$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20174/tvOQntuCmkO6VG8YyqTykBAgm0s.mft File: tvOQntuCmkO6VG8YyqTykBAgm0s.mft (raw, json) Hash identifier: AMJWwTel5CzMwhCekOumLle4DGbr0D/vhuRC3+P+D2Q= Subject key identifier: FB:03:2A:01:F4:1B:9C:1F:E8:2B:06:32:0D:A9:7B:ED:44:B5:BD:7F Authority key identifier: B6:F3:90:9E:DB:82:9A:43:BA:54:6F:18:CA:A4:F2:90:10:20:9B:4B Certificate issuer: /CN=B6F3909EDB829A43BA546F18CAA4F29010209B4B Certificate serial: 27 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tvOQntuCmkO6VG8YyqTykBAgm0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/tvOQntuCmkO6VG8YyqTykBAgm0s.mft Manifest number: 02DE Signing time: Sun 16 Feb 2025 17:41:23 +0000 Manifest this update: Sun 16 Feb 2025 17:41:23 +0000 Manifest next update: Mon 03 Mar 2025 17:41:23 +0000 Files and hashes: 1: 1ZwWI41NECO-jMDxlYE2a5p3-9c.roa (hash: S3AGLvJvhspKnVCb3rsCu9bDvxosHBKNBhHWtHy1lNM=) 2: tvOQntuCmkO6VG8YyqTykBAgm0s.crl (hash: PF4DI6XJ6g6XbuTW2Z0+HzIa15VHz2YtfNOn0R7N0ms=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/tvOQntuCmkO6VG8YyqTykBAgm0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/tvOQntuCmkO6VG8YyqTykBAgm0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tvOQntuCmkO6VG8YyqTykBAgm0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F3909EDB829A43BA546F18CAA4F29010209B4B Validity Not Before: Feb 15 01:31:50 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=FB032A01F41B9C1FE82B06320DA97BED44B5BD7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8d:78:ba:9a:38:d3:ef:b2:49:b6:23:90:49: 91:57:0e:8a:86:28:25:66:60:ac:84:c2:5f:c2:88: cf:c0:98:4b:00:c9:9e:f9:e2:14:9b:29:98:9c:72: 77:0d:65:3d:bb:0f:e4:71:a6:f6:01:7c:4f:51:dc: 56:dd:a8:d3:e5:e0:be:51:d2:8a:26:e5:1e:8f:69: 81:c0:f0:4b:b3:ea:2e:a6:f9:23:b5:27:15:44:9e: 0f:08:39:99:cb:17:a4:fa:5b:8c:3d:56:d0:32:2c: 6a:a5:63:d4:c3:e3:9b:fe:a9:d4:62:36:40:30:59: 73:07:d8:e7:d1:e1:10:8f:92:5c:91:41:2e:30:9a: a2:fe:af:18:cc:5a:f4:c4:fb:43:e3:3c:df:d5:45: 01:c4:dc:c7:7e:ed:a0:c6:40:70:f9:8b:04:ac:e2: 13:5a:79:6c:62:97:e7:a3:cf:16:c9:b2:70:a3:b5: d6:a1:88:6b:f8:fd:06:de:3e:ce:4b:76:f4:f8:27: 6c:6e:91:a2:c7:4a:bd:1e:af:75:66:82:d8:4e:1d: 49:a6:97:41:23:75:28:1e:80:e4:69:72:10:ae:36: ba:db:0d:f9:84:8b:f4:27:e4:78:f2:c0:85:d1:14: 75:0e:24:0f:3e:aa:91:fa:62:24:19:da:b2:85:83: 36:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:03:2A:01:F4:1B:9C:1F:E8:2B:06:32:0D:A9:7B:ED:44:B5:BD:7F X509v3 Authority Key Identifier: keyid:B6:F3:90:9E:DB:82:9A:43:BA:54:6F:18:CA:A4:F2:90:10:20:9B:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/tvOQntuCmkO6VG8YyqTykBAgm0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tvOQntuCmkO6VG8YyqTykBAgm0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/tvOQntuCmkO6VG8YyqTykBAgm0s.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:e1:f1:cc:a4:be:ad:13:04:d7:34:1d:36:2f:42:0a:08:a5: 2d:46:60:d3:1d:5c:74:6d:53:0e:f1:08:ae:bb:47:7f:cf:a2: 9d:90:ca:4b:28:8b:f0:f5:fa:b1:93:48:87:65:2f:30:ea:4b: d4:0e:09:b7:62:07:d0:bd:b1:20:fe:9e:db:17:e3:e5:03:a3: 08:1a:4d:c3:82:d7:5e:68:b3:ca:e3:65:de:ac:7c:6f:5e:d2: bf:9e:83:63:ed:5e:1b:f6:03:c0:99:e7:e5:7e:76:e1:47:3f: 0c:8a:3a:4b:1f:94:ee:03:48:14:f3:05:04:c6:79:2a:15:07: d9:32:96:3e:8f:37:83:33:ef:4f:a6:c8:8f:31:37:a0:51:16: ec:f7:bb:d1:18:6f:b5:ee:eb:9c:ae:ea:86:38:58:7a:de:b8: 59:c5:25:04:06:b9:e8:88:2a:c2:f0:50:9c:7b:77:1e:fb:b1: f1:d0:d0:d1:21:d0:fd:58:38:e4:04:d4:eb:b5:67:b0:b2:6d: 22:9a:d9:f6:ec:4b:c8:98:a7:9c:07:dc:53:ed:60:6a:76:8c: 19:98:28:89:a0:11:54:51:02:00:2f:f1:82:44:45:8e:14:42: 3e:51:7d:76:48:24:79:47:f3:d4:46:cf:d2:68:9e:31:cc:ba: 11:96:19:88 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCNkYz OTA5RURCODI5QTQzQkE1NDZGMThDQUE0RjI5MDEwMjA5QjRCMB4XDTI1MDIxNTAx MzE1MFoXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoRkIwMzJBMDFGNDFCOUMx RkU4MkIwNjMyMERBOTdCRUQ0NEI1QkQ3RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKuNeLqaONPvskm2I5BJkVcOioYoJWZgrITCX8KIz8CYSwDJnvni FJspmJxydw1lPbsP5HGm9gF8T1HcVt2o0+XgvlHSiiblHo9pgcDwS7PqLqb5I7Un FUSeDwg5mcsXpPpbjD1W0DIsaqVj1MPjm/6p1GI2QDBZcwfY59HhEI+SXJFBLjCa ov6vGMxa9MT7Q+M839VFAcTcx37toMZAcPmLBKziE1p5bGKX56PPFsmycKO11qGI a/j9Bt4+zkt29PgnbG6RosdKvR6vdWaC2E4dSaaXQSN1KB6A5GlyEK42utsN+YSL 9CfkePLAhdEUdQ4kDz6qkfpiJBnasoWDNjECAwEAAaOCAkEwggI9MB0GA1UdDgQW BBT7AyoB9BucH+grBjINqXvtRLW9fzAfBgNVHSMEGDAWgBS285Ce24KaQ7pUbxjK pPKQECCbSzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxNzQvdHZPUW50dUNta082Vkc4WXlxVHlrQkFnbTBzLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdHZPUW50dUNta082Vkc4WXlxVHlr QkFnbTBzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMTc0L3R2T1FudHVDbWtPNlZHOFl5cVR5a0JBZ20wcy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW4fHMpL6tEwTXNB02L0IKCKUtRmDTHVx0bVMO8Qiuu0d/z6KdkMpL KIvw9fqxk0iHZS8w6kvUDgm3YgfQvbEg/p7bF+PlA6MIGk3DgtdeaLPK42XerHxv XtK/noNj7V4b9gPAmeflfnbhRz8MijpLH5TuA0gU8wUExnkqFQfZMpY+jzeDM+9P psiPMTegURbs97vRGG+17uucruqGOFh63rhZxSUEBrnoiCrC8FCce3ce+7Hx0NDR IdD9WDjkBNTrtWewsm0imtn27EvImKecB9xT7WBqdowZmCiJoBFUUQIAL/GCREWO FEI+UX12SCR5R/PURs/SaJ4xzLoRlhmI -----END CERTIFICATE-----Generated at Sun Feb 16 22:18:35 2025 by rpki-client