$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft File: HLYLQKmK6uBUyu5MCct9murePp0.mft (raw, json) Hash identifier: uO7QJEttY5/hVnymT5iYgIEUcAoOuZibSkwrfyHDzNI= Subject key identifier: F1:54:AA:E4:79:00:D4:E8:D8:99:B4:0C:52:54:DB:C4:1E:C5:D5:97 Authority key identifier: 1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D Certificate issuer: /CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D Certificate serial: 23 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft Manifest number: 03D2 Signing time: Sat 05 Apr 2025 16:42:22 +0000 Manifest this update: Sat 05 Apr 2025 16:42:22 +0000 Manifest next update: Sun 20 Apr 2025 16:42:22 +0000 Files and hashes: 1: C6E29iHs1uMwMC6pdLsCCKwI8RI.roa (hash: 0KcEIuzE4Ed2TtJkTu+Y2lVdDV8+CM2spycW7+pKT6I=) 2: HLYLQKmK6uBUyu5MCct9murePp0.crl (hash: oUWfcQ3PMBy9UwFjVdLQx04FwI/QvEsFJNK8L+YbTag=) 3: IY1RX0JknF2Y5qLutazoeAOA0qc.roa (hash: Gnloof5djp0rHZb1ThN4byDXIDozyp1x1urBkTjnIwk=) 4: a8vTnHEuXQdQMz1hdsqJhpLWovs.roa (hash: IsHdrXMLkx2xctsVKiNrEbXqUcKB0pTNkb8UnLWpGWg=) 5: rnPbuexy18dKAU1HlJbtLjOOwds.roa (hash: cvo3OBLyimHwFRLfidLhggBCYWljixIxtfuafJkqXf4=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D Validity Not Before: Mar 15 01:31:08 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=F154AAE47900D4E8D899B40C5254DBC41EC5D597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8a:53:94:51:04:9a:58:11:5b:0f:c0:6b:65: fd:8d:99:d7:37:08:89:14:c7:02:a3:9c:db:e2:f9: 7c:37:37:d0:7f:1d:d1:d8:f8:b6:20:0c:c5:02:ec: f6:33:5e:4d:51:eb:f5:60:f2:ca:9e:11:3a:5b:d0: 48:a0:86:c5:4a:56:d0:55:df:78:44:a3:7a:0e:d8: a5:99:08:39:a9:bb:77:fc:54:10:79:09:66:e0:f4: 1f:9c:bf:77:e6:99:91:cd:06:e7:61:6b:bc:6b:de: f9:17:f1:5c:7f:ed:3a:9a:8d:41:f0:a6:83:16:18: 48:a8:84:39:94:ed:60:9e:a6:01:a8:b7:6f:d8:94: d7:28:a9:41:b4:f1:99:dc:38:b2:5e:0a:0a:96:7c: 51:f5:bf:ab:03:8d:fa:3f:2a:b6:b9:2b:81:2e:90: ad:44:eb:03:41:af:e6:9a:65:eb:44:12:8d:e4:c7: 0f:b1:68:1a:10:73:7f:97:b1:95:6f:a2:9a:fe:0f: 50:5f:49:c6:03:13:9f:7c:e0:90:b6:88:fc:84:35: 2c:aa:fa:00:59:da:d6:98:f1:a2:a4:90:8d:45:65: 2a:10:03:69:82:97:d4:1a:0c:be:8e:f7:35:c9:b9: 0b:16:9f:8a:7a:71:ef:f9:e7:1a:f6:6f:3a:f2:41: 34:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:54:AA:E4:79:00:D4:E8:D8:99:B4:0C:52:54:DB:C4:1E:C5:D5:97 X509v3 Authority Key Identifier: keyid:1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:b5:22:e0:c8:a5:1b:8c:c1:6b:6c:37:b6:10:b3:e2:67:08: eb:5f:33:b0:dd:2c:98:6b:78:a9:9f:df:2c:df:46:9e:0b:8d: f5:9a:04:27:b8:22:fe:5c:6e:64:b2:08:d4:e2:07:6c:5c:f6: c2:be:1e:fe:f3:6f:97:75:3f:64:f0:95:44:a1:20:9a:61:59: ea:a0:05:0d:86:87:b5:57:5e:65:9b:06:df:2d:fc:34:db:27: d1:61:4a:f8:09:c7:2e:74:6c:bb:b4:fc:50:8e:2b:7c:4c:63: 5a:7f:7c:c3:24:90:e7:a3:7e:ad:ed:88:9b:4a:55:30:39:8e: a8:e6:54:bc:ae:26:14:ce:8c:14:f4:14:7e:08:9b:b5:e3:9e: a9:64:c5:d3:c1:c7:c3:4a:ef:29:3f:37:2e:39:09:73:06:93: cc:6c:fd:6c:4e:66:b8:10:be:0f:e2:7f:45:15:03:89:45:b5: 3d:57:fd:e5:08:db:29:c7:d3:2a:8e:d3:52:6d:d3:39:8c:1f: c6:47:0f:19:30:f8:54:e1:bb:9e:b6:a0:56:3d:03:55:f9:a0: 46:61:99:67:f8:c4:fc:f3:f4:1c:12:c4:e4:87:b6:22:4c:e5: a4:dd:2c:3c:dd:35:e3:65:42:8d:be:bf:6c:27:40:62:e0:cf: 46:8f:ed:9c -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQ0I2 MEI0MEE5OEFFQUUwNTRDQUVFNEMwOUNCN0Q5QUVBREUzRTlEMB4XDTI1MDMxNTAx MzEwOFoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoRjE1NEFBRTQ3OTAwRDRF OEQ4OTlCNDBDNTI1NERCQzQxRUM1RDU5NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL+KU5RRBJpYEVsPwGtl/Y2Z1zcIiRTHAqOc2+L5fDc30H8d0dj4 tiAMxQLs9jNeTVHr9WDyyp4ROlvQSKCGxUpW0FXfeESjeg7YpZkIOam7d/xUEHkJ ZuD0H5y/d+aZkc0G52FrvGve+RfxXH/tOpqNQfCmgxYYSKiEOZTtYJ6mAai3b9iU 1yipQbTxmdw4sl4KCpZ8UfW/qwON+j8qtrkrgS6QrUTrA0Gv5ppl60QSjeTHD7Fo GhBzf5exlW+imv4PUF9JxgMTn3zgkLaI/IQ1LKr6AFna1pjxoqSQjUVlKhADaYKX 1BoMvo73Ncm5Cxafinpx7/nnGvZvOvJBNHECAwEAAaOCAkEwggI9MB0GA1UdDgQW BBTxVKrkeQDU6NiZtAxSVNvEHsXVlzAfBgNVHSMEGDAWgBQctgtAqYrq4FTK7kwJ y32a6t4+nTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyOTEvSExZTFFLbUs2dUJVeXU1TUNjdDltdXJlUHAwLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSExZTFFLbUs2dUJVeXU1TUNjdDlt dXJlUHAwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjkxL0hMWUxRS21LNnVCVXl1NU1DY3Q5bXVyZVBwMC5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJtSLgyKUbjMFrbDe2ELPiZwjrXzOw3SyYa3ipn98s30aeC431mgQn uCL+XG5ksgjU4gdsXPbCvh7+82+XdT9k8JVEoSCaYVnqoAUNhoe1V15lmwbfLfw0 2yfRYUr4CccudGy7tPxQjit8TGNaf3zDJJDno36t7YibSlUwOY6o5lS8riYUzowU 9BR+CJu1456pZMXTwcfDSu8pPzcuOQlzBpPMbP1sTma4EL4P4n9FFQOJRbU9V/3l CNspx9MqjtNSbdM5jB/GRw8ZMPhU4buetqBWPQNV+aBGYZln+MT88/QcEsTkh7Yi TOWk3Sw83TXjZUKNvr9sJ0Bi4M9Gj+2c -----END CERTIFICATE-----Generated at Sat Apr 5 20:08:25 2025 by rpki-client