$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft File: KJldaw3cIFs1lZMy0csdnYzwIoM.mft (raw, json) Hash identifier: D7e+NOY8rmqVgeo47uIiYk72CdOaG9wtX696U8CEBrM= Subject key identifier: 19:3C:C2:D3:EA:C8:3C:A5:06:17:97:A4:12:C8:BA:15:F7:B3:C2:8C Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83 Certificate issuer: /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283 Certificate serial: 5B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft Manifest number: 04EB Signing time: Sat 26 Apr 2025 11:02:41 +0000 Manifest this update: Sat 26 Apr 2025 11:02:41 +0000 Manifest next update: Sun 11 May 2025 11:02:41 +0000 Files and hashes: 1: -mYMw7XsJtfoO5kE329Xe5ZdRBA.roa (hash: lAQDEtM6Li/l2AK+USyDWDqLg3/fYCRYvXKyjX2XN44=) 2: 4anhyE7-8a504z0qlWykmXrajaA.roa (hash: SKmeryYWMhdBoZ69dMR8NMCjuZPyC2Rg3ezfiPvfDrU=) 3: ATtNaXgvXLvHxmNPQi2fhNz0xAU.roa (hash: 5qKEpAn3+46EHnJ/HKGE0IWsZ9/Dy/CnmdVmEwH5KQw=) 4: KJldaw3cIFs1lZMy0csdnYzwIoM.crl (hash: qomKWC9F8GVqi6vgw9+BF13NRIMbXnyVtDTvbRHc3kc=) 5: UhUJZOP6z5fiIJjWD6T1UIEjTiY.roa (hash: alsPorJByUJdefLgiwErl6tbK0FZrGD6EhKymNxg2pI=) 6: XtJ2_unfeUd-nKXb0mwjV1bCsZ4.roa (hash: OoyHMVlZjL9psldZ9ccR67jXyS9wmMM29Lvl+AiQYZ0=) 7: klJO9bi11tHF8Gn4fEIeOiTrqws.roa (hash: 8cV9gwjNmH9ax841U5qmbl7ppbPy8m8tAcB+r/vUKVk=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283 Validity Not Before: Apr 15 01:35:00 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=193CC2D3EAC83CA5061797A412C8BA15F7B3C28C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f5:bc:29:a4:07:80:be:bb:cc:43:98:23:7b: ab:9d:4c:c8:06:88:9b:b5:bd:e8:f9:ab:ad:8b:9f: fb:1b:02:4a:7b:bc:f2:cf:24:75:69:b6:71:89:63: a5:fc:5b:b5:bc:7d:9e:4b:89:1b:bd:ce:37:31:0d: 2e:60:2c:78:09:ea:02:a1:4f:d1:88:55:88:51:df: b4:0a:ef:95:1b:e7:fe:10:32:7c:1d:99:4a:cc:0b: 10:b4:6c:7d:18:ea:5d:c8:db:19:c0:df:0b:fc:5c: 9e:c4:92:30:62:f2:ce:f4:d7:c6:d4:64:03:5e:c4: ce:33:9c:13:ea:65:3c:e5:0a:df:69:42:42:a0:76: 1c:ef:e9:a7:99:f8:49:3d:7c:fa:46:14:d0:5b:d1: c6:b1:51:d8:3f:f1:bc:4b:88:02:25:1c:8d:36:1d: 60:2a:5c:33:e8:17:e6:ad:f5:f1:39:49:ca:88:e0: 14:51:cb:30:a0:7e:11:ae:9d:53:ae:0c:8c:89:34: 97:66:c4:e7:78:5a:c1:36:df:b1:cf:71:1e:d6:91: ba:3b:c3:a8:bf:f3:d1:58:fb:e0:3a:7d:84:a6:81: 4a:6c:0e:ff:c3:91:13:67:ea:48:9c:e3:1f:d2:a6: 50:ee:8a:e3:05:06:8e:f5:92:8c:b3:1e:58:53:f5: 5b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3C:C2:D3:EA:C8:3C:A5:06:17:97:A4:12:C8:BA:15:F7:B3:C2:8C X509v3 Authority Key Identifier: keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:08:ce:e6:70:8d:8b:6b:0a:97:9c:cf:78:ec:e9:f6:80:07: 4e:d1:8e:ce:f8:5b:95:f9:0c:f1:c9:41:30:16:2c:35:7a:f1: a6:c4:47:3e:8b:d4:6f:43:6b:46:c2:fe:81:c9:38:bf:23:94: 4f:77:1e:f3:0a:37:95:ba:5f:6e:bd:29:cf:ea:ae:f8:ac:be: 67:3d:fc:b7:57:03:35:d1:77:45:66:57:fa:72:c0:c6:a6:49: 13:a7:5d:e3:37:24:40:34:9f:60:4c:55:f7:72:36:ea:b7:f3: 42:15:77:96:0d:9a:a4:e1:41:63:05:64:e6:08:64:db:78:71: e3:78:55:51:2f:5b:1e:5e:4a:45:a4:13:55:2f:64:e8:1a:fa: fd:25:3c:99:60:ed:7c:02:8c:d5:3e:d3:cf:91:92:3f:c0:6f: 01:e1:8d:6d:23:2e:2c:6f:14:07:6f:f0:23:35:7b:4f:48:29: e4:34:06:eb:41:c2:d0:32:bd:5b:a1:8f:6c:92:4c:f7:16:50: f0:5b:53:3d:ab:0a:d6:af:fe:58:9c:4e:84:ab:6f:24:35:71: 83:1b:61:13:95:7c:88:dc:76:34:9b:c3:9c:a3:2c:7d:94:8c: d1:b2:e6:37:6a:0a:a4:cd:c4:af:b1:f0:15:63:e8:e5:df:6e: b9:59:6e:a3 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyODk5 NUQ2QjBEREMyMDVCMzU5NTkzMzJEMUNCMUQ5RDhDRjAyMjgzMB4XDTI1MDQxNTAx MzUwMFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMTkzQ0MyRDNFQUM4M0NB NTA2MTc5N0E0MTJDOEJBMTVGN0IzQzI4QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOD1vCmkB4C+u8xDmCN7q51MyAaIm7W96PmrrYuf+xsCSnu88s8k dWm2cYljpfxbtbx9nkuJG73ONzENLmAseAnqAqFP0YhViFHftArvlRvn/hAyfB2Z SswLELRsfRjqXcjbGcDfC/xcnsSSMGLyzvTXxtRkA17EzjOcE+plPOUK32lCQqB2 HO/pp5n4ST18+kYU0FvRxrFR2D/xvEuIAiUcjTYdYCpcM+gX5q318TlJyojgFFHL MKB+Ea6dU64MjIk0l2bE53hawTbfsc9xHtaRujvDqL/z0Vj74Dp9hKaBSmwO/8OR E2fqSJzjH9KmUO6K4wUGjvWSjLMeWFP1WzcCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQZPMLT6sg8pQYXl6QSyLoV97PCjDAfBgNVHSMEGDAWgBQomV1rDdwgWzWVkzLR yx2djPAigzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA2MDIvS0psZGF3M2NJRnMxbFpNeTBjc2RuWXp3SW9NLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS0psZGF3M2NJRnMxbFpNeTBjc2Ru WXp3SW9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwNjAyL0tKbGRhdzNjSUZzMWxaTXkwY3Nkbll6d0lvTS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkCM7mcI2LawqXnM947On2gAdO0Y7O+FuV+QzxyUEwFiw1evGmxEc+ i9RvQ2tGwv6ByTi/I5RPdx7zCjeVul9uvSnP6q74rL5nPfy3VwM10XdFZlf6csDG pkkTp13jNyRANJ9gTFX3cjbqt/NCFXeWDZqk4UFjBWTmCGTbeHHjeFVRL1seXkpF pBNVL2ToGvr9JTyZYO18AozVPtPPkZI/wG8B4Y1tIy4sbxQHb/AjNXtPSCnkNAbr QcLQMr1boY9skkz3FlDwW1M9qwrWr/5YnE6Eq28kNXGDG2ETlXyI3HY0m8Ocoyx9 lIzRsuY3agqkzcSvsfAVY+jl3265WW6j -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:10 2025 by rpki-client