$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.mft File: h9rsIO30ogEEI917AE4VdPETpzU.mft (raw, json) Hash identifier: 3WQU7PZUWrhvBcWS69e3mEL7rsksvrjdHYAtrPav9xE= Subject key identifier: 1F:00:71:20:23:AD:96:60:85:1F:4E:4E:C5:D3:34:5D:4F:CA:60:BD Authority key identifier: 87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35 Certificate issuer: /CN=87DAEC20EDF4A2010423DD7B004E1574F113A735 Certificate serial: 35 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.mft Manifest number: 02FB Signing time: Sun 16 Feb 2025 17:55:47 +0000 Manifest this update: Sun 16 Feb 2025 17:55:47 +0000 Manifest next update: Mon 03 Mar 2025 17:55:47 +0000 Files and hashes: 1: g5xMfTlCv6yT6FmfsGO_OjhTuOE.roa (hash: Iu3Os0J4wk8f3XlxlFnOJlAiwwKkxZbuiZxxIyoQ7BE=) 2: h9rsIO30ogEEI917AE4VdPETpzU.crl (hash: tpGyf9+pRlDyr2S9xqy42d+JTmP4K6IUXJpY3sO1OW8=) 3: iU4M5_1vVClsIdSo6AKWusrbOeI.roa (hash: 5nWzulpEDokK/w4oeaq8jCheJ1eHHLlVDhSD1Tgk4mk=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87DAEC20EDF4A2010423DD7B004E1574F113A735 Validity Not Before: Feb 15 01:37:09 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=1F00712023AD9660851F4E4EC5D3345D4FCA60BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9f:67:ef:0b:cb:3a:84:f1:2c:e7:d8:df:e8: 82:b1:d8:8b:da:34:68:4e:b6:f9:c7:99:fa:59:fa: d1:08:00:b8:04:c2:36:f9:1d:b4:73:5f:96:f0:d8: c4:5f:75:a4:10:44:33:35:1a:ce:7e:c1:fd:bd:d1: fa:4e:e6:f4:52:53:67:ec:71:76:c6:96:f9:96:d2: 95:30:78:a1:89:1a:c9:4a:da:a0:8f:ab:b0:63:bf: 4a:64:ea:1b:c7:7b:ec:a0:87:9e:63:a8:6a:79:a5: 60:57:4d:2f:50:d4:8c:81:e7:c6:38:45:f1:2c:96: a5:02:b6:f1:e2:8a:48:f7:4f:0c:91:0e:b7:1c:60: f1:9f:f2:50:ba:cd:e4:87:4e:d0:34:f0:2c:b3:f2: ff:4f:1f:37:a9:22:8f:50:aa:03:ed:e3:35:12:61: f5:fd:d7:0c:6a:01:82:91:90:35:b9:33:05:c0:d8: c4:25:03:ab:ba:92:f2:5f:2f:86:bb:e1:1a:78:c3: 93:63:95:c5:55:72:c4:c0:bf:ff:cd:63:2d:24:c7: af:1f:ce:1a:57:51:61:86:8d:f9:b5:5f:4e:0a:01: da:ca:89:62:23:97:12:61:62:7b:28:b9:fa:50:01: 93:c3:c3:a7:fd:a9:f8:e3:76:e0:28:1b:7b:df:30: 4c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:00:71:20:23:AD:96:60:85:1F:4E:4E:C5:D3:34:5D:4F:CA:60:BD X509v3 Authority Key Identifier: keyid:87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:04:56:eb:3b:28:60:6a:97:a6:9b:1a:96:0c:a4:8b:04:61: 02:c1:33:a2:5a:04:8a:53:39:07:11:7b:22:28:96:5b:54:c0: 07:bc:4b:02:e7:13:ed:6e:21:97:f3:a9:26:d2:3f:ab:df:5d: e4:b4:74:c5:94:7a:dc:b5:08:ff:ab:d5:ba:1a:9b:5b:a9:c1: 47:25:cc:54:ca:ca:a3:ff:ca:fc:5a:bc:96:b5:bb:2e:63:63: 64:a7:01:ce:f5:49:c5:3f:8e:5e:fb:76:e2:0e:e4:2a:7c:21: 2c:96:fa:12:4e:e1:7a:b0:8a:01:c9:31:7d:2d:f0:db:e5:40: ca:06:29:65:9d:e6:9c:1f:d1:4c:39:d4:36:64:02:76:54:d7: 6f:f0:58:c2:49:ef:19:7b:cc:ba:51:69:68:72:7b:3b:64:24: 9e:c2:7d:bc:31:6c:69:1d:c9:8d:9f:b5:4a:25:b4:35:56:12: 37:5c:81:a9:32:25:00:c2:51:7a:f3:87:a2:85:43:59:44:65: 44:6d:fd:6c:23:2d:9b:93:f1:dc:1b:d8:a5:b2:0a:2b:82:14: b7:c3:9b:69:18:29:b9:aa:b2:27:53:02:f0:11:54:6a:97:7f: 9f:90:e6:20:57:6d:26:9c:04:a8:86:08:19:0d:45:bf:00:eb: e3:0b:97:8c -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4N0RB RUMyMEVERjRBMjAxMDQyM0REN0IwMDRFMTU3NEYxMTNBNzM1MB4XDTI1MDIxNTAx MzcwOVoXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoMUYwMDcxMjAyM0FEOTY2 MDg1MUY0RTRFQzVEMzM0NUQ0RkNBNjBCRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOifZ+8LyzqE8Szn2N/ogrHYi9o0aE62+ceZ+ln60QgAuATCNvkd tHNflvDYxF91pBBEMzUazn7B/b3R+k7m9FJTZ+xxdsaW+ZbSlTB4oYkayUraoI+r sGO/SmTqG8d77KCHnmOoanmlYFdNL1DUjIHnxjhF8SyWpQK28eKKSPdPDJEOtxxg 8Z/yULrN5IdO0DTwLLPy/08fN6kij1CqA+3jNRJh9f3XDGoBgpGQNbkzBcDYxCUD q7qS8l8vhrvhGnjDk2OVxVVyxMC//81jLSTHrx/OGldRYYaN+bVfTgoB2sqJYiOX EmFieyi5+lABk8PDp/2p+ON24Cgbe98wTAMCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQfAHEgI62WYIUfTk7F0zRdT8pgvTAfBgNVHSMEGDAWgBSH2uwg7fSiAQQj3XsA ThV08ROnNTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxNDQvaDlyc0lPMzBvZ0VFSTkxN0FFNFZkUEVUcHpVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaDlyc0lPMzBvZ0VFSTkxN0FFNFZk UEVUcHpVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTQ0L2g5cnNJTzMwb2dFRUk5MTdBRTRWZFBFVHB6VS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkBFbrOyhgapemmxqWDKSLBGECwTOiWgSKUzkHEXsiKJZbVMAHvEsC 5xPtbiGX86km0j+r313ktHTFlHrctQj/q9W6GptbqcFHJcxUysqj/8r8WryWtbsu Y2NkpwHO9UnFP45e+3biDuQqfCEslvoSTuF6sIoByTF9LfDb5UDKBillneacH9FM OdQ2ZAJ2VNdv8FjCSe8Ze8y6UWlocns7ZCSewn28MWxpHcmNn7VKJbQ1VhI3XIGp MiUAwlF684eihUNZRGVEbf1sIy2bk/HcG9ilsgorghS3w5tpGCm5qrInUwLwEVRq l3+fkOYgV20mnASohggZDUW/AOvjC5eM -----END CERTIFICATE-----Generated at Sun Feb 16 22:29:45 2025 by rpki-client