$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.mft File: NaqlmFHjkt-JLly3q-YiUWWuyJc.mft (raw, json) Hash identifier: TVNeOaIFnUxXcA43hBehQB9SeXc7lAlDqNoGwPSY3rM= Subject key identifier: A2:06:FD:E9:F6:B3:F5:C4:1E:11:44:EC:14:43:F2:F8:1D:E4:87:CF Authority key identifier: 35:AA:A5:98:51:E3:92:DF:89:2E:5C:B7:AB:E6:22:51:65:AE:C8:97 Certificate issuer: /CN=35AAA59851E392DF892E5CB7ABE6225165AEC897 Certificate serial: 22 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NaqlmFHjkt-JLly3q-YiUWWuyJc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.mft Manifest number: 03E4 Signing time: Sat 05 Apr 2025 13:22:20 +0000 Manifest this update: Sat 05 Apr 2025 13:22:20 +0000 Manifest next update: Sun 20 Apr 2025 13:22:20 +0000 Files and hashes: 1: NaqlmFHjkt-JLly3q-YiUWWuyJc.crl (hash: tHzeNAU/YL0PxSZJuCKLyPBcosy1tSw4jzajxCXJScE=) 2: iuhQ_RekSxrD8vIcnCSrBzJTQWo.roa (hash: T6PeX/6uVDQCZEGlR0Qa1JBugPMwN6wSVXw/9GR9cYM=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NaqlmFHjkt-JLly3q-YiUWWuyJc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35AAA59851E392DF892E5CB7ABE6225165AEC897 Validity Not Before: Mar 15 01:30:47 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=A206FDE9F6B3F5C41E1144EC1443F2F81DE487CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:01:4e:1d:25:0d:12:d3:1a:ba:01:07:b4: 2d:0c:60:ce:43:5f:1a:1e:58:ac:1c:de:4a:78:34: 87:e3:6f:ae:de:f4:2a:84:15:85:26:68:f6:85:69: 0b:e3:48:93:8b:1c:77:57:2f:79:a6:f9:01:02:33: 10:9f:17:7c:8b:0c:71:14:ad:3d:5e:d6:b7:3f:03: 30:b1:56:5c:3f:ac:a6:37:4a:e2:9e:dc:2b:46:15: 10:75:ea:50:60:3a:27:0d:f1:45:84:93:b1:23:3f: 9c:6f:a7:a7:c1:b5:c2:93:08:fb:6b:59:13:c2:51: e7:f7:92:f7:81:f2:c0:fd:34:79:91:dd:05:0d:94: 6d:53:e5:68:49:52:91:6f:fa:07:39:92:af:b6:f4: f9:78:cd:c9:52:67:00:f9:ea:e4:0b:f5:8b:27:2a: 50:2e:7a:a2:31:2e:8d:8c:91:a8:ae:af:c0:04:15: 65:24:c7:69:bb:f3:94:65:e7:81:2e:2e:9d:a3:fe: 0b:38:f4:14:30:dd:25:ec:ba:ce:9d:9f:d7:73:a6: ff:e0:af:85:52:75:8d:2f:21:25:75:72:8b:c9:71: 42:7c:2d:d9:9a:d6:f1:ec:24:3e:4c:46:44:1c:5a: 06:29:be:ac:46:b8:ac:2d:41:3a:23:f7:f6:58:36: 76:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:06:FD:E9:F6:B3:F5:C4:1E:11:44:EC:14:43:F2:F8:1D:E4:87:CF X509v3 Authority Key Identifier: keyid:35:AA:A5:98:51:E3:92:DF:89:2E:5C:B7:AB:E6:22:51:65:AE:C8:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NaqlmFHjkt-JLly3q-YiUWWuyJc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:89:ed:a4:29:a6:f4:cf:4f:e8:41:5b:20:7c:7d:38:d8:ae: e4:a3:34:ae:a9:7e:81:52:3a:b8:e6:ad:31:2a:b3:60:35:6c: ed:5d:00:39:6d:e2:8b:73:6c:04:2f:f0:c5:5f:c8:d1:c3:bb: 9e:94:41:48:52:77:d0:b3:6a:62:3a:eb:bc:55:7e:8e:73:51: b3:92:8f:bb:70:10:d1:e6:87:36:c2:dd:62:07:e7:c2:e0:c7: 1b:71:4c:05:90:fd:0e:b8:e3:18:38:03:d4:b4:71:07:87:53: 16:c5:e6:a9:0d:e1:85:be:cf:05:5a:0c:b9:5b:cf:75:41:a6: 34:e6:c6:2b:98:b9:11:99:87:49:e8:2c:af:c2:97:12:0c:f4: 78:d2:2a:70:fc:5c:30:7f:02:72:c8:a3:48:ce:08:00:af:2e: 07:b5:bf:a9:62:85:5f:d7:06:61:54:02:f1:fb:c3:95:a0:bf: c6:36:5a:1f:0f:04:05:01:f7:fd:e4:9a:66:77:b7:eb:b4:f0: ee:9e:ee:1a:80:69:c5:e6:97:b5:22:c5:7c:11:bc:2e:be:3b: 7f:7a:e2:05:2a:f8:4d:3f:81:be:72:ea:2f:43:c7:68:47:d0: 06:ba:85:15:82:d5:9a:7f:f2:72:c3:4f:02:8b:df:3d:56:1f: 1c:94:b6:6b -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNUFB QTU5ODUxRTM5MkRGODkyRTVDQjdBQkU2MjI1MTY1QUVDODk3MB4XDTI1MDMxNTAx MzA0N1oXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoQTIwNkZERTlGNkIzRjVD NDFFMTE0NEVDMTQ0M0YyRjgxREU0ODdDRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK1KAU4dJQ0S0xq6AQe0LQxgzkNfGh5YrBzeSng0h+Nvrt70KoQV hSZo9oVpC+NIk4scd1cveab5AQIzEJ8XfIsMcRStPV7Wtz8DMLFWXD+spjdK4p7c K0YVEHXqUGA6Jw3xRYSTsSM/nG+np8G1wpMI+2tZE8JR5/eS94HywP00eZHdBQ2U bVPlaElSkW/6BzmSr7b0+XjNyVJnAPnq5Av1iycqUC56ojEujYyRqK6vwAQVZSTH abvzlGXngS4unaP+Czj0FDDdJey6zp2f13Om/+CvhVJ1jS8hJXVyi8lxQnwt2ZrW 8ewkPkxGRBxaBim+rEa4rC1BOiP39lg2dj8CAwEAAaOCAkEwggI9MB0GA1UdDgQW BBSiBv3p9rP1xB4RROwUQ/L4HeSHzzAfBgNVHSMEGDAWgBQ1qqWYUeOS34kuXLer 5iJRZa7IlzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MTIvTmFxbG1GSGprdC1KTGx5M3EtWWlVV1d1eUpjLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTmFxbG1GSGprdC1KTGx5M3EtWWlV V1d1eUpjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDEyL05hcWxtRkhqa3QtSkxseTNxLVlpVVdXdXlKYy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnie2kKab0z0/oQVsgfH042K7kozSuqX6BUjq45q0xKrNgNWztXQA5 beKLc2wEL/DFX8jRw7uelEFIUnfQs2piOuu8VX6Oc1Gzko+7cBDR5oc2wt1iB+fC 4McbcUwFkP0OuOMYOAPUtHEHh1MWxeapDeGFvs8FWgy5W891QaY05sYrmLkRmYdJ 6CyvwpcSDPR40ipw/FwwfwJyyKNIzggAry4Htb+pYoVf1wZhVALx+8OVoL/GNlof DwQFAff95Jpmd7frtPDunu4agGnF5pe1IsV8Ebwuvjt/euIFKvhNP4G+cuovQ8do R9AGuoUVgtWaf/Jyw08Ci989Vh8clLZr -----END CERTIFICATE-----Generated at Sat Apr 5 17:32:59 2025 by rpki-client