$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30213/lc-jPvTzYVDthmuFmJXhodovoaE.mft File: lc-jPvTzYVDthmuFmJXhodovoaE.mft (raw, json) Hash identifier: Ha2aWaYoDjaQlcKFXk+wwsYeo+nyWgrxWVLqXIVIM70= Subject key identifier: 9E:7C:15:83:50:BC:5B:71:DC:F6:6F:A4:73:DA:39:2B:8D:4F:09:B1 Authority key identifier: 95:CF:A3:3E:F4:F3:61:50:ED:86:6B:85:98:95:E1:A1:DA:2F:A1:A1 Certificate issuer: /CN=95CFA33EF4F36150ED866B859895E1A1DA2FA1A1 Certificate serial: 1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lc-jPvTzYVDthmuFmJXhodovoaE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30213/lc-jPvTzYVDthmuFmJXhodovoaE.mft Manifest number: 0628 Signing time: Tue 22 Jul 2025 16:58:03 +0000 Manifest this update: Tue 22 Jul 2025 16:58:03 +0000 Manifest next update: Wed 06 Aug 2025 16:58:03 +0000 Files and hashes: 1: U6gFzInwl4yY1yZ9euSipLcTIPM.roa (hash: qPuD/1UnaNSwLxdPvvsR5IoPEUwvg2NdDH1o2TVSpw4=) 2: lc-jPvTzYVDthmuFmJXhodovoaE.crl (hash: GZsRkALnRJhtmIHjM03pY3SXJgPA4jGpUO5KLTsDZnI=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30213/lc-jPvTzYVDthmuFmJXhodovoaE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30213/lc-jPvTzYVDthmuFmJXhodovoaE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lc-jPvTzYVDthmuFmJXhodovoaE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 19:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95CFA33EF4F36150ED866B859895E1A1DA2FA1A1 Validity Not Before: Jul 15 01:42:42 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=9E7C158350BC5B71DCF66FA473DA392B8D4F09B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:29:1c:48:59:8e:f7:8b:d3:3d:28:15:40:2a: 6e:dc:2e:ea:5b:ff:83:c9:15:1d:6a:91:36:c6:a6: 47:5e:b0:f2:0b:df:4a:29:aa:50:2d:6c:e1:31:f3: 14:5f:bf:c2:c6:55:28:8a:28:65:db:51:3f:92:cf: 6f:e4:81:12:ec:13:14:b3:98:22:f8:4a:67:e7:58: fa:e1:f3:4e:18:5a:ff:c5:df:c6:fe:f2:03:a3:51: a5:e1:fe:e6:dd:90:36:43:36:e6:d7:3d:81:00:9a: ad:1c:62:c5:7c:19:35:92:df:3c:23:c4:9d:fc:1b: ed:90:b4:e8:44:c2:c6:a9:11:b0:dd:8d:5e:6f:21: 93:32:76:2a:a6:b2:45:3e:84:e6:43:61:0c:0b:1a: f0:4e:21:5f:2b:85:91:d1:7f:6d:a4:42:c0:0c:f1: ec:19:bf:98:12:08:ae:c6:7f:06:29:c2:81:42:32: 53:5c:ed:44:49:ca:53:88:56:2f:67:c6:4e:f4:37: 8d:ca:66:73:71:a8:ad:cf:2c:30:13:22:36:4c:6b: d4:0f:1e:89:c7:04:d3:dd:03:7e:00:d9:2e:e9:16: a8:ed:eb:46:ce:19:9c:52:9d:a5:eb:03:7b:f0:dd: 96:ae:ee:6f:24:0c:39:9f:14:a0:df:21:fd:63:6e: 7b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7C:15:83:50:BC:5B:71:DC:F6:6F:A4:73:DA:39:2B:8D:4F:09:B1 X509v3 Authority Key Identifier: keyid:95:CF:A3:3E:F4:F3:61:50:ED:86:6B:85:98:95:E1:A1:DA:2F:A1:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30213/lc-jPvTzYVDthmuFmJXhodovoaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lc-jPvTzYVDthmuFmJXhodovoaE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30213/lc-jPvTzYVDthmuFmJXhodovoaE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:b2:6d:ce:88:0d:e5:ab:ef:02:b9:24:16:a4:89:85:15:b0: 83:a7:4f:da:de:38:30:54:9c:5a:2b:4f:b2:44:a8:9d:46:f4: 9f:72:8e:d7:3f:a3:22:1a:62:f1:a6:23:7f:95:04:ca:c2:6d: 41:d6:c1:33:01:d3:3b:81:5e:29:34:b2:76:c9:87:1a:ed:bf: be:0d:8a:77:a7:e0:6d:d7:ff:cb:f5:6a:4c:cb:ae:38:54:a4: 84:ca:7e:03:f6:e5:18:58:8c:dc:6f:15:a1:5d:f0:dc:a6:62: 42:a4:ae:00:59:b8:af:ee:aa:8f:e7:5a:fc:67:8f:67:e5:58: e5:64:03:33:c7:6a:ea:b4:40:54:eb:d8:46:47:4c:72:25:b4: 2c:93:5d:64:93:ab:a2:c4:a4:aa:68:57:69:3c:14:60:1a:05: 2a:c5:9a:14:6c:0a:d1:b4:ab:35:23:15:80:b5:53:43:d6:c2: 32:5a:d5:68:3d:4f:5b:1c:c2:e5:03:15:24:b5:4e:71:96:95: 20:14:24:f1:f5:91:5f:c8:0b:a7:66:bd:7b:3a:a7:d4:90:ed: 34:6c:19:0b:67:d9:d0:ff:5d:d0:29:5e:f8:eb:c3:3e:46:87: 94:99:e0:80:82:54:af:3b:77:64:3d:e8:1c:fb:c5:0d:4d:ad: 6d:58:cd:4a -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NUNG QTMzRUY0RjM2MTUwRUQ4NjZCODU5ODk1RTFBMURBMkZBMUExMB4XDTI1MDcxNTAx NDI0MloXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoOUU3QzE1ODM1MEJDNUI3 MURDRjY2RkE0NzNEQTM5MkI4RDRGMDlCMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM0pHEhZjveL0z0oFUAqbtwu6lv/g8kVHWqRNsamR16w8gvfSimq UC1s4THzFF+/wsZVKIooZdtRP5LPb+SBEuwTFLOYIvhKZ+dY+uHzThha/8Xfxv7y A6NRpeH+5t2QNkM25tc9gQCarRxixXwZNZLfPCPEnfwb7ZC06ETCxqkRsN2NXm8h kzJ2KqayRT6E5kNhDAsa8E4hXyuFkdF/baRCwAzx7Bm/mBIIrsZ/BinCgUIyU1zt REnKU4hWL2fGTvQ3jcpmc3Gorc8sMBMiNkxr1A8eiccE090DfgDZLukWqO3rRs4Z nFKdpesDe/Ddlq7ubyQMOZ8UoN8h/WNue5ECAwEAAaOCAkEwggI9MB0GA1UdDgQW BBSefBWDULxbcdz2b6Rz2jkrjU8JsTAfBgNVHSMEGDAWgBSVz6M+9PNhUO2Ga4WY leGh2i+hoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyMTMvbGMtalB2VHpZVkR0aG11Rm1KWGhvZG92b2FFLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbGMtalB2VHpZVkR0aG11Rm1KWGhv ZG92b2FFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjEzL2xjLWpQdlR6WVZEdGhtdUZtSlhob2Rvdm9hRS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXsm3OiA3lq+8CuSQWpImFFbCDp0/a3jgwVJxaK0+yRKidRvSfco7X P6MiGmLxpiN/lQTKwm1B1sEzAdM7gV4pNLJ2yYca7b++DYp3p+Bt1//L9WpMy644 VKSEyn4D9uUYWIzcbxWhXfDcpmJCpK4AWbiv7qqP51r8Z49n5VjlZAMzx2rqtEBU 69hGR0xyJbQsk11kk6uixKSqaFdpPBRgGgUqxZoUbArRtKs1IxWAtVND1sIyWtVo PU9bHMLlAxUktU5xlpUgFCTx9ZFfyAunZr17OqfUkO00bBkLZ9nQ/13QKV7468M+ RoeUmeCAglSvO3dkPegc+8UNTa1tWM1K -----END CERTIFICATE-----Generated at Tue Jul 22 20:44:40 2025 by rpki-client