$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft File: FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft (raw, json) Hash identifier: tIegnWANynS/lOIJ+0NEiHpvid5GKNb4rhg89ynX+hs= Subject key identifier: B9:43:24:40:9B:59:15:BC:C5:9B:9F:13:CE:4C:B4:27:46:E4:1E:2A Authority key identifier: 14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85 Certificate issuer: /CN=1426C384E2A49283FA747D079E83DD32B65D7E85 Certificate serial: 4D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft Manifest number: 08FA Signing time: Fri 06 Jun 2025 12:16:08 +0000 Manifest this update: Fri 06 Jun 2025 12:16:08 +0000 Manifest next update: Sat 21 Jun 2025 12:16:08 +0000 Files and hashes: 1: 3DMBnMrkzHTEZydJ8Z_YbgcDNis.roa (hash: pABnEty8E04ycw6oPAlLGvw4El3xbN6PSUwGEWh2rlU=) 2: FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl (hash: CCSSwN29FTd9ndw47/EEaUg7Iyd8pnHw3GSk3RCLjJ8=) 3: rr2l_BrlPICs6GaXOLyguTCsRdA.roa (hash: SPVoInmOh3chMjxVqsWUoEpQZMOkSDuudZk/GJi7f3Q=) 4: ucLnLB-OnNXJ5rn9FADqN8YGxj4.roa (hash: DkgGRBDToPP1fqMqqt356eBNizFUzzsaWYf3AYdg5cY=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 14:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1426C384E2A49283FA747D079E83DD32B65D7E85 Validity Not Before: May 23 09:52:19 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=B94324409B5915BCC59B9F13CE4CB42746E41E2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:52:97:0c:2c:8e:9a:c6:90:9d:04:a0:79:eb: f2:64:c2:46:b4:3e:99:44:a2:f6:7a:81:4b:a6:df: af:b7:f2:e9:e6:0e:64:32:00:12:a8:6c:33:80:20: e4:c9:3d:a5:8c:de:7d:45:29:63:45:04:95:96:1c: f0:64:7c:7c:82:b1:40:a3:63:19:b2:42:58:03:03: b3:ac:af:c7:33:62:08:fe:d6:04:6e:8a:29:09:be: 5c:e9:da:45:a7:ec:aa:05:4e:07:14:91:f7:b1:0c: ee:54:a5:71:7e:00:28:d8:a5:d2:65:af:55:82:49: 0b:43:f1:45:68:17:64:e4:7d:38:8a:86:d9:4a:43: a1:47:09:78:4d:a3:36:ae:52:a2:3c:c3:bf:f5:ce: aa:46:68:b6:f6:2e:46:12:ba:3d:7f:0b:8c:1e:df: 82:a2:1d:88:d3:39:2d:6d:c2:a5:51:9b:76:0c:65: 87:0a:3b:7d:5e:f7:6e:f2:2a:39:94:bc:6b:68:a1: 50:6a:00:03:1d:af:17:b1:92:6e:0c:58:2d:d2:71: 0f:c3:35:3e:18:e7:a4:56:3d:f7:dc:9c:1a:e1:f2: 2c:cb:39:b0:14:ea:6a:6a:31:fc:64:b2:d9:bf:a6: 20:d8:59:42:f0:ea:e7:f6:f6:d8:13:f2:1b:9f:18: 1e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:43:24:40:9B:59:15:BC:C5:9B:9F:13:CE:4C:B4:27:46:E4:1E:2A X509v3 Authority Key Identifier: keyid:14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:9d:8b:35:f4:2b:70:11:4b:ea:8f:93:14:b6:ec:60:35:0f: 7a:fd:93:38:7f:6a:c8:d9:af:42:bb:f7:60:88:a5:e2:a6:ac: f3:96:6d:1e:eb:f7:d6:b4:46:23:79:90:59:b0:e7:ce:21:63: 29:b8:61:65:a0:ab:1e:06:60:00:68:24:b9:4b:67:87:73:fe: d3:37:ae:43:92:01:b7:36:4a:79:f6:b8:af:b0:87:42:63:d3: 51:86:32:f8:e0:3f:32:27:2f:7b:fd:9b:00:0d:04:26:01:3e: 22:ef:80:f7:e2:54:46:a5:3d:b7:71:fd:b9:b8:d5:1f:e4:a3: 64:1c:c7:e3:78:37:e9:58:63:a6:32:2c:47:d0:f7:57:08:e1: f2:46:1f:10:15:6d:14:1c:b9:db:09:90:43:1f:87:5d:2e:4d: 89:64:db:96:fc:a3:c7:55:60:14:df:48:e3:0d:d9:f6:80:75: 54:66:43:6e:16:54:27:12:c6:87:12:56:4e:67:ee:c1:8a:9a: 03:7b:89:fa:35:cb:9c:d0:b3:2e:82:81:74:55:ee:54:65:b3: b9:5d:70:e1:44:11:b5:9a:f3:0f:2c:77:ca:53:47:2e:f2:fb: ca:5d:c9:3b:47:3c:2f:15:f7:c7:15:12:c3:5a:b6:18:6a:0c: 88:bf:70:d3 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNDI2 QzM4NEUyQTQ5MjgzRkE3NDdEMDc5RTgzREQzMkI2NUQ3RTg1MB4XDTI1MDUyMzA5 NTIxOVoXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoQjk0MzI0NDA5QjU5MTVC Q0M1OUI5RjEzQ0U0Q0I0Mjc0NkU0MUUyQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM9SlwwsjprGkJ0EoHnr8mTCRrQ+mUSi9nqBS6bfr7fy6eYOZDIA EqhsM4Ag5Mk9pYzefUUpY0UElZYc8GR8fIKxQKNjGbJCWAMDs6yvxzNiCP7WBG6K KQm+XOnaRafsqgVOBxSR97EM7lSlcX4AKNil0mWvVYJJC0PxRWgXZOR9OIqG2UpD oUcJeE2jNq5SojzDv/XOqkZotvYuRhK6PX8LjB7fgqIdiNM5LW3CpVGbdgxlhwo7 fV73bvIqOZS8a2ihUGoAAx2vF7GSbgxYLdJxD8M1PhjnpFY999ycGuHyLMs5sBTq amox/GSy2b+mINhZQvDq5/b22BPyG58YHpkCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBS5QyRAm1kVvMWbnxPOTLQnRuQeKjAfBgNVHSMEGDAWgBQUJsOE4qSSg/p0fQee g90ytl1+hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTI1L0ZDYkRoT0tra29QNmRIMEhub1BkTXJaZGZvVS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZDYkRoT0tra29QNmRIMEhub1BkTXJa ZGZvVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MjUvRkNiRGhPS2trb1A2ZEgwSG5vUGRNclpkZm9VLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAACdizX0K3ARS+qPkxS27GA1D3r9kzh/asjZr0K792CIpeKmrPOWbR7r99a0 RiN5kFmw584hYym4YWWgqx4GYABoJLlLZ4dz/tM3rkOSAbc2Snn2uK+wh0Jj01GG MvjgPzInL3v9mwANBCYBPiLvgPfiVEalPbdx/bm41R/ko2Qcx+N4N+lYY6YyLEfQ 91cI4fJGHxAVbRQcudsJkEMfh10uTYlk25b8o8dVYBTfSOMN2faAdVRmQ24WVCcS xocSVk5n7sGKmgN7ifo1y5zQsy6CgXRV7lRls7ldcOFEEbWa8w8sd8pTRy7y+8pd yTtHPC8V98cVEsNathhqDIi/cNM= -----END CERTIFICATE-----Generated at Fri Jun 6 17:32:12 2025 by rpki-client