$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30442/_AsDcmR6JE0QuNgkrgtQd21kZeo.mft File: _AsDcmR6JE0QuNgkrgtQd21kZeo.mft (raw, json) Hash identifier: 5fLPxzlFDq43C7BfsXTQjUd3BHnqeeeSZopw2iZbDTA= Subject key identifier: 33:3D:CA:C2:A5:A0:36:CA:17:3E:E5:39:6A:25:6B:CD:C8:79:4B:0B Authority key identifier: FC:0B:03:72:64:7A:24:4D:10:B8:D8:24:AE:0B:50:77:6D:64:65:EA Certificate issuer: /CN=FC0B0372647A244D10B8D824AE0B50776D6465EA Certificate serial: 07 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_AsDcmR6JE0QuNgkrgtQd21kZeo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30442/_AsDcmR6JE0QuNgkrgtQd21kZeo.mft Manifest number: 033B Signing time: Sat 05 Apr 2025 08:56:34 +0000 Manifest this update: Sat 05 Apr 2025 08:56:34 +0000 Manifest next update: Sun 20 Apr 2025 08:56:34 +0000 Files and hashes: 1: _AsDcmR6JE0QuNgkrgtQd21kZeo.crl (hash: NjTmyusxylqb2MEYtZYP92/lxnwqV3czTLefkJSje68=) 2: y0l3vFrsPgNN9ZsqFGEzPr65lxU.roa (hash: jMDF/N1RbFU6eZIF3hb5Mi8G2lBm7OKGGPyaEOL/rGE=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30442/_AsDcmR6JE0QuNgkrgtQd21kZeo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30442/_AsDcmR6JE0QuNgkrgtQd21kZeo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_AsDcmR6JE0QuNgkrgtQd21kZeo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC0B0372647A244D10B8D824AE0B50776D6465EA Validity Not Before: Mar 15 01:37:22 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=333DCAC2A5A036CA173EE5396A256BCDC8794B0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:10:59:8f:2a:4e:8e:19:cb:d4:3f:1d:a8:07: 85:7d:a4:74:41:35:1d:5e:71:4d:a4:7d:9a:f4:44: c8:d7:5e:ff:2b:27:60:47:1c:38:d9:6c:55:c2:de: d0:6f:47:de:9d:5d:3d:4a:ff:d3:c1:ba:6a:b1:93: 07:ee:f6:51:c4:75:54:56:d0:df:e6:a6:ec:27:f9: d7:49:2f:45:4c:04:08:40:46:d8:89:57:f2:8d:28: 03:2d:a5:f2:7b:7d:b3:18:00:f5:65:b6:57:4e:8d: dd:5e:cb:9c:12:65:48:32:32:ef:53:01:17:44:c8: ba:34:ee:c3:80:b2:c3:c3:6e:d5:fd:27:c8:68:8c: a4:94:c4:6b:80:b0:7e:19:78:96:c4:cf:3d:de:3d: 5e:e0:c2:0b:a4:a2:43:29:ef:87:56:27:37:2f:0a: 0e:a1:1c:c9:d6:19:35:4e:2a:4d:89:90:a8:89:12: 7b:14:87:f2:e0:84:dc:cf:0c:18:75:37:04:67:d4: 32:a3:d9:4a:dd:5d:9a:35:9c:ab:42:3b:e2:bb:91: 8a:c0:be:29:19:d3:3f:aa:79:8e:36:fb:21:f5:bb: 4c:80:97:1f:74:7c:e6:82:30:c6:7b:2e:89:f7:30: d2:9f:29:48:74:b7:51:a2:48:a9:1e:34:24:fc:b0: 77:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3D:CA:C2:A5:A0:36:CA:17:3E:E5:39:6A:25:6B:CD:C8:79:4B:0B X509v3 Authority Key Identifier: keyid:FC:0B:03:72:64:7A:24:4D:10:B8:D8:24:AE:0B:50:77:6D:64:65:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30442/_AsDcmR6JE0QuNgkrgtQd21kZeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_AsDcmR6JE0QuNgkrgtQd21kZeo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30442/_AsDcmR6JE0QuNgkrgtQd21kZeo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:19:0c:6f:72:d5:8c:8f:ee:77:a3:00:0a:e2:82:2d:43:2a: 4a:4b:5a:e2:69:4c:cc:b8:b6:22:ec:2d:26:e0:a4:a4:70:d2: e0:e3:ce:ec:58:78:b1:36:ed:07:77:74:13:68:e6:cf:ca:92: 07:25:c6:b4:07:95:c2:0b:0a:b6:a7:5e:fd:6c:a3:eb:7a:9b: a5:c6:d8:7e:1d:f2:b0:12:60:92:c1:a9:e0:de:e9:ba:ed:3e: ee:29:b0:bb:5e:de:fa:eb:47:8a:6a:fa:cc:16:3b:2d:09:af: 51:9e:05:f7:7d:ad:7f:94:fe:d2:e6:49:fd:c0:b2:93:83:58: c7:2e:fd:ae:6c:96:e1:e2:21:a4:80:0d:ec:de:19:5d:aa:de: 02:4c:ed:62:72:aa:17:96:ed:d4:cc:79:b5:86:f8:0d:9f:6f: 7d:71:cd:8a:ec:a8:09:28:84:0d:9e:a8:12:0f:3d:71:c7:90: d0:d7:ab:e8:32:20:42:90:79:0a:f7:8b:49:2d:80:9f:2f:ac: 22:90:05:71:e8:05:69:70:1d:25:26:61:e5:cf:a5:70:f2:87: 57:b5:84:30:24:ae:f0:df:61:10:e5:3a:46:e7:6b:a5:aa:78: 83:66:c1:d5:20:bd:96:44:d1:c6:d6:38:6c:c2:94:f6:07:95: ca:43:0e:9a -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQzBC MDM3MjY0N0EyNDREMTBCOEQ4MjRBRTBCNTA3NzZENjQ2NUVBMB4XDTI1MDMxNTAx MzcyMloXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoMzMzRENBQzJBNUEwMzZD QTE3M0VFNTM5NkEyNTZCQ0RDODc5NEIwQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKYQWY8qTo4Zy9Q/HagHhX2kdEE1HV5xTaR9mvREyNde/ysnYEcc ONlsVcLe0G9H3p1dPUr/08G6arGTB+72UcR1VFbQ3+am7Cf510kvRUwECEBG2IlX 8o0oAy2l8nt9sxgA9WW2V06N3V7LnBJlSDIy71MBF0TIujTuw4Cyw8Nu1f0nyGiM pJTEa4Cwfhl4lsTPPd49XuDCC6SiQynvh1YnNy8KDqEcydYZNU4qTYmQqIkSexSH 8uCE3M8MGHU3BGfUMqPZSt1dmjWcq0I74ruRisC+KRnTP6p5jjb7IfW7TICXH3R8 5oIwxnsuifcw0p8pSHS3UaJIqR40JPywd6MCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQzPcrCpaA2yhc+5TlqJWvNyHlLCzAfBgNVHSMEGDAWgBT8CwNyZHokTRC42CSu C1B3bWRl6jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0NDIvX0FzRGNtUjZKRTBRdU5na3JndFFkMjFrWmVvLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvX0FzRGNtUjZKRTBRdU5na3JndFFk MjFrWmVvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDQyL19Bc0RjbVI2SkUwUXVOZ2tyZ3RRZDIxa1plby5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1GQxvctWMj+53owAK4oItQypKS1riaUzMuLYi7C0m4KSkcNLg487s WHixNu0Hd3QTaObPypIHJca0B5XCCwq2p179bKPrepulxth+HfKwEmCSwang3um6 7T7uKbC7Xt7660eKavrMFjstCa9RngX3fa1/lP7S5kn9wLKTg1jHLv2ubJbh4iGk gA3s3hldqt4CTO1icqoXlu3UzHm1hvgNn299cc2K7KgJKIQNnqgSDz1xx5DQ16vo MiBCkHkK94tJLYCfL6wikAVx6AVpcB0lJmHlz6Vw8odXtYQwJK7w32EQ5TpG52ul qniDZsHVIL2WRNHG1jhswpT2B5XKQw6a -----END CERTIFICATE-----Generated at Sat Apr 5 11:57:55 2025 by rpki-client