$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5515/Ui7dxPwm3iaZdxuxBzHIsLycF5A.mft File: Ui7dxPwm3iaZdxuxBzHIsLycF5A.mft (raw, json) Hash identifier: MlkzyNVUW1I5GORRpb/5UrjElWeI+DxWOOw464t4Bk8= Subject key identifier: C9:D1:BA:73:C8:D3:62:02:D6:D0:DB:8F:9D:4F:F0:E0:7A:D2:FF:83 Authority key identifier: 52:2E:DD:C4:FC:26:DE:26:99:77:1B:B1:07:31:C8:B0:BC:9C:17:90 Certificate issuer: /CN=522EDDC4FC26DE2699771BB10731C8B0BC9C1790 Certificate serial: 29 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ui7dxPwm3iaZdxuxBzHIsLycF5A.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5515/Ui7dxPwm3iaZdxuxBzHIsLycF5A.mft Manifest number: 0404 Signing time: Sat 05 Apr 2025 09:52:24 +0000 Manifest this update: Sat 05 Apr 2025 09:52:24 +0000 Manifest next update: Sun 20 Apr 2025 09:52:24 +0000 Files and hashes: 1: Ui7dxPwm3iaZdxuxBzHIsLycF5A.crl (hash: g1QQIC717N2qlVAqxNulLnzCr0gu0qjDwEKJhPVv1lk=) 2: tFHo6jTyByIQp8EMmimpMlyAp10.roa (hash: l5RGwl1O3y/IMOb2hNCTtOIwLtXDWVYDroZFW2YzlLs=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5515/Ui7dxPwm3iaZdxuxBzHIsLycF5A.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5515/Ui7dxPwm3iaZdxuxBzHIsLycF5A.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ui7dxPwm3iaZdxuxBzHIsLycF5A.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=522EDDC4FC26DE2699771BB10731C8B0BC9C1790 Validity Not Before: Mar 15 01:38:24 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=C9D1BA73C8D36202D6D0DB8F9D4FF0E07AD2FF83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a4:d2:19:87:f3:71:17:f8:e5:5d:4b:09:0a: 26:cc:a2:b8:f4:87:f6:bd:cd:d3:bb:d3:5f:e3:ab: fc:23:60:7e:fa:0b:f6:1f:1d:89:6c:d7:fb:62:33: 99:92:81:e9:f4:00:b9:48:e9:a0:96:09:8d:6e:04: 77:03:e7:43:da:e5:4d:58:42:60:d8:71:f5:5e:6d: bd:36:b3:b4:8a:f7:be:c4:fc:6e:39:26:11:4a:4a: e0:2c:ab:a4:7c:92:b8:81:ae:09:81:d2:11:4c:87: c2:21:c8:9f:09:79:45:42:ca:b1:13:8c:2a:63:cf: 3c:34:2f:80:71:48:2e:8f:39:d4:cb:7c:02:07:e3: 71:a4:21:10:9f:96:44:57:60:7d:5c:d7:f1:76:0d: 0b:9d:6e:02:f6:fd:89:0c:50:33:5a:be:ea:0d:16: ad:b0:27:3f:d3:30:4a:a1:1b:57:97:fe:22:17:86: a9:d6:b9:cc:d7:a1:e3:09:fc:3a:92:b1:35:b2:12: 96:ed:fe:cd:2d:dc:10:7b:23:8b:5f:6b:18:14:d7: f6:94:f9:9b:f7:3c:69:50:81:ba:a2:58:1d:ae:29: 96:df:2d:a3:5f:a2:ef:81:0c:e0:cf:2d:e3:eb:17: 95:b3:eb:7b:53:1a:02:27:98:c5:a5:35:80:65:48: 85:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D1:BA:73:C8:D3:62:02:D6:D0:DB:8F:9D:4F:F0:E0:7A:D2:FF:83 X509v3 Authority Key Identifier: keyid:52:2E:DD:C4:FC:26:DE:26:99:77:1B:B1:07:31:C8:B0:BC:9C:17:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5515/Ui7dxPwm3iaZdxuxBzHIsLycF5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ui7dxPwm3iaZdxuxBzHIsLycF5A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5515/Ui7dxPwm3iaZdxuxBzHIsLycF5A.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:5e:c7:64:79:f2:bd:b0:92:89:fb:0e:cb:6d:0b:ac:30:d1: e1:c6:8c:cc:da:14:f9:7c:2a:e5:ad:46:30:04:ad:1f:6d:c0: ec:44:1a:82:e6:6e:1f:47:3e:d0:c9:97:fe:8d:00:c2:bd:98: 62:4e:e8:96:ea:50:3b:ce:d5:4b:72:74:ec:f2:9b:a6:46:05: bd:13:fc:79:ee:0d:a2:e3:0d:48:4e:0c:fa:e3:9d:62:58:da: c3:1b:d7:98:5a:79:72:5c:06:ab:8c:04:21:37:4a:51:75:ef: e1:d3:c2:eb:c9:98:eb:ba:fb:50:cc:84:a0:15:d9:ad:a3:cd: 20:29:4f:c2:2f:4e:7d:5a:a2:a2:da:d7:31:f6:93:3a:23:f8: 4b:88:a3:e9:9e:ea:db:3b:0a:72:f9:1a:71:75:74:3d:4f:5c: 10:fa:a4:f7:24:60:ee:d6:70:a6:96:21:24:27:0b:c7:7b:c8: 0d:01:80:f1:0f:06:27:3a:91:70:05:58:f4:13:a3:ac:ea:94: a9:88:55:f6:df:ba:1d:ba:15:0b:91:6b:e8:49:fe:76:82:a8: 5a:f8:79:cd:f4:3c:03:d2:d1:cd:77:50:dd:5e:88:3f:ad:29: 6c:52:f8:ec:ce:89:8b:91:5c:0f:23:9e:f1:c2:c5:e5:39:6e: 58:3f:62:d3 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MjJF RERDNEZDMjZERTI2OTk3NzFCQjEwNzMxQzhCMEJDOUMxNzkwMB4XDTI1MDMxNTAx MzgyNFoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoQzlEMUJBNzNDOEQzNjIw MkQ2RDBEQjhGOUQ0RkYwRTA3QUQyRkY4MzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL2k0hmH83EX+OVdSwkKJsyiuPSH9r3N07vTX+Or/CNgfvoL9h8d iWzX+2IzmZKB6fQAuUjpoJYJjW4EdwPnQ9rlTVhCYNhx9V5tvTaztIr3vsT8bjkm EUpK4CyrpHySuIGuCYHSEUyHwiHInwl5RULKsROMKmPPPDQvgHFILo851Mt8Agfj caQhEJ+WRFdgfVzX8XYNC51uAvb9iQxQM1q+6g0WrbAnP9MwSqEbV5f+IheGqda5 zNeh4wn8OpKxNbISlu3+zS3cEHsji19rGBTX9pT5m/c8aVCBuqJYHa4plt8to1+i 74EM4M8t4+sXlbPre1MaAieYxaU1gGVIhWkCAwEAAaOCAj8wggI7MB0GA1UdDgQW BBTJ0bpzyNNiAtbQ24+dT/DgetL/gzAfBgNVHSMEGDAWgBRSLt3E/CbeJpl3G7EH MciwvJwXkDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTUxNS9VaTdkeFB3bTNpYVpkeHV4QnpISXNMeWNGNUEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9VaTdkeFB3bTNpYVpkeHV4QnpISXNM eWNGNUEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTUxNS9VaTdkeFB3bTNpYVpkeHV4QnpISXNMeWNGNUEubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEAk17HZHnyvbCSifsOy20LrDDR4caMzNoU+Xwq5a1GMAStH23A7EQaguZu H0c+0MmX/o0Awr2YYk7olupQO87VS3J07PKbpkYFvRP8ee4NouMNSE4M+uOdYlja wxvXmFp5clwGq4wEITdKUXXv4dPC68mY67r7UMyEoBXZraPNIClPwi9OfVqiotrX MfaTOiP4S4ij6Z7q2zsKcvkacXV0PU9cEPqk9yRg7tZwppYhJCcLx3vIDQGA8Q8G JzqRcAVY9BOjrOqUqYhV9t+6HboVC5Fr6En+doKoWvh5zfQ8A9LRzXdQ3V6IP60p bFL47M6Ji5FcDyOe8cLF5TluWD9i0w== -----END CERTIFICATE-----Generated at Sat Apr 5 11:57:53 2025 by rpki-client