$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/158/DDDSD1aGuuqd0oV4siuy4eiUGYk.mft File: DDDSD1aGuuqd0oV4siuy4eiUGYk.mft (raw, json) Hash identifier: 4rpfqNDfNE2f6T6/R2a54Vf5YcbQrJRl6iz2LRWHxzo= Subject key identifier: 22:CA:B7:49:DE:4E:59:7F:1C:94:A0:05:14:9D:51:B3:23:9F:71:69 Authority key identifier: 0C:30:D2:0F:56:86:BA:EA:9D:D2:85:78:B2:2B:B2:E1:E8:94:19:89 Certificate issuer: /CN=0C30D20F5686BAEA9DD28578B22BB2E1E8941989 Certificate serial: 10 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DDDSD1aGuuqd0oV4siuy4eiUGYk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/158/DDDSD1aGuuqd0oV4siuy4eiUGYk.mft Manifest number: 0282 Signing time: Sun 16 Feb 2025 17:48:12 +0000 Manifest this update: Sun 16 Feb 2025 17:48:12 +0000 Manifest next update: Mon 03 Mar 2025 17:48:12 +0000 Files and hashes: 1: DDDSD1aGuuqd0oV4siuy4eiUGYk.crl (hash: TzS+xgfP2B/w2H+S82RTNmBFwggjDusoBS760/5w7I4=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/158/DDDSD1aGuuqd0oV4siuy4eiUGYk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/158/DDDSD1aGuuqd0oV4siuy4eiUGYk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DDDSD1aGuuqd0oV4siuy4eiUGYk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C30D20F5686BAEA9DD28578B22BB2E1E8941989 Validity Not Before: Feb 15 01:38:02 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=22CAB749DE4E597F1C94A005149D51B3239F7169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f7:60:09:3d:40:ca:45:e2:c9:9f:22:8c:28: 6e:f5:ae:e8:e4:b2:f7:32:7c:42:a9:01:77:56:0d: 80:d6:42:43:e4:d2:3f:6a:43:fd:cf:7d:e4:18:7a: c6:8d:1e:c5:65:e2:e5:ea:e7:1d:47:f4:80:a1:76: 32:2c:2f:b7:19:1d:8d:24:0a:d7:e6:e7:44:fb:5b: 87:08:f0:73:70:e6:7a:64:08:95:b0:0e:16:df:b2: 6f:76:e5:57:e8:77:d2:fd:0c:30:db:02:20:b7:99: b9:59:89:d3:59:d5:46:a7:c2:1e:19:e2:15:f1:04: 83:90:ae:ef:f0:b4:b5:73:b7:6a:00:21:6e:b3:4f: 26:85:a0:a1:66:9c:be:72:cc:d8:a0:b5:23:f3:62: 71:9b:db:2e:fb:9d:b0:d1:2e:87:d9:46:cf:3b:a2: ac:bb:df:71:d8:a6:7f:bd:45:6a:f6:8f:91:a9:4e: f5:f7:ab:ad:4b:1a:6c:e0:1f:49:9f:17:06:19:bb: b4:b3:a4:68:aa:e3:ba:d1:21:84:bb:e7:0c:e1:49: c0:cc:96:2c:b6:98:42:db:94:ad:57:a0:c8:ed:9d: 98:2f:e8:8a:76:36:1b:4d:12:8a:ae:14:18:be:de: 84:86:67:15:cf:27:b9:42:4a:c2:a4:0a:d3:c9:36: 89:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CA:B7:49:DE:4E:59:7F:1C:94:A0:05:14:9D:51:B3:23:9F:71:69 X509v3 Authority Key Identifier: keyid:0C:30:D2:0F:56:86:BA:EA:9D:D2:85:78:B2:2B:B2:E1:E8:94:19:89 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/158/DDDSD1aGuuqd0oV4siuy4eiUGYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DDDSD1aGuuqd0oV4siuy4eiUGYk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/158/DDDSD1aGuuqd0oV4siuy4eiUGYk.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:c3:fa:af:71:58:f2:d5:70:f9:12:b8:62:a4:6c:05:a7:0b: 3e:2a:eb:af:b9:c4:ab:13:dc:b5:09:8c:7a:2f:65:29:0e:79: af:06:89:16:a2:21:27:52:53:98:54:d9:f9:81:38:b3:bd:dd: 98:b1:6d:61:05:da:d8:f2:a9:b3:88:b8:8d:2a:56:c2:2b:65: 85:eb:b9:c6:fb:bb:02:dd:0e:b9:2c:df:0b:81:a0:2b:d8:37: 38:44:83:d3:11:c3:73:83:dc:4f:3d:52:31:dc:5f:91:2c:fa: 1c:2d:a7:c0:2a:6b:5c:6a:8a:77:63:84:52:36:4d:17:19:e8: 78:84:ef:cf:28:24:cd:e6:4c:84:53:4b:d7:dd:a0:c3:46:cf: 78:32:04:58:8e:0c:83:70:22:76:d0:5e:8b:08:4d:ea:a8:38: ff:6f:49:11:31:0c:d4:a0:4a:29:1d:83:52:7d:6d:6e:a4:6a: 11:25:0f:a2:91:06:f6:28:ca:97:b3:a3:c6:87:6c:91:dd:78: 5b:df:d0:38:fb:4a:79:da:8c:4e:a2:e0:c7:74:7a:c4:6c:f0: 47:88:17:98:ad:f9:c2:62:96:5e:80:36:e1:04:70:92:19:de: 82:8c:2d:c5:55:11:dc:2f:9d:e4:4d:bb:5b:b9:1d:8c:cd:31: a7:68:5a:41 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBEDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwQzMw RDIwRjU2ODZCQUVBOUREMjg1NzhCMjJCQjJFMUU4OTQxOTg5MB4XDTI1MDIxNTAx MzgwMloXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoMjJDQUI3NDlERTRFNTk3 RjFDOTRBMDA1MTQ5RDUxQjMyMzlGNzE2OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALr3YAk9QMpF4smfIowobvWu6OSy9zJ8QqkBd1YNgNZCQ+TSP2pD /c995Bh6xo0exWXi5ernHUf0gKF2MiwvtxkdjSQK1+bnRPtbhwjwc3DmemQIlbAO Ft+yb3blV+h30v0MMNsCILeZuVmJ01nVRqfCHhniFfEEg5Cu7/C0tXO3agAhbrNP JoWgoWacvnLM2KC1I/NicZvbLvudsNEuh9lGzzuirLvfcdimf71FavaPkalO9fer rUsabOAfSZ8XBhm7tLOkaKrjutEhhLvnDOFJwMyWLLaYQtuUrVegyO2dmC/oinY2 G00Siq4UGL7ehIZnFc8nuUJKwqQK08k2iR0CAwEAAaOCAj0wggI5MB0GA1UdDgQW BBQiyrdJ3k5ZfxyUoAUUnVGzI59xaTAfBgNVHSMEGDAWgBQMMNIPVoa66p3ShXiy K7Lh6JQZiTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTU4L0RERFNEMWFHdXVxZDBvVjRzaXV5NGVpVUdZay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RERFNEMWFHdXVxZDBvVjRzaXV5NGVp VUdZay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8xNTgvREREU0QxYUd1dXFkMG9WNHNpdXk0ZWlVR1lrLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAATD+q9xWPLVcPkSuGKkbAWnCz4q66+5xKsT3LUJjHovZSkOea8GiRaiISdS U5hU2fmBOLO93ZixbWEF2tjyqbOIuI0qVsIrZYXrucb7uwLdDrks3wuBoCvYNzhE g9MRw3OD3E89UjHcX5Es+hwtp8Aqa1xqindjhFI2TRcZ6HiE788oJM3mTIRTS9fd oMNGz3gyBFiODINwInbQXosITeqoOP9vSRExDNSgSikdg1J9bW6kahElD6KRBvYo ypezo8aHbJHdeFvf0Dj7SnnajE6i4Md0esRs8EeIF5it+cJill6ANuEEcJIZ3oKM LcVVEdwvneRNu1u5HYzNMadoWkE= -----END CERTIFICATE-----Generated at Sun Feb 16 22:13:44 2025 by rpki-client