDB54.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=395D892753C1595E076B5F10065A048661C3079E Validity Not Before: Mar 15 01:33:56 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=C5A9650C120505B07C447AF17B31391D67FE5BBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:15:1f:91:30:bd:20:0e:45:74:5f:66:af:5c: a2:f1:92:ec:1c:9a:41:ee:64:5e:08:14:a8:9c:58: cc:28:65:74:d3:68:46:ca:6f:e8:96:eb:03:84:ef: ae:4c:63:f7:d0:9d:bb:4f:da:6e:ea:d2:89:f8:68: 6f:65:d5:b7:fe:cc:99:00:4a:5d:4c:ff:11:5e:5e: 65:55:14:b2:73:f2:59:f3:3b:36:8b:d2:26:88:ac: b0:2a:f6:0c:28:5a:ee:d6:c6:d0:2d:3f:5c:1d:8b: 6c:8d:8e:cc:49:68:55:d9:8b:64:d2:44:b7:99:c2: bf:e7:8d:f4:6b:17:0a:e4:35:c0:0b:5c:49:85:c2: 98:45:2c:13:42:56:cf:6a:05:68:a5:cb:88:db:81: 13:6f:2a:35:f8:f0:08:5a:aa:8f:03:a0:d4:a9:54: be:08:88:80:ba:22:8e:7a:c5:18:4f:5d:71:9f:83: 1e:4a:0a:43:30:b9:77:28:f4:63:3c:b7:0b:06:72: cc:6a:50:78:03:fc:9a:ed:eb:3a:0d:c5:78:41:a6: ef:db:7b:26:9a:1b:25:75:6f:46:cc:a4:e7:f7:f0: 96:d7:86:9d:80:be:58:87:99:80:98:77:73:75:d9: bb:c7:c3:78:59:95:30:86:e3:75:c6:23:e7:29:d6: ae:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A9:65:0C:12:05:05:B0:7C:44:7A:F1:7B:31:39:1D:67:FE:5B:BB X509v3 Authority Key Identifier: keyid:39:5D:89:27:53:C1:59:5E:07:6B:5F:10:06:5A:04:86:61:C3:07:9E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OV2JJ1PBWV4Ha18QBloEhmHDB54.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:10:51:58:6f:49:cd:bd:18:88:a8:48:92:3c:f9:5d:44:bb: 92:07:37:40:c3:52:a7:c5:87:8b:b8:82:14:ce:a5:fe:e1:5e: 6b:fb:48:19:52:aa:1d:a2:1f:f6:b9:a3:0a:0c:24:10:0c:80: 4b:53:57:83:5a:ce:55:57:8c:ae:9c:1f:3b:40:c5:f3:59:48: 9b:35:e7:22:33:25:3f:61:0d:0c:de:51:82:26:c3:de:59:05: c9:8d:dd:3d:91:6f:4b:fb:dc:a5:d1:c2:80:b0:73:e0:d0:55: 60:7d:f3:4b:d2:ec:f2:6c:2a:d7:8a:b6:7e:5b:87:b7:14:04: 89:5a:11:f5:d1:ae:67:3a:9f:cf:85:bf:39:83:c2:4c:9a:a9: 15:54:a2:ac:e1:24:e3:e5:3b:be:79:5e:5f:c6:28:e7:fd:ce: 7c:bf:03:8d:53:11:93:84:04:4a:c2:67:21:6d:17:d7:81:b3: c5:6c:fc:ac:5b:cf:72:19:a1:1a:bb:35:cf:b0:07:d5:2f:cc: a2:fa:7d:ae:85:73:fe:ca:88:40:5c:a4:d6:d1:53:80:a0:2c: fb:ba:2e:7d:db:79:2b:b4:83:50:14:41:8c:76:2d:4a:c0:f7: 01:73:60:a5:e9:12:12:54:95:c0:35:f2:64:d5:74:db:1e:b2: a9:6e:22:ca -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOTVE ODkyNzUzQzE1OTVFMDc2QjVGMTAwNjVBMDQ4NjYxQzMwNzlFMB4XDTI1MDMxNTAx MzM1NloXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoQzVBOTY1MEMxMjA1MDVC MDdDNDQ3QUYxN0IzMTM5MUQ2N0ZFNUJCQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKEVH5EwvSAORXRfZq9covGS7ByaQe5kXggUqJxYzChldNNoRspv 6JbrA4Tvrkxj99Cdu0/aburSifhob2XVt/7MmQBKXUz/EV5eZVUUsnPyWfM7NovS JoissCr2DCha7tbG0C0/XB2LbI2OzEloVdmLZNJEt5nCv+eN9GsXCuQ1wAtcSYXC mEUsE0JWz2oFaKXLiNuBE28qNfjwCFqqjwOg1KlUvgiIgLoijnrFGE9dcZ+DHkoK QzC5dyj0Yzy3CwZyzGpQeAP8mu3rOg3FeEGm79t7JpobJXVvRsyk5/fwlteGnYC+ WIeZgJh3c3XZu8fDeFmVMIbjdcYj5ynWrtECAwEAAaOCAkEwggI9MB0GA1UdDgQW BBTFqWUMEgUFsHxEevF7MTkdZ/5buzAfBgNVHSMEGDAWgBQ5XYknU8FZXgdrXxAG WgSGYcMHnjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNDUvT1YySkoxUEJXVjRIYTE4UUJsb0VobUhEQjU0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvT1YySkoxUEJXVjRIYTE4UUJsb0Vo bUhEQjU0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDQ1L09WMkpKMVBCV1Y0SGExOFFCbG9FaG1IREI1NC5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMEFFYb0nNvRiIqEiSPPldRLuSBzdAw1KnxYeLuIIUzqX+4V5r+0gZ Uqodoh/2uaMKDCQQDIBLU1eDWs5VV4yunB87QMXzWUibNeciMyU/YQ0M3lGCJsPe WQXJjd09kW9L+9yl0cKAsHPg0FVgffNL0uzybCrXirZ+W4e3FASJWhH10a5nOp/P hb85g8JMmqkVVKKs4STj5Tu+eV5fxijn/c58vwONUxGThARKwmchbRfXgbPFbPys W89yGaEauzXPsAfVL8yi+n2uhXP+yohAXKTW0VOAoCz7ui5923krtINQFEGMdi1K wPcBc2Cl6RISVJXANfJk1XTbHrKpbiLK -----END CERTIFICATE-----Generated at Sat Apr 5 17:33:23 2025 by rpki-client