$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.mft File: 3YKdZG1T7PKYlQtodTLekm7H68A.mft (raw, json) Hash identifier: waAzR14Jdi+2dyXHKjrmM2VqdCfKMK7x3KV7WJYbsqo= Subject key identifier: 30:30:54:65:4D:3E:B9:9D:9D:75:4E:04:D9:89:77:80:89:BA:F4:7E Authority key identifier: DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0 Certificate issuer: /CN=DD829D646D53ECF298950B687532DE926EC7EBC0 Certificate serial: 16 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.mft Manifest number: 03A0 Signing time: Sat 05 Apr 2025 15:58:42 +0000 Manifest this update: Sat 05 Apr 2025 15:58:42 +0000 Manifest next update: Sun 20 Apr 2025 15:58:42 +0000 Files and hashes: 1: 3YKdZG1T7PKYlQtodTLekm7H68A.crl (hash: FQr0o7pJzWue7jOh/bks6QJp6rSdMDPzXCaPL5CJSmM=) 2: 8CGhTJ49s7CajjFtjwI-UH8qHkE.roa (hash: pam2aO+x0a3Xzifa8EoTUxTHvmccbYYaRuq9TWaIjzM=) 3: A2M7gJo6WfG62PtHUIU8s8bV0uE.roa (hash: RA+VMH0fKLFvq0kjJXQPUmhRM9q/TiQuc05srDMz/yY=) 4: ET_JuhLu3OeWiZ81DxB5KdNffeY.roa (hash: c58569OJnqMs8fhhvwhYQyTR2pL686ZftWBy1o2h1L4=) 5: I704VH3NZJ2nJ-s26Kt04QEPXLw.roa (hash: /JjyTsoHvT6PsZXRhEY6TXDJAXLWFOfWU9FoWoWd7nI=) 6: oQMZwrHY_7SsF6PZmUuhkzIzAB4.roa (hash: +alyYAwjCNZj+xmgbX8MSdkrQ5e/ZMwEcx8AERIf3oI=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD829D646D53ECF298950B687532DE926EC7EBC0 Validity Not Before: Mar 15 01:32:37 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=303054654D3EB99D9D754E04D989778089BAF47E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:44:ea:8d:16:49:43:9a:9f:eb:9a:d7:a0:e2: 0c:12:60:c4:5b:cc:9b:81:db:a3:70:42:5a:9e:de: 31:4f:c1:49:a7:3e:f7:3f:dc:f6:b8:8f:a7:88:09: 6b:7a:be:e3:41:94:45:82:dd:75:84:e9:01:f6:11: 79:08:08:9d:56:2f:76:3d:3e:8a:e1:97:a4:49:8f: 1a:99:18:1f:6e:88:96:f1:e6:28:2b:bd:f0:a5:1f: eb:70:74:55:fa:28:ec:81:e7:f2:04:1f:d0:53:45: fb:33:2f:42:1a:ec:b0:56:81:88:a5:84:3e:0e:9d: c5:cf:ff:f3:9a:d3:4f:55:ae:e7:13:db:1c:88:df: 07:36:69:2e:84:71:42:1b:f6:8e:25:c0:49:21:26: 2b:f9:2c:8c:5a:0d:91:27:c0:f1:2b:e0:00:58:8d: 4a:e0:d2:c2:46:0b:33:3f:32:e1:0c:26:ce:56:8b: e3:12:71:d6:fe:bb:4b:86:48:a8:3e:28:a5:1a:41: 04:a1:3f:bf:e1:d1:eb:36:0a:f7:3d:56:96:08:0f: 37:46:13:db:d0:84:14:8e:b3:80:15:77:d0:9e:51: 37:11:50:8c:75:bf:94:55:8d:fc:ae:d3:a0:4e:9b: 32:94:84:78:95:d6:45:6e:07:2c:01:d5:06:f4:08: 72:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:30:54:65:4D:3E:B9:9D:9D:75:4E:04:D9:89:77:80:89:BA:F4:7E X509v3 Authority Key Identifier: keyid:DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:91:41:90:72:60:62:19:dd:07:87:d8:da:9f:9a:a5:a0:bc: 35:40:38:43:a9:5f:06:fe:cb:9f:1c:8a:79:58:f6:31:d7:1b: 71:2b:24:25:7d:81:5e:1b:eb:81:2c:8a:84:6f:25:1d:ce:16: 19:2e:43:24:cd:69:17:05:55:15:ce:49:ad:9b:3c:6c:ba:6a: 14:b0:6a:95:73:48:be:6c:e1:5e:14:bb:ea:f5:26:ce:9f:b6: b7:f3:f4:bc:c3:f3:04:2d:5b:f3:e5:b6:ad:65:14:e1:dd:f0: de:0d:78:bc:9e:17:3e:c6:62:07:32:57:a1:ac:33:4a:38:49: 46:65:cb:8c:20:0a:94:8b:f8:36:af:de:74:de:af:24:95:dd: 53:36:88:96:8b:d3:b9:06:d1:3d:79:7a:89:af:99:74:ca:fa: 24:a7:4f:b6:d2:b5:bc:24:58:b8:be:aa:3e:24:8f:0b:a3:de: 78:77:7a:68:fc:cd:4f:44:6b:e3:45:cc:7b:8d:10:ab:a2:13: bc:03:85:f9:d5:b6:06:74:d0:b3:ee:5b:a7:88:3c:f1:5d:fc: 1e:31:43:47:31:cc:2b:5c:03:ed:00:ac:6b:6d:2a:14:10:88: 6e:bc:3c:02:85:c4:ce:b0:f8:a5:d6:d5:ca:94:fd:48:da:f6: d9:f8:b8:f3 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERDgy OUQ2NDZENTNFQ0YyOTg5NTBCNjg3NTMyREU5MjZFQzdFQkMwMB4XDTI1MDMxNTAx MzIzN1oXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoMzAzMDU0NjU0RDNFQjk5 RDlENzU0RTA0RDk4OTc3ODA4OUJBRjQ3RTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMZE6o0WSUOan+ua16DiDBJgxFvMm4Hbo3BCWp7eMU/BSac+9z/c 9riPp4gJa3q+40GURYLddYTpAfYReQgInVYvdj0+iuGXpEmPGpkYH26IlvHmKCu9 8KUf63B0Vfoo7IHn8gQf0FNF+zMvQhrssFaBiKWEPg6dxc//85rTT1Wu5xPbHIjf BzZpLoRxQhv2jiXASSEmK/ksjFoNkSfA8SvgAFiNSuDSwkYLMz8y4QwmzlaL4xJx 1v67S4ZIqD4opRpBBKE/v+HR6zYK9z1WlggPN0YT29CEFI6zgBV30J5RNxFQjHW/ lFWN/K7ToE6bMpSEeJXWRW4HLAHVBvQIcgMCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBQwMFRlTT65nZ11TgTZiXeAibr0fjAfBgNVHSMEGDAWgBTdgp1kbVPs8piVC2h1 Mt6SbsfrwDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODkxLzNZS2RaRzFUN1BLWWxRdG9kVExla203SDY4QS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzNZS2RaRzFUN1BLWWxRdG9kVExla203 SDY4QS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84OTEvM1lLZFpHMVQ3UEtZbFF0b2RUTGVrbTdINjhBLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAL6RQZByYGIZ3QeH2NqfmqWgvDVAOEOpXwb+y58cinlY9jHXG3ErJCV9gV4b 64EsioRvJR3OFhkuQyTNaRcFVRXOSa2bPGy6ahSwapVzSL5s4V4Uu+r1Js6ftrfz 9LzD8wQtW/Pltq1lFOHd8N4NeLyeFz7GYgcyV6GsM0o4SUZly4wgCpSL+Dav3nTe rySV3VM2iJaL07kG0T15eomvmXTK+iSnT7bStbwkWLi+qj4kjwuj3nh3emj8zU9E a+NFzHuNEKuiE7wDhfnVtgZ00LPuW6eIPPFd/B4xQ0cxzCtcA+0ArGttKhQQiG68 PAKFxM6w+KXW1cqU/Uja9tn4uPM= -----END CERTIFICATE-----Generated at Sat Apr 5 22:16:54 2025 by rpki-client