$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft File: PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft (raw, json) Hash identifier: cASLOWc5DOA4/wGuG4oEsF9XNopof/qsGzdZi5WXYCc= Subject key identifier: 57:37:37:23:6B:69:B1:52:16:37:DB:F5:F1:8D:18:F1:4F:88:71:04 Authority key identifier: 3C:26:7D:02:8F:D9:9C:61:3E:3A:6F:42:54:15:D7:DB:7F:CD:1D:4A Certificate issuer: /CN=3C267D028FD99C613E3A6F425415D7DB7FCD1D4A Certificate serial: 26 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft Manifest number: 03F5 Signing time: Sat 05 Apr 2025 13:22:08 +0000 Manifest this update: Sat 05 Apr 2025 13:22:08 +0000 Manifest next update: Sun 20 Apr 2025 13:22:08 +0000 Files and hashes: 1: F4_6mMGK-HTepssz1B8N-bnlse0.roa (hash: axV7ZGLQ7OOMyJT4G1Pv+HssyML+VnNx/zerJPxUQl8=) 2: PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.crl (hash: cygWxSjkkX+5+xQt0JF+wt5kNbDi1QgQPjokp360yI0=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C267D028FD99C613E3A6F425415D7DB7FCD1D4A Validity Not Before: Mar 15 01:30:23 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=573737236B69B1521637DBF5F18D18F14F887104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a9:a1:5f:6c:fd:2e:5f:07:b4:71:68:91:4c: 6b:64:ee:2e:28:8d:d7:6b:21:84:af:df:bc:9c:5f: 01:98:fa:c8:92:07:ab:01:22:66:97:63:22:9a:a4: 8b:2e:38:df:24:85:e3:81:3c:9d:56:87:e5:fd:33: 11:df:23:fb:6f:26:48:e5:3e:03:8b:71:c9:ad:40: 76:8b:a6:49:06:4d:2b:1f:7d:14:69:a5:5b:8b:68: 44:30:42:fc:48:ec:1b:7a:9a:c2:06:ab:50:1f:f0: 25:37:ce:1f:f6:17:e8:97:07:2a:71:ae:d6:b8:3d: 9b:ea:67:25:19:3c:0f:f0:78:c8:37:43:0b:ab:bb: 0f:ff:c3:bf:66:f1:09:c4:ef:f7:c9:d7:25:be:9b: 0b:66:fc:a2:5a:8b:3c:ca:d9:80:50:25:a7:00:2d: 00:f0:52:d2:0a:e8:35:bd:be:11:5e:03:01:b9:cc: 48:1f:36:73:d0:06:c8:b5:20:d3:ea:54:43:e6:e2: 05:6b:f8:48:41:37:39:56:75:7a:b6:86:31:60:d0: c8:74:92:f4:45:20:12:a8:00:40:22:a1:de:4f:82: 5e:d8:e4:f4:6c:57:19:2d:2b:a0:d9:36:9f:ee:5c: c6:aa:e8:6b:1d:54:03:aa:fe:ad:f7:04:b9:7e:9d: b8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:37:37:23:6B:69:B1:52:16:37:DB:F5:F1:8D:18:F1:4F:88:71:04 X509v3 Authority Key Identifier: keyid:3C:26:7D:02:8F:D9:9C:61:3E:3A:6F:42:54:15:D7:DB:7F:CD:1D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:d4:a1:7a:a2:0d:f3:cc:08:4c:d7:98:95:e9:24:f7:63:65: 51:12:c4:11:1e:83:1c:99:49:5e:72:ee:cc:80:5f:ac:97:61: 26:9a:ec:de:e3:cc:83:18:21:d3:fa:64:67:38:6a:8d:64:14: 0b:d8:8a:a9:c2:b1:e2:09:0e:c3:56:64:ae:f2:ca:91:a4:f5: fa:e4:3a:79:34:f7:87:22:ee:79:19:e5:6a:48:a7:41:b1:9e: 38:3d:1e:5a:72:c6:02:5b:ed:9f:dd:20:65:dd:45:92:61:7a: 05:4e:22:98:e4:03:cd:3f:47:bf:54:6b:c6:3f:c9:b5:9e:53: a8:76:76:ca:c8:3b:7a:9e:14:2e:85:7f:d6:c4:e9:ce:42:14: 5d:2b:50:e4:af:01:ef:6f:f5:14:5a:1a:a4:36:79:95:56:af: 15:be:8a:76:f5:13:8d:c6:31:97:1c:32:11:8c:22:7e:3a:cd: d9:ca:41:93:70:71:9c:7c:d6:79:6a:d9:d3:a0:e7:2b:15:fc: a4:e7:f8:df:33:fe:fd:0e:04:2f:80:70:0c:ef:87:50:eb:da: b3:8f:c9:7b:bb:5d:b2:1b:4d:72:3a:d7:52:a1:92:b7:db:e6: 5d:4b:56:a8:33:1f:a1:ce:99:42:bf:4b:74:38:50:55:24:d8: 54:42:c5:ef -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBJjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQzI2 N0QwMjhGRDk5QzYxM0UzQTZGNDI1NDE1RDdEQjdGQ0QxRDRBMB4XDTI1MDMxNTAx MzAyM1oXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoNTczNzM3MjM2QjY5QjE1 MjE2MzdEQkY1RjE4RDE4RjE0Rjg4NzEwNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM6poV9s/S5fB7RxaJFMa2TuLiiN12shhK/fvJxfAZj6yJIHqwEi ZpdjIpqkiy443ySF44E8nVaH5f0zEd8j+28mSOU+A4txya1AdoumSQZNKx99FGml W4toRDBC/EjsG3qawgarUB/wJTfOH/YX6JcHKnGu1rg9m+pnJRk8D/B4yDdDC6u7 D//Dv2bxCcTv98nXJb6bC2b8olqLPMrZgFAlpwAtAPBS0groNb2+EV4DAbnMSB82 c9AGyLUg0+pUQ+biBWv4SEE3OVZ1eraGMWDQyHSS9EUgEqgAQCKh3k+CXtjk9GxX GS0roNk2n+5cxqroax1UA6r+rfcEuX6duEECAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRXNzcja2mxUhY32/XxjRjxT4hxBDAfBgNVHSMEGDAWgBQ8Jn0Cj9mcYT46b0JU Fdfbf80dSjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyNDUvUENaOUFvX1puR0UtT205Q1ZCWFgyM19OSFVvLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvUENaOUFvX1puR0UtT205Q1ZCWFgy M19OSFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjQ1L1BDWjlBb19abkdFLU9tOUNWQlhYMjNfTkhVby5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA1KF6og3zzAhM15iV6ST3Y2VREsQRHoMcmUlecu7MgF+sl2Emmuze 48yDGCHT+mRnOGqNZBQL2IqpwrHiCQ7DVmSu8sqRpPX65Dp5NPeHIu55GeVqSKdB sZ44PR5acsYCW+2f3SBl3UWSYXoFTiKY5APNP0e/VGvGP8m1nlOodnbKyDt6nhQu hX/WxOnOQhRdK1DkrwHvb/UUWhqkNnmVVq8Vvop29RONxjGXHDIRjCJ+Os3ZykGT cHGcfNZ5atnToOcrFfyk5/jfM/79DgQvgHAM74dQ69qzj8l7u12yG01yOtdSoZK3 2+ZdS1aoMx+hzplCv0t0OFBVJNhUQsXv -----END CERTIFICATE-----Generated at Sat Apr 5 19:56:28 2025 by rpki-client