$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.mft File: SmXbIimWPt7-qaQStXMeo8UH5xQ.mft (raw, json) Hash identifier: b8GoVES+7vk8aEjw0ZffrvyIi9Wp4sABCce7CAHGum0= Subject key identifier: 68:AF:CD:A0:7A:17:8C:4F:36:69:EA:92:19:BB:81:94:B2:61:CA:40 Authority key identifier: 4A:65:DB:22:29:96:3E:DE:FE:A9:A4:12:B5:73:1E:A3:C5:07:E7:14 Certificate issuer: /CN=4A65DB2229963EDEFEA9A412B5731EA3C507E714 Certificate serial: 44 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.mft Manifest number: 05B5 Signing time: Thu 05 Jun 2025 16:29:46 +0000 Manifest this update: Thu 05 Jun 2025 16:29:46 +0000 Manifest next update: Fri 20 Jun 2025 16:29:46 +0000 Files and hashes: 1: BmaiDxJ9mD2_uyaHPtML4fJCAK4.roa (hash: pwiupA8IPljDTcofVlSoGeU5uLa2Q2MlEEjSl3VGdAg=) 2: MCHtUrLlXrAzg8UOw6SxAGliupU.roa (hash: U1SrXUzqnhlvS7V0HapCS0fUHALwg4Tw1kLAIetlC6c=) 3: SmXbIimWPt7-qaQStXMeo8UH5xQ.crl (hash: UDpdrcmwEEgcdrq8egC7CDE0sllZTI5st1hNfppazlg=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 17:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A65DB2229963EDEFEA9A412B5731EA3C507E714 Validity Not Before: May 23 09:57:14 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=68AFCDA07A178C4F3669EA9219BB8194B261CA40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d3:b6:6e:71:39:3b:b1:ad:c8:21:79:de:91: f1:a1:0c:6d:d4:18:2c:54:43:9b:a7:35:8e:a7:0f: 05:ed:3a:3d:e5:94:02:3d:66:84:28:9b:6c:50:b4: 7e:3c:1f:a5:79:79:3c:a0:d7:61:92:56:4e:18:f5: b4:ab:8a:65:3e:71:28:3a:03:29:90:89:f0:2d:09: 5a:c8:30:76:5a:82:46:28:9e:0c:c6:d1:22:f5:29: e8:ec:cc:c6:b3:8a:6b:b2:7d:2b:83:74:ea:d2:2d: 70:19:2e:f5:ca:9a:bb:04:92:1e:76:01:c1:54:be: ab:12:16:ef:83:fa:95:b7:23:36:63:34:8d:cf:44: 70:45:49:4e:c1:da:63:99:c5:c2:19:b9:06:17:61: 6b:ba:86:d7:3c:d0:a0:bc:36:7e:ac:fd:c0:32:17: 26:5a:41:a5:3d:2e:35:32:61:25:f5:d7:fe:15:6b: ba:99:66:84:6d:a7:d6:c0:36:4b:2a:d8:43:0d:8b: 3c:1b:94:ab:68:6f:69:33:32:20:eb:e0:ab:96:7d: d8:27:8f:db:ea:f0:7b:32:b3:4b:ca:c2:99:c4:a0: a3:7a:dd:c0:88:63:cc:9e:03:cc:2f:9c:a0:c5:ea: 0b:4c:a8:df:d7:75:d5:df:e2:e9:2a:97:af:c8:bf: c3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AF:CD:A0:7A:17:8C:4F:36:69:EA:92:19:BB:81:94:B2:61:CA:40 X509v3 Authority Key Identifier: keyid:4A:65:DB:22:29:96:3E:DE:FE:A9:A4:12:B5:73:1E:A3:C5:07:E7:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:fe:d9:ce:77:87:b0:53:d1:4f:97:56:2c:d3:56:be:a6:33: c6:eb:e9:f1:c4:4f:a0:0e:91:d5:9f:49:82:bf:a1:8a:2c:e4: 69:54:20:82:ea:0a:49:5f:39:cf:56:2d:b2:28:27:4e:4d:ae: c6:66:a6:dc:58:05:fa:43:54:62:bb:c6:48:81:d6:7a:d6:39: de:63:03:28:93:41:b8:4d:5d:32:97:92:a2:32:85:de:02:3e: a6:2a:04:e5:67:78:ef:1d:65:56:ac:81:b6:98:e2:df:71:6a: ab:47:38:b3:56:0f:0e:9d:84:53:63:4b:2a:ae:a1:19:3c:84: 59:c9:19:37:93:22:e8:58:fc:1b:a6:76:5d:db:8d:95:62:60: dd:e3:5a:3b:9b:34:47:31:33:c3:c5:46:cc:80:e7:ef:2d:a4: 6d:6b:4f:5b:53:7e:72:68:1c:4b:3d:53:0f:6c:20:1a:1c:02: 3f:8e:f0:46:fd:fb:89:35:c8:c7:42:25:6e:1a:03:4f:d7:53: 67:11:f3:60:92:56:f1:db:0d:14:7f:99:38:71:d8:3c:26:de: c8:59:20:0c:54:f0:dc:a6:e7:f7:05:98:cf:c7:67:97:9b:08: ac:46:12:38:a8:a8:4a:93:fb:37:cc:2b:ad:c8:27:69:7e:3b: 00:bd:9f:82 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0QTY1 REIyMjI5OTYzRURFRkVBOUE0MTJCNTczMUVBM0M1MDdFNzE0MB4XDTI1MDUyMzA5 NTcxNFoXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoNjhBRkNEQTA3QTE3OEM0 RjM2NjlFQTkyMTlCQjgxOTRCMjYxQ0E0MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANPTtm5xOTuxrcghed6R8aEMbdQYLFRDm6c1jqcPBe06PeWUAj1m hCibbFC0fjwfpXl5PKDXYZJWThj1tKuKZT5xKDoDKZCJ8C0JWsgwdlqCRiieDMbR IvUp6OzMxrOKa7J9K4N06tItcBku9cqauwSSHnYBwVS+qxIW74P6lbcjNmM0jc9E cEVJTsHaY5nFwhm5Bhdha7qG1zzQoLw2fqz9wDIXJlpBpT0uNTJhJfXX/hVruplm hG2n1sA2SyrYQw2LPBuUq2hvaTMyIOvgq5Z92CeP2+rwezKzS8rCmcSgo3rdwIhj zJ4DzC+coMXqC0yo39d11d/i6SqXr8i/w7cCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRor82geheMTzZp6pIZu4GUsmHKQDAfBgNVHSMEGDAWgBRKZdsiKZY+3v6ppBK1 cx6jxQfnFDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA5NjYvU21YYklpbVdQdDctcWFRU3RYTWVvOFVINXhRLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvU21YYklpbVdQdDctcWFRU3RYTWVv OFVINXhRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwOTY2L1NtWGJJaW1XUHQ3LXFhUVN0WE1lbzhVSDV4US5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg/tnOd4ewU9FPl1Ys01a+pjPG6+nxxE+gDpHVn0mCv6GKLORpVCCC 6gpJXznPVi2yKCdOTa7GZqbcWAX6Q1Riu8ZIgdZ61jneYwMok0G4TV0yl5KiMoXe Aj6mKgTlZ3jvHWVWrIG2mOLfcWqrRzizVg8OnYRTY0sqrqEZPIRZyRk3kyLoWPwb pnZd242VYmDd41o7mzRHMTPDxUbMgOfvLaRta09bU35yaBxLPVMPbCAaHAI/jvBG /fuJNcjHQiVuGgNP11NnEfNgklbx2w0Uf5k4cdg8Jt7IWSAMVPDcpuf3BZjPx2eX mwisRhI4qKhKk/s3zCutyCdpfjsAvZ+C -----END CERTIFICATE-----Generated at Thu Jun 5 19:59:47 2025 by rpki-client