$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft File: NkR8af6TQwpO9eshfECeu1tna7k.mft (raw, json) Hash identifier: RVVPu9tdww8aGpn+5AYufUXr3Wh0gAnWof+j/rKlaww= Subject key identifier: 65:0B:E1:24:41:62:0D:F9:7B:EF:DF:B7:F0:5D:61:EB:BD:B3:DC:76 Authority key identifier: 36:44:7C:69:FE:93:43:0A:4E:F5:EB:21:7C:40:9E:BB:5B:67:6B:B9 Certificate issuer: /CN=36447C69FE93430A4EF5EB217C409EBB5B676BB9 Certificate serial: 25 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft Manifest number: 03F1 Signing time: Sat 05 Apr 2025 13:22:12 +0000 Manifest this update: Sat 05 Apr 2025 13:22:12 +0000 Manifest next update: Sun 20 Apr 2025 13:22:12 +0000 Files and hashes: 1: NkR8af6TQwpO9eshfECeu1tna7k.crl (hash: P8DJkU2xsCAKjXRL9lUj/zWpf/v+xMHSDEhz9p/H+tg=) 2: ZbP_Zfa2mwHq82S6XSeyWX_NCCE.roa (hash: ThE65gZNrtvB6ORxoBbpvsXbWhOf17z9TZN9IB4gOGU=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36447C69FE93430A4EF5EB217C409EBB5B676BB9 Validity Not Before: Mar 15 01:30:31 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=650BE12441620DF97BEFDFB7F05D61EBBDB3DC76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5e:73:57:a6:3f:73:ca:54:d2:5f:23:96:dc: b9:19:13:03:b1:1f:9c:e3:ce:83:2b:05:a6:e2:b9: d8:49:6c:f1:62:ee:e6:a6:ea:8a:20:d1:09:ee:70: 98:4d:2f:bf:96:5f:fc:33:ca:df:4a:57:3d:59:4c: 89:6f:d2:bc:2d:7d:87:d5:b6:e3:48:bc:98:18:81: 45:df:28:82:23:d7:ff:9d:36:d6:f9:c8:64:84:fe: 5c:62:7d:c3:ff:f7:e1:10:40:f1:34:51:cc:cf:89: 74:d1:a5:98:26:62:15:15:7b:30:f8:e6:46:bc:87: 0d:11:a0:c2:d4:87:fa:f1:cb:ed:c3:14:15:87:bd: eb:68:ce:89:d0:b7:92:95:1c:10:af:6d:ad:b4:18: 31:40:db:56:37:48:9e:3c:3a:cd:35:e0:3e:44:2a: 1e:df:50:4f:d1:8b:3b:bb:bd:7e:3c:8c:f1:ee:b1: d6:e8:55:f0:f2:b1:43:a8:cb:eb:cb:18:20:67:6c: bd:e4:d3:82:9f:ed:49:74:8d:ed:df:4c:55:88:2f: 27:44:4b:04:64:7c:40:f8:59:1b:a1:a3:54:1e:f6: 26:92:25:61:56:33:6b:8a:2d:3b:83:4e:4b:98:7c: 62:02:dc:4d:16:6a:eb:71:2f:33:b9:05:b2:26:0f: 50:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0B:E1:24:41:62:0D:F9:7B:EF:DF:B7:F0:5D:61:EB:BD:B3:DC:76 X509v3 Authority Key Identifier: keyid:36:44:7C:69:FE:93:43:0A:4E:F5:EB:21:7C:40:9E:BB:5B:67:6B:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:78:7e:de:76:41:8e:b0:0e:a3:99:48:50:8d:bf:9b:dc:ee: 6a:99:39:11:a0:68:ba:70:ba:35:9c:33:d4:62:a2:d1:4a:f2: 47:4d:0e:25:57:03:6f:23:ef:8d:a0:65:86:69:1b:a0:23:cf: 6b:a9:c2:da:65:bb:29:7d:f9:de:f0:4d:1f:ca:10:05:dc:59: b6:e5:e3:43:a1:77:ae:ea:d8:cf:d6:7f:2d:fc:a0:ba:df:31: 4d:b2:ec:f9:48:19:4e:ac:c8:b6:6b:41:82:54:16:27:a4:15: 89:d0:a6:51:d2:65:59:97:37:3b:47:bc:b3:b2:1f:a1:c6:41: 46:9f:65:67:fd:bb:a1:9d:04:59:fd:33:e1:90:b1:70:3c:c1: 91:0d:3e:83:f2:8a:b7:49:6f:8f:7a:d0:37:85:30:a8:34:7d: 6e:35:37:11:56:28:3e:f0:21:60:d5:2d:be:9a:b7:e9:4d:b9: db:c8:b8:18:55:d3:b1:cf:c4:5e:9e:a7:43:55:30:fd:85:65: 32:b4:1b:64:5d:ab:67:fb:89:e8:82:2c:23:38:a4:cf:66:b8: a3:fb:9c:ca:59:5a:72:4b:5c:d0:8c:0b:f2:11:c6:0f:ae:38: be:ab:04:75:7e:e3:67:88:7f:3a:9f:d8:a4:5d:7f:6b:c0:a1: 05:c4:3c:75 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNjQ0 N0M2OUZFOTM0MzBBNEVGNUVCMjE3QzQwOUVCQjVCNjc2QkI5MB4XDTI1MDMxNTAx MzAzMVoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoNjUwQkUxMjQ0MTYyMERG OTdCRUZERkI3RjA1RDYxRUJCREIzREM3NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ1ec1emP3PKVNJfI5bcuRkTA7EfnOPOgysFpuK52Els8WLu5qbq iiDRCe5wmE0vv5Zf/DPK30pXPVlMiW/SvC19h9W240i8mBiBRd8ogiPX/5021vnI ZIT+XGJ9w//34RBA8TRRzM+JdNGlmCZiFRV7MPjmRryHDRGgwtSH+vHL7cMUFYe9 62jOidC3kpUcEK9trbQYMUDbVjdInjw6zTXgPkQqHt9QT9GLO7u9fjyM8e6x1uhV 8PKxQ6jL68sYIGdsveTTgp/tSXSN7d9MVYgvJ0RLBGR8QPhZG6GjVB72JpIlYVYz a4otO4NOS5h8YgLcTRZq63EvM7kFsiYPUMsCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRlC+EkQWIN+Xvv37fwXWHrvbPcdjAfBgNVHSMEGDAWgBQ2RHxp/pNDCk716yF8 QJ67W2druTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxMzgvTmtSOGFmNlRRd3BPOWVzaGZFQ2V1MXRuYTdrLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTmtSOGFmNlRRd3BPOWVzaGZFQ2V1 MXRuYTdrLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTM4L05rUjhhZjZUUXdwTzllc2hmRUNldTF0bmE3ay5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5eH7edkGOsA6jmUhQjb+b3O5qmTkRoGi6cLo1nDPUYqLRSvJHTQ4l VwNvI++NoGWGaRugI89rqcLaZbspffne8E0fyhAF3Fm25eNDoXeu6tjP1n8t/KC6 3zFNsuz5SBlOrMi2a0GCVBYnpBWJ0KZR0mVZlzc7R7yzsh+hxkFGn2Vn/buhnQRZ /TPhkLFwPMGRDT6D8oq3SW+PetA3hTCoNH1uNTcRVig+8CFg1S2+mrfpTbnbyLgY VdOxz8RenqdDVTD9hWUytBtkXatn+4nogiwjOKTPZrij+5zKWVpyS1zQjAvyEcYP rji+qwR1fuNniH86n9ikXX9rwKEFxDx1 -----END CERTIFICATE-----Generated at Sat Apr 5 17:22:45 2025 by rpki-client