$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/cQ-YPYvNYx5JTXIRSbv4r57waKA.mft File: cQ-YPYvNYx5JTXIRSbv4r57waKA.mft (raw, json) Hash identifier: XlqSvaweGutLUr4Y+W0W8VuZ7EPZa6Hmv+Xn6YG/16Q= Subject key identifier: 5B:47:70:CF:BA:EA:F2:3F:7E:50:8D:AD:1A:D2:F8:28:6D:B6:2A:11 Authority key identifier: 71:0F:98:3D:8B:CD:63:1E:49:4D:72:11:49:BB:F8:AF:9E:F0:68:A0 Certificate issuer: /CN=710F983D8BCD631E494D721149BBF8AF9EF068A0 Certificate serial: 2F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cQ-YPYvNYx5JTXIRSbv4r57waKA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/cQ-YPYvNYx5JTXIRSbv4r57waKA.mft Manifest number: 0303 Signing time: Sun 16 Feb 2025 17:59:28 +0000 Manifest this update: Sun 16 Feb 2025 17:59:28 +0000 Manifest next update: Mon 03 Mar 2025 17:59:28 +0000 Files and hashes: 1: cQ-YPYvNYx5JTXIRSbv4r57waKA.crl (hash: ghgrpSh2sMDLg5IgsSuO8ILIKFJpdM/5DGnQUJ6PZYI=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/cQ-YPYvNYx5JTXIRSbv4r57waKA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/cQ-YPYvNYx5JTXIRSbv4r57waKA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cQ-YPYvNYx5JTXIRSbv4r57waKA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=710F983D8BCD631E494D721149BBF8AF9EF068A0 Validity Not Before: Feb 15 01:37:02 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=5B4770CFBAEAF23F7E508DAD1AD2F8286DB62A11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:04:e4:11:fd:36:46:20:3d:09:28:a6:ec:b3: 61:68:c8:be:32:88:e0:7b:60:e5:0b:87:90:c2:4f: 34:af:b0:04:03:dc:c2:16:ee:5f:35:0a:53:87:3b: b4:72:14:15:a6:88:54:35:28:dd:79:1e:77:54:2c: 61:a5:2d:f2:47:d9:c0:d7:d7:38:59:cd:ca:1d:43: a9:5c:b0:81:fa:46:f9:09:c1:ce:2e:8c:d7:9f:0b: cd:7f:71:d9:14:b0:9c:7f:f1:4b:3d:cd:43:4d:fe: a8:0e:3e:47:c6:42:71:6c:05:78:74:b7:bd:01:1c: 77:0f:90:aa:cf:9d:ae:19:39:02:0c:7a:85:89:81: eb:ac:c8:cf:13:e5:d7:ef:f6:8a:b4:92:25:ab:1e: 05:9c:89:5f:47:7c:09:eb:28:63:56:e0:5a:ba:64: 8c:9c:8b:cf:27:16:57:9b:81:ab:eb:9a:9d:68:0e: 16:35:b1:a6:d8:81:d8:71:4c:1e:47:c1:11:aa:5f: b7:ea:99:44:03:af:a3:5d:1d:0a:20:04:10:fd:a9: fc:37:c8:d3:e5:fc:3f:39:48:e9:9c:ef:67:9e:ca: 4e:c2:da:f4:ac:22:78:e5:67:06:af:65:f2:86:2d: c8:1e:c3:18:1e:c2:bc:90:c3:e0:b3:15:c7:e2:f1: b6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:47:70:CF:BA:EA:F2:3F:7E:50:8D:AD:1A:D2:F8:28:6D:B6:2A:11 X509v3 Authority Key Identifier: keyid:71:0F:98:3D:8B:CD:63:1E:49:4D:72:11:49:BB:F8:AF:9E:F0:68:A0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/cQ-YPYvNYx5JTXIRSbv4r57waKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cQ-YPYvNYx5JTXIRSbv4r57waKA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/cQ-YPYvNYx5JTXIRSbv4r57waKA.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:ae:b9:65:5a:7e:ae:44:d7:29:e0:f7:47:df:2a:3a:bb:27: b2:a8:31:c4:a0:c1:ad:ea:40:b4:1d:cf:3a:a8:6f:c6:21:a4: 75:7b:60:7b:e0:02:7b:6d:fa:24:6f:f5:8f:8c:1c:47:14:5e: ae:ab:ed:27:a9:54:68:0f:98:eb:1f:05:4c:d3:75:75:6e:a4: 84:de:5b:5a:92:66:6c:43:b1:9e:b1:11:84:d5:1f:54:47:e2: 7e:01:03:62:00:10:5c:82:59:b8:89:a8:89:73:a0:86:c3:71: 0a:4c:3b:7e:19:08:a7:3f:94:5a:52:e1:e2:c5:13:b1:97:33: 81:93:bb:53:e6:04:1b:5c:e9:79:ef:64:40:88:a7:77:25:f0: d0:da:4a:8c:c9:c8:00:27:0e:b5:e6:79:74:67:07:b8:00:06: 10:f5:22:c5:db:75:5f:a5:fe:ff:0a:3f:57:6c:a0:f2:2f:18: 43:8e:c4:13:bb:fa:9e:6b:44:e4:54:10:74:ac:6b:e5:96:2b: 0a:82:7f:ce:5e:ac:58:e0:18:ac:f9:91:d4:9e:d7:88:d4:b5: 29:65:7e:29:7c:ba:3d:c9:31:46:45:64:31:82:77:c4:aa:f3: 0a:7e:c8:b0:87:5c:a3:77:2b:96:7d:b8:bb:1e:02:97:77:c2: 6b:4f:e9:cd -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MTBG OTgzRDhCQ0Q2MzFFNDk0RDcyMTE0OUJCRjhBRjlFRjA2OEEwMB4XDTI1MDIxNTAx MzcwMloXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoNUI0NzcwQ0ZCQUVBRjIz RjdFNTA4REFEMUFEMkY4Mjg2REI2MkExMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJcE5BH9NkYgPQkopuyzYWjIvjKI4Htg5QuHkMJPNK+wBAPcwhbu XzUKU4c7tHIUFaaIVDUo3Xked1QsYaUt8kfZwNfXOFnNyh1DqVywgfpG+QnBzi6M 158LzX9x2RSwnH/xSz3NQ03+qA4+R8ZCcWwFeHS3vQEcdw+Qqs+drhk5Agx6hYmB 66zIzxPl1+/2irSSJaseBZyJX0d8CesoY1bgWrpkjJyLzycWV5uBq+uanWgOFjWx ptiB2HFMHkfBEapft+qZRAOvo10dCiAEEP2p/DfI0+X8PzlI6ZzvZ57KTsLa9Kwi eOVnBq9l8oYtyB7DGB7CvJDD4LMVx+Lxts0CAwEAAaOCAj0wggI5MB0GA1UdDgQW BBRbR3DPuuryP35Qja0a0vgobbYqETAfBgNVHSMEGDAWgBRxD5g9i81jHklNchFJ u/ivnvBooDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDQwL2NRLVlQWXZOWXg1SlRYSVJTYnY0cjU3d2FLQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2NRLVlQWXZOWXg1SlRYSVJTYnY0cjU3 d2FLQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NDAvY1EtWVBZdk5ZeDVKVFhJUlNidjRyNTd3YUtBLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABmuuWVafq5E1yng90ffKjq7J7KoMcSgwa3qQLQdzzqob8YhpHV7YHvgAntt +iRv9Y+MHEcUXq6r7SepVGgPmOsfBUzTdXVupITeW1qSZmxDsZ6xEYTVH1RH4n4B A2IAEFyCWbiJqIlzoIbDcQpMO34ZCKc/lFpS4eLFE7GXM4GTu1PmBBtc6XnvZECI p3cl8NDaSozJyAAnDrXmeXRnB7gABhD1IsXbdV+l/v8KP1dsoPIvGEOOxBO7+p5r RORUEHSsa+WWKwqCf85erFjgGKz5kdSe14jUtSllfil8uj3JMUZFZDGCd8Sq8wp+ yLCHXKN3K5Z9uLseApd3wmtP6c0= -----END CERTIFICATE-----Generated at Sun Feb 16 22:09:29 2025 by rpki-client