$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30375/V028Ks3NaYbcc3-y1cgQOUxMB00.mft File: V028Ks3NaYbcc3-y1cgQOUxMB00.mft (raw, json) Hash identifier: fxrfnk7hwpywen4vNDpiOuCozZoMfPzQ/M847/DrCZg= Subject key identifier: 14:F1:90:2D:FC:E5:A8:D3:13:E9:1C:DE:4F:54:55:53:F1:25:C3:CB Authority key identifier: 57:4D:BC:2A:CD:CD:69:86:DC:73:7F:B2:D5:C8:10:39:4C:4C:07:4D Certificate issuer: /CN=574DBC2ACDCD6986DC737FB2D5C810394C4C074D Certificate serial: 0B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/V028Ks3NaYbcc3-y1cgQOUxMB00.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30375/V028Ks3NaYbcc3-y1cgQOUxMB00.mft Manifest number: 038C Signing time: Sun 06 Apr 2025 09:39:42 +0000 Manifest this update: Sun 06 Apr 2025 09:39:42 +0000 Manifest next update: Mon 21 Apr 2025 09:39:42 +0000 Files and hashes: 1: V028Ks3NaYbcc3-y1cgQOUxMB00.crl (hash: 11fAlJnZvt1PfE0HDpfwTOmm/eJx6m1KiZQqXaVb/cg=) 2: hZxopz4r_zH5P_6bhELDbDpK84s.roa (hash: QaBsGkwMPAmOp5V6x2uyjktV7iyGrQtDiAZGBS483BI=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30375/V028Ks3NaYbcc3-y1cgQOUxMB00.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30375/V028Ks3NaYbcc3-y1cgQOUxMB00.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/V028Ks3NaYbcc3-y1cgQOUxMB00.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=574DBC2ACDCD6986DC737FB2D5C810394C4C074D Validity Not Before: Mar 15 01:33:05 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=14F1902DFCE5A8D313E91CDE4F545553F125C3CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:92:ee:d6:a2:b4:93:9f:2f:54:ec:1f:7e:2d: 61:35:67:0b:51:d3:70:65:81:12:ea:a8:c4:54:41: f5:fa:67:98:9a:1f:f3:77:4b:25:cb:ef:e7:d6:0d: eb:9a:b4:48:34:6a:36:9e:ec:c4:b6:a4:93:2f:3c: 72:86:ec:ee:bc:6c:f3:e3:69:ee:1b:be:06:bb:87: ed:fc:98:d2:36:f3:bd:04:de:5c:87:86:09:22:5d: 29:95:72:da:2f:c0:08:33:17:e2:42:d0:00:a9:ec: 55:70:bd:8a:18:63:1c:0b:f8:2f:14:29:46:23:5d: 61:e4:1e:4b:5c:6c:96:b3:ef:12:77:b6:5b:9b:12: 3e:48:07:58:4c:50:91:46:cc:42:42:ee:3a:da:dc: 7d:27:57:a9:56:2d:bd:3b:75:4d:59:ec:da:92:c5: 13:22:3b:50:eb:bd:6b:d9:02:e7:5a:bd:b7:3c:79: f2:04:ca:b5:2f:e0:eb:94:f2:77:f2:98:86:d1:f5: 11:73:1c:c8:8a:6f:9a:c3:fd:b8:fd:30:3f:80:ba: c5:e3:c9:5f:a3:06:34:32:93:0d:1c:f4:52:a6:76: 46:de:d9:03:68:fd:b9:38:5d:d7:f9:3c:b7:aa:99: 6b:72:bb:b5:ce:b0:da:c1:c1:a7:43:06:d6:c0:cf: a2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F1:90:2D:FC:E5:A8:D3:13:E9:1C:DE:4F:54:55:53:F1:25:C3:CB X509v3 Authority Key Identifier: keyid:57:4D:BC:2A:CD:CD:69:86:DC:73:7F:B2:D5:C8:10:39:4C:4C:07:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30375/V028Ks3NaYbcc3-y1cgQOUxMB00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/V028Ks3NaYbcc3-y1cgQOUxMB00.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30375/V028Ks3NaYbcc3-y1cgQOUxMB00.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:c8:5e:f1:aa:d9:01:d3:5f:67:f5:2d:73:21:38:67:8a:7c: 85:4f:e2:22:42:0f:ec:94:63:31:93:11:15:2f:6f:65:02:31: dc:a0:71:13:8c:aa:1d:7d:c6:d7:66:ab:de:ac:9b:60:41:01: a2:82:f3:51:38:67:83:50:64:5c:e2:b8:05:1e:db:27:29:6e: 4d:32:57:f5:de:55:31:db:9b:13:11:c8:5d:dc:63:12:a1:29: 34:71:40:49:25:b0:ac:cc:be:4e:15:62:17:91:32:f5:00:12: d9:6a:bd:c5:f7:28:f4:fd:94:12:52:fe:3f:9e:cd:ce:e3:f8: ce:41:4c:2d:1f:30:85:ed:96:b9:54:6a:69:2d:d1:d6:e5:aa: 34:db:90:e2:f6:5d:37:b2:7f:43:48:fb:bc:72:bd:50:e3:df: 63:34:af:c0:3a:1c:56:9b:a8:03:63:a4:fd:bc:7f:c4:c3:85: 6e:c6:dd:2d:2e:a7:e2:16:31:4b:ff:77:6d:fe:36:82:51:95: 29:18:95:3d:89:e7:28:b7:a5:76:24:e4:15:34:ac:cd:bc:a2: 63:b1:08:36:6a:65:62:dd:07:bc:92:86:6a:f4:fd:08:9a:0d: b7:d8:12:30:a8:e1:a2:5c:10:ff:3d:b4:53:48:b8:f6:f6:04: 80:e9:96:ae -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1NzRE QkMyQUNEQ0Q2OTg2REM3MzdGQjJENUM4MTAzOTRDNEMwNzREMB4XDTI1MDMxNTAx MzMwNVoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoMTRGMTkwMkRGQ0U1QThE MzEzRTkxQ0RFNEY1NDU1NTNGMTI1QzNDQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKyS7taitJOfL1TsH34tYTVnC1HTcGWBEuqoxFRB9fpnmJof83dL Jcvv59YN65q0SDRqNp7sxLakky88cobs7rxs8+Np7hu+BruH7fyY0jbzvQTeXIeG CSJdKZVy2i/ACDMX4kLQAKnsVXC9ihhjHAv4LxQpRiNdYeQeS1xslrPvEne2W5sS PkgHWExQkUbMQkLuOtrcfSdXqVYtvTt1TVns2pLFEyI7UOu9a9kC51q9tzx58gTK tS/g65Tyd/KYhtH1EXMcyIpvmsP9uP0wP4C6xePJX6MGNDKTDRz0UqZ2Rt7ZA2j9 uThd1/k8t6qZa3K7tc6w2sHBp0MG1sDPoj8CAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQU8ZAt/OWo0xPpHN5PVFVT8SXDyzAfBgNVHSMEGDAWgBRXTbwqzc1phtxzf7LV yBA5TEwHTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzNzUvVjAyOEtzM05hWWJjYzMteTFjZ1FPVXhNQjAwLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVjAyOEtzM05hWWJjYzMteTFjZ1FP VXhNQjAwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzc1L1YwMjhLczNOYVliY2MzLXkxY2dRT1V4TUIwMC5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGyF7xqtkB019n9S1zIThninyFT+IiQg/slGMxkxEVL29lAjHcoHET jKodfcbXZqverJtgQQGigvNROGeDUGRc4rgFHtsnKW5NMlf13lUx25sTEchd3GMS oSk0cUBJJbCszL5OFWIXkTL1ABLZar3F9yj0/ZQSUv4/ns3O4/jOQUwtHzCF7Za5 VGppLdHW5ao025Di9l03sn9DSPu8cr1Q499jNK/AOhxWm6gDY6T9vH/Ew4Vuxt0t LqfiFjFL/3dt/jaCUZUpGJU9iecot6V2JOQVNKzNvKJjsQg2amVi3Qe8koZq9P0I mg232BIwqOGiXBD/PbRTSLj29gSA6Zau -----END CERTIFICATE-----Generated at Sun Apr 6 21:57:50 2025 by rpki-client