$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.mft File: 4qAcFfKuEP_hot-5OfujIiLIHos.mft (raw, json) Hash identifier: Fxbu/uWZkIxvYZVZpXxZegrUcprF6wqmCjJTxEya7bk= Subject key identifier: C6:CB:79:46:F6:B7:FE:B9:3E:DC:5D:C4:13:3E:65:74:03:EF:A9:9B Authority key identifier: E2:A0:1C:15:F2:AE:10:FF:E1:A2:DF:B9:39:FB:A3:22:22:C8:1E:8B Certificate issuer: /CN=E2A01C15F2AE10FFE1A2DFB939FBA32222C81E8B Certificate serial: 18 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qAcFfKuEP_hot-5OfujIiLIHos.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.mft Manifest number: 050F Signing time: Thu 05 Jun 2025 13:48:32 +0000 Manifest this update: Thu 05 Jun 2025 13:48:32 +0000 Manifest next update: Fri 20 Jun 2025 13:48:32 +0000 Files and hashes: 1: 4qAcFfKuEP_hot-5OfujIiLIHos.crl (hash: Tuw9WcsWNApw2YfBtRBiU4VCSRT3qufmO7RBXZR5gzQ=) 2: GBW_VD7DOK2r1RAwqUE501IE0hw.roa (hash: b8qF1fCMRyn1zHloCjm2VRm+d5A9XnfJA4ozLK4JvKI=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qAcFfKuEP_hot-5OfujIiLIHos.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 16:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2A01C15F2AE10FFE1A2DFB939FBA32222C81E8B Validity Not Before: May 23 10:03:06 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=C6CB7946F6B7FEB93EDC5DC4133E657403EFA99B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4a:e7:4a:64:d4:83:bc:9a:e7:1a:43:9c:fb: 2c:b7:2c:34:a2:17:09:61:30:55:8f:07:cd:e0:b2: 7f:44:cc:2f:57:a1:f2:9e:fa:7b:96:f8:4a:df:fb: 19:d6:44:07:47:68:54:48:49:8b:0d:cc:61:77:78: b3:11:e7:06:f0:2a:90:66:35:6e:d5:bb:96:51:ce: e6:5e:62:5c:65:6f:85:18:b3:4f:f3:d1:2a:87:5b: 3d:3a:b4:25:49:eb:7c:b8:67:3e:d8:d3:86:f4:26: d7:ce:c5:29:6a:bc:dd:50:71:18:97:7a:75:8a:a3: b5:eb:d3:87:3b:98:e5:a2:a7:06:e7:c5:a9:f6:5d: 27:5f:19:da:94:62:34:0e:a5:f1:c5:71:35:07:82: 17:fb:ac:f8:7b:63:8c:0e:c5:93:b0:ab:84:ec:22: a1:4c:6e:23:1a:3c:bb:f8:14:eb:3d:21:97:9e:da: dd:3a:92:69:98:03:40:2e:eb:9a:69:bb:d5:ea:b9: 4d:92:3b:82:d7:36:34:48:62:3f:d2:65:e7:83:f6: e5:27:7a:e4:47:3d:37:0b:13:ac:c1:24:8a:45:fa: 87:8d:20:10:d2:4b:45:b4:f1:13:28:06:8f:98:c6: 75:ee:8a:83:5a:37:d1:29:3f:25:5c:f0:31:03:38: b6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CB:79:46:F6:B7:FE:B9:3E:DC:5D:C4:13:3E:65:74:03:EF:A9:9B X509v3 Authority Key Identifier: keyid:E2:A0:1C:15:F2:AE:10:FF:E1:A2:DF:B9:39:FB:A3:22:22:C8:1E:8B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qAcFfKuEP_hot-5OfujIiLIHos.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:70:1d:e5:93:37:24:43:6e:a7:0d:85:fc:5b:b9:40:95:26: 72:1b:83:14:db:79:0f:2c:d2:63:63:ec:3e:a1:f9:f2:60:d6: 0e:93:6e:83:34:45:e2:b9:5d:2f:d8:52:d6:f0:35:ba:02:1f: ab:a1:79:c8:34:83:45:ab:d5:b0:81:07:91:40:1f:bd:11:cf: 88:b2:cd:79:37:d9:97:40:52:90:72:f0:2b:96:04:f7:b9:e1: 2f:23:d5:a3:8c:cd:9a:c2:b7:3b:65:87:c8:49:88:56:fd:37: 02:b6:ba:8e:aa:c1:02:d8:dd:31:a8:bf:d5:c6:be:b8:4f:a6: 21:fe:e2:89:26:8f:24:2f:5a:f6:bf:50:d5:47:71:40:89:55: c3:46:03:07:94:3b:6d:66:aa:d6:4e:8e:71:27:25:ad:5c:df: 22:a7:5b:a4:fc:f0:9c:ce:d5:b6:43:bb:78:c6:ce:8d:0b:0a: be:47:79:fe:5c:f8:87:e8:52:c1:ee:86:80:59:52:e6:83:af: 35:f3:89:b9:82:41:d9:30:29:57:c0:f4:00:0e:d1:1f:36:14: f6:96:be:f0:7e:93:d2:a4:47:fc:ef:2e:69:18:24:fe:30:ab: 43:77:c3:05:96:bf:9a:de:d2:8a:41:e8:a7:0f:85:02:cb:9c: 59:66:c7:ca -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMkEw MUMxNUYyQUUxMEZGRTFBMkRGQjkzOUZCQTMyMjIyQzgxRThCMB4XDTI1MDUyMzEw MDMwNloXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoQzZDQjc5NDZGNkI3RkVC OTNFREM1REM0MTMzRTY1NzQwM0VGQTk5QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANhK50pk1IO8mucaQ5z7LLcsNKIXCWEwVY8HzeCyf0TML1eh8p76 e5b4St/7GdZEB0doVEhJiw3MYXd4sxHnBvAqkGY1btW7llHO5l5iXGVvhRizT/PR KodbPTq0JUnrfLhnPtjThvQm187FKWq83VBxGJd6dYqjtevThzuY5aKnBufFqfZd J18Z2pRiNA6l8cVxNQeCF/us+HtjjA7Fk7CrhOwioUxuIxo8u/gU6z0hl57a3TqS aZgDQC7rmmm71eq5TZI7gtc2NEhiP9Jl54P25Sd65Ec9NwsTrMEkikX6h40gENJL RbTxEygGj5jGde6Kg1o30Sk/JVzwMQM4tssCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBTGy3lG9rf+uT7cXcQTPmV0A++pmzAfBgNVHSMEGDAWgBTioBwV8q4Q/+Gi37k5 +6MiIsgeizAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxMTIvNHFBY0ZmS3VFUF9ob3QtNU9mdWpJaUxJSG9zLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNHFBY0ZmS3VFUF9ob3QtNU9mdWpJ aUxJSG9zLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTEyLzRxQWNGZkt1RVBfaG90LTVPZnVqSWlMSUhvcy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIcB3lkzckQ26nDYX8W7lAlSZyG4MU23kPLNJjY+w+ofnyYNYOk26D NEXiuV0v2FLW8DW6Ah+roXnININFq9WwgQeRQB+9Ec+Iss15N9mXQFKQcvArlgT3 ueEvI9WjjM2awrc7ZYfISYhW/TcCtrqOqsEC2N0xqL/Vxr64T6Yh/uKJJo8kL1r2 v1DVR3FAiVXDRgMHlDttZqrWTo5xJyWtXN8ip1uk/PCcztW2Q7t4xs6NCwq+R3n+ XPiH6FLB7oaAWVLmg68184m5gkHZMClXwPQADtEfNhT2lr7wfpPSpEf87y5pGCT+ MKtDd8MFlr+a3tKKQeinD4UCy5xZZsfK -----END CERTIFICATE-----Generated at Thu Jun 5 20:18:14 2025 by rpki-client