$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4688/IKcN2Pan97KkZ1Mu0bYKphCilzk.mft File: IKcN2Pan97KkZ1Mu0bYKphCilzk.mft (raw, json) Hash identifier: Jf4L+86cpGo7SUbJpMpcmW3d7cVNdn+INKc9CFWcjug= Subject key identifier: DF:5C:C2:43:89:0F:8A:03:39:B1:2B:22:C3:8A:AE:57:02:F1:17:36 Authority key identifier: 20:A7:0D:D8:F6:A7:F7:B2:A4:67:53:2E:D1:B6:0A:A6:10:A2:97:39 Certificate issuer: /CN=20A70DD8F6A7F7B2A467532ED1B60AA610A29739 Certificate serial: 48 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IKcN2Pan97KkZ1Mu0bYKphCilzk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4688/IKcN2Pan97KkZ1Mu0bYKphCilzk.mft Manifest number: 08FA Signing time: Fri 06 Jun 2025 12:03:30 +0000 Manifest this update: Fri 06 Jun 2025 12:03:30 +0000 Manifest next update: Sat 21 Jun 2025 12:03:30 +0000 Files and hashes: 1: IKcN2Pan97KkZ1Mu0bYKphCilzk.crl (hash: 2+v1pOYFpQfYJfK9bPpBV/fcxylz0d2VJZfwgAVWUKQ=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4688/IKcN2Pan97KkZ1Mu0bYKphCilzk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4688/IKcN2Pan97KkZ1Mu0bYKphCilzk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IKcN2Pan97KkZ1Mu0bYKphCilzk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 14:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A70DD8F6A7F7B2A467532ED1B60AA610A29739 Validity Not Before: May 23 09:51:20 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=DF5CC243890F8A0339B12B22C38AAE5702F11736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:24:22:dc:05:1a:2d:9c:ec:8f:5c:54:b8:73: ce:d0:73:6c:52:f9:6c:3d:5e:66:2f:54:56:83:02: d6:98:8d:54:ba:1c:e5:32:2d:2a:a4:10:fc:5f:c5: 27:66:27:73:c7:f7:ac:f3:30:79:14:1e:70:03:de: 86:55:3f:09:86:20:bf:e3:4d:f7:56:69:94:d1:44: e0:a5:20:ac:5d:e9:d9:0e:19:48:a3:be:60:09:3a: f0:ed:51:aa:68:e2:23:85:3b:7d:d1:d1:91:47:f3: b0:a3:7e:7d:ca:7c:94:43:13:5d:31:9c:c5:6f:d8: ff:ee:5f:be:fe:b7:00:db:eb:1a:24:34:4b:8e:ec: 1b:d7:f9:67:1d:65:31:04:5b:6a:4f:56:5e:27:6d: 4e:5d:08:a1:89:99:52:86:de:28:b5:86:b7:c0:3d: 5d:eb:91:23:5e:e5:93:69:03:9d:e1:2f:99:f7:e6: d4:c5:e3:5a:8e:d6:ba:e3:d6:f9:72:67:f1:a3:96: e8:d2:dc:90:78:8a:88:52:0f:01:d8:48:1a:d4:17: 1d:7d:da:86:a0:41:76:54:4e:11:96:5f:0d:2c:e7: eb:c8:82:e8:40:05:14:90:cf:5b:00:9e:fe:fc:2f: 0c:2f:33:45:0d:a4:27:8b:6c:96:1e:b8:98:6a:c2: a8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5C:C2:43:89:0F:8A:03:39:B1:2B:22:C3:8A:AE:57:02:F1:17:36 X509v3 Authority Key Identifier: keyid:20:A7:0D:D8:F6:A7:F7:B2:A4:67:53:2E:D1:B6:0A:A6:10:A2:97:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4688/IKcN2Pan97KkZ1Mu0bYKphCilzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IKcN2Pan97KkZ1Mu0bYKphCilzk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4688/IKcN2Pan97KkZ1Mu0bYKphCilzk.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:76:39:80:05:6c:af:0e:26:ad:ef:be:d6:5e:2d:50:a0:18: 74:09:f9:1e:02:5d:6c:e0:e5:43:f7:77:1e:24:ea:90:96:f7: 5d:90:a5:0c:94:32:a8:2b:75:3a:ea:e8:4b:76:af:e4:03:cb: 5a:e1:4f:b0:05:69:17:f6:59:3d:df:ba:89:77:02:cb:9f:1a: 83:73:44:d3:65:9c:28:ce:44:86:78:10:18:5d:16:6b:61:f5: a1:4d:68:80:e3:12:f8:5a:05:9d:59:89:c6:78:7f:a4:e7:ed: 38:a2:aa:dd:8d:f2:93:8e:6b:b1:43:73:40:db:c1:a1:02:10: fb:d8:87:68:ec:78:bc:cc:fa:43:e1:cd:25:6f:19:78:e9:f9: d2:a7:52:8a:a9:24:8f:af:d9:d1:e7:e0:72:c1:24:b5:c2:1c: 63:8e:7c:32:34:69:43:c7:73:71:ef:80:e2:83:c2:3e:97:9b: 81:7e:e8:11:cd:77:86:a2:a4:ac:cf:14:95:df:11:0a:d0:0a: 2e:b8:32:e7:60:ad:ac:1f:da:94:07:e7:27:47:b5:94:0d:72: 1e:79:a7:44:5d:dd:7f:5b:a7:d6:87:0f:fd:4e:73:2e:e5:6f: 50:aa:3c:0a:54:21:76:50:6c:88:0c:a1:d4:55:10:39:43:2d: c0:91:3d:6e -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMEE3 MEREOEY2QTdGN0IyQTQ2NzUzMkVEMUI2MEFBNjEwQTI5NzM5MB4XDTI1MDUyMzA5 NTEyMFoXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoREY1Q0MyNDM4OTBGOEEw MzM5QjEyQjIyQzM4QUFFNTcwMkYxMTczNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ8kItwFGi2c7I9cVLhzztBzbFL5bD1eZi9UVoMC1piNVLoc5TIt KqQQ/F/FJ2Ync8f3rPMweRQecAPehlU/CYYgv+NN91ZplNFE4KUgrF3p2Q4ZSKO+ YAk68O1RqmjiI4U7fdHRkUfzsKN+fcp8lEMTXTGcxW/Y/+5fvv63ANvrGiQ0S47s G9f5Zx1lMQRbak9WXidtTl0IoYmZUobeKLWGt8A9XeuRI17lk2kDneEvmffm1MXj Wo7WuuPW+XJn8aOW6NLckHiKiFIPAdhIGtQXHX3ahqBBdlROEZZfDSzn68iC6EAF FJDPWwCe/vwvDC8zRQ2kJ4tslh64mGrCqDECAwEAAaOCAj8wggI7MB0GA1UdDgQW BBTfXMJDiQ+KAzmxKyLDiq5XAvEXNjAfBgNVHSMEGDAWgBQgpw3Y9qf3sqRnUy7R tgqmEKKXOTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDY4OC9JS2NOMlBhbjk3S2taMU11MGJZS3BoQ2lsemsuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9JS2NOMlBhbjk3S2taMU11MGJZS3Bo Q2lsemsuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNDY4OC9JS2NOMlBhbjk3S2taMU11MGJZS3BoQ2lsemsubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEAY3Y5gAVsrw4mre++1l4tUKAYdAn5HgJdbODlQ/d3HiTqkJb3XZClDJQy qCt1OuroS3av5APLWuFPsAVpF/ZZPd+6iXcCy58ag3NE02WcKM5EhngQGF0Wa2H1 oU1ogOMS+FoFnVmJxnh/pOftOKKq3Y3yk45rsUNzQNvBoQIQ+9iHaOx4vMz6Q+HN JW8ZeOn50qdSiqkkj6/Z0efgcsEktcIcY458MjRpQ8dzce+A4oPCPpebgX7oEc13 hqKkrM8Uld8RCtAKLrgy52CtrB/alAfnJ0e1lA1yHnmnRF3df1un1ocP/U5zLuVv UKo8ClQhdlBsiAyh1FUQOUMtwJE9bg== -----END CERTIFICATE-----Generated at Fri Jun 6 17:34:18 2025 by rpki-client