$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.mft File: 4qAcFfKuEP_hot-5OfujIiLIHos.mft (raw, json) Hash identifier: +O05LvuToEFFyi+Yec+JL3wxYQ3ZKH+iM6oEDtvWFHU= Subject key identifier: C6:CB:79:46:F6:B7:FE:B9:3E:DC:5D:C4:13:3E:65:74:03:EF:A9:9B Authority key identifier: E2:A0:1C:15:F2:AE:10:FF:E1:A2:DF:B9:39:FB:A3:22:22:C8:1E:8B Certificate issuer: /CN=E2A01C15F2AE10FFE1A2DFB939FBA32222C81E8B Certificate serial: 14 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qAcFfKuEP_hot-5OfujIiLIHos.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.mft Manifest number: 03E0 Signing time: Wed 16 Apr 2025 01:41:24 +0000 Manifest this update: Wed 16 Apr 2025 01:41:24 +0000 Manifest next update: Thu 01 May 2025 01:41:24 +0000 Files and hashes: 1: 4qAcFfKuEP_hot-5OfujIiLIHos.crl (hash: tEE+s6YPpmKhHMzOqEi/4TWfrOt/o8HsoN2AdNUaDj4=) 2: GBW_VD7DOK2r1RAwqUE501IE0hw.roa (hash: b8qF1fCMRyn1zHloCjm2VRm+d5A9XnfJA4ozLK4JvKI=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qAcFfKuEP_hot-5OfujIiLIHos.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2A01C15F2AE10FFE1A2DFB939FBA32222C81E8B Validity Not Before: Apr 15 01:31:30 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=C6CB7946F6B7FEB93EDC5DC4133E657403EFA99B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4a:e7:4a:64:d4:83:bc:9a:e7:1a:43:9c:fb: 2c:b7:2c:34:a2:17:09:61:30:55:8f:07:cd:e0:b2: 7f:44:cc:2f:57:a1:f2:9e:fa:7b:96:f8:4a:df:fb: 19:d6:44:07:47:68:54:48:49:8b:0d:cc:61:77:78: b3:11:e7:06:f0:2a:90:66:35:6e:d5:bb:96:51:ce: e6:5e:62:5c:65:6f:85:18:b3:4f:f3:d1:2a:87:5b: 3d:3a:b4:25:49:eb:7c:b8:67:3e:d8:d3:86:f4:26: d7:ce:c5:29:6a:bc:dd:50:71:18:97:7a:75:8a:a3: b5:eb:d3:87:3b:98:e5:a2:a7:06:e7:c5:a9:f6:5d: 27:5f:19:da:94:62:34:0e:a5:f1:c5:71:35:07:82: 17:fb:ac:f8:7b:63:8c:0e:c5:93:b0:ab:84:ec:22: a1:4c:6e:23:1a:3c:bb:f8:14:eb:3d:21:97:9e:da: dd:3a:92:69:98:03:40:2e:eb:9a:69:bb:d5:ea:b9: 4d:92:3b:82:d7:36:34:48:62:3f:d2:65:e7:83:f6: e5:27:7a:e4:47:3d:37:0b:13:ac:c1:24:8a:45:fa: 87:8d:20:10:d2:4b:45:b4:f1:13:28:06:8f:98:c6: 75:ee:8a:83:5a:37:d1:29:3f:25:5c:f0:31:03:38: b6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CB:79:46:F6:B7:FE:B9:3E:DC:5D:C4:13:3E:65:74:03:EF:A9:9B X509v3 Authority Key Identifier: keyid:E2:A0:1C:15:F2:AE:10:FF:E1:A2:DF:B9:39:FB:A3:22:22:C8:1E:8B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qAcFfKuEP_hot-5OfujIiLIHos.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:b4:26:e4:dc:7a:43:0a:21:8d:04:26:85:8e:9a:00:88:a1: d3:e6:36:ac:f8:5c:d0:6a:59:dd:38:21:c3:3e:7d:37:1f:29: c5:fd:52:00:85:b5:41:5e:7b:ba:69:6f:1a:3b:41:f1:3a:d0: a6:f0:46:e5:c7:11:07:79:d6:af:cc:05:f1:a0:5f:6e:db:a9: 64:ea:bc:13:28:0b:73:7e:32:f5:a2:87:3f:d3:58:a4:76:b4: 05:64:f3:e0:3d:b5:3a:c3:a8:4f:50:69:a9:41:70:4d:f8:11: f5:e9:d5:8b:f4:01:89:de:07:98:31:de:a4:7f:00:4e:95:00: f0:a2:bc:08:ba:7c:44:d7:40:29:4b:24:4a:bb:24:9e:dc:85: 35:80:92:c8:73:7d:25:b5:bf:bc:9d:1a:b2:0d:1b:e9:5e:18: da:be:7c:5a:c1:a1:9e:f7:7c:b2:cf:b3:8c:eb:5f:1c:1d:b9: ec:3a:d3:ea:1c:af:4c:c2:2e:6a:8c:fb:3c:ed:53:9b:f0:50: 34:56:09:bd:0a:1a:60:9a:cf:1c:a6:b1:8f:94:ae:64:ef:e3: ed:70:b9:7c:14:92:8d:9b:e5:0d:16:50:3e:11:81:c4:50:7f: bc:2e:98:1b:b9:84:9c:f2:85:7e:da:62:e2:1f:e7:7a:a3:5a: be:4c:e1:20 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMkEw MUMxNUYyQUUxMEZGRTFBMkRGQjkzOUZCQTMyMjIyQzgxRThCMB4XDTI1MDQxNTAx MzEzMFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoQzZDQjc5NDZGNkI3RkVC OTNFREM1REM0MTMzRTY1NzQwM0VGQTk5QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANhK50pk1IO8mucaQ5z7LLcsNKIXCWEwVY8HzeCyf0TML1eh8p76 e5b4St/7GdZEB0doVEhJiw3MYXd4sxHnBvAqkGY1btW7llHO5l5iXGVvhRizT/PR KodbPTq0JUnrfLhnPtjThvQm187FKWq83VBxGJd6dYqjtevThzuY5aKnBufFqfZd J18Z2pRiNA6l8cVxNQeCF/us+HtjjA7Fk7CrhOwioUxuIxo8u/gU6z0hl57a3TqS aZgDQC7rmmm71eq5TZI7gtc2NEhiP9Jl54P25Sd65Ec9NwsTrMEkikX6h40gENJL RbTxEygGj5jGde6Kg1o30Sk/JVzwMQM4tssCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBTGy3lG9rf+uT7cXcQTPmV0A++pmzAfBgNVHSMEGDAWgBTioBwV8q4Q/+Gi37k5 +6MiIsgeizAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxMTIvNHFBY0ZmS3VFUF9ob3QtNU9mdWpJaUxJSG9zLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNHFBY0ZmS3VFUF9ob3QtNU9mdWpJ aUxJSG9zLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTEyLzRxQWNGZkt1RVBfaG90LTVPZnVqSWlMSUhvcy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDtCbk3HpDCiGNBCaFjpoAiKHT5jas+FzQalndOCHDPn03HynF/VIA hbVBXnu6aW8aO0HxOtCm8EblxxEHedavzAXxoF9u26lk6rwTKAtzfjL1ooc/01ik drQFZPPgPbU6w6hPUGmpQXBN+BH16dWL9AGJ3geYMd6kfwBOlQDworwIunxE10Ap SyRKuySe3IU1gJLIc30ltb+8nRqyDRvpXhjavnxawaGe93yyz7OM618cHbnsOtPq HK9Mwi5qjPs87VOb8FA0Vgm9Chpgms8cprGPlK5k7+PtcLl8FJKNm+UNFlA+EYHE UH+8LpgbuYSc8oV+2mLiH+d6o1q+TOEg -----END CERTIFICATE-----Generated at Wed Apr 16 06:09:27 2025 by rpki-client