$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.mft File: SmXbIimWPt7-qaQStXMeo8UH5xQ.mft (raw, json) Hash identifier: Pz97i1zuwHDwTD/L0Ge6Q+mFy120t+uPJ8V1X2OTMVU= Subject key identifier: 68:AF:CD:A0:7A:17:8C:4F:36:69:EA:92:19:BB:81:94:B2:61:CA:40 Authority key identifier: 4A:65:DB:22:29:96:3E:DE:FE:A9:A4:12:B5:73:1E:A3:C5:07:E7:14 Certificate issuer: /CN=4A65DB2229963EDEFEA9A412B5731EA3C507E714 Certificate serial: 41 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.mft Manifest number: 04C4 Signing time: Sat 26 Apr 2025 11:58:57 +0000 Manifest this update: Sat 26 Apr 2025 11:58:57 +0000 Manifest next update: Sun 11 May 2025 11:58:57 +0000 Files and hashes: 1: BmaiDxJ9mD2_uyaHPtML4fJCAK4.roa (hash: pwiupA8IPljDTcofVlSoGeU5uLa2Q2MlEEjSl3VGdAg=) 2: MCHtUrLlXrAzg8UOw6SxAGliupU.roa (hash: U1SrXUzqnhlvS7V0HapCS0fUHALwg4Tw1kLAIetlC6c=) 3: SmXbIimWPt7-qaQStXMeo8UH5xQ.crl (hash: S+Us5g+LELI4OlUfBq1B2GPfdZPfjGDtKunjCLUWwAU=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 13:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A65DB2229963EDEFEA9A412B5731EA3C507E714 Validity Not Before: Apr 15 01:36:22 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=68AFCDA07A178C4F3669EA9219BB8194B261CA40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d3:b6:6e:71:39:3b:b1:ad:c8:21:79:de:91: f1:a1:0c:6d:d4:18:2c:54:43:9b:a7:35:8e:a7:0f: 05:ed:3a:3d:e5:94:02:3d:66:84:28:9b:6c:50:b4: 7e:3c:1f:a5:79:79:3c:a0:d7:61:92:56:4e:18:f5: b4:ab:8a:65:3e:71:28:3a:03:29:90:89:f0:2d:09: 5a:c8:30:76:5a:82:46:28:9e:0c:c6:d1:22:f5:29: e8:ec:cc:c6:b3:8a:6b:b2:7d:2b:83:74:ea:d2:2d: 70:19:2e:f5:ca:9a:bb:04:92:1e:76:01:c1:54:be: ab:12:16:ef:83:fa:95:b7:23:36:63:34:8d:cf:44: 70:45:49:4e:c1:da:63:99:c5:c2:19:b9:06:17:61: 6b:ba:86:d7:3c:d0:a0:bc:36:7e:ac:fd:c0:32:17: 26:5a:41:a5:3d:2e:35:32:61:25:f5:d7:fe:15:6b: ba:99:66:84:6d:a7:d6:c0:36:4b:2a:d8:43:0d:8b: 3c:1b:94:ab:68:6f:69:33:32:20:eb:e0:ab:96:7d: d8:27:8f:db:ea:f0:7b:32:b3:4b:ca:c2:99:c4:a0: a3:7a:dd:c0:88:63:cc:9e:03:cc:2f:9c:a0:c5:ea: 0b:4c:a8:df:d7:75:d5:df:e2:e9:2a:97:af:c8:bf: c3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AF:CD:A0:7A:17:8C:4F:36:69:EA:92:19:BB:81:94:B2:61:CA:40 X509v3 Authority Key Identifier: keyid:4A:65:DB:22:29:96:3E:DE:FE:A9:A4:12:B5:73:1E:A3:C5:07:E7:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:be:6b:71:12:b5:12:a6:99:e9:85:90:27:4a:5b:a7:ee:04: 6c:75:b6:1c:d3:57:44:55:53:50:39:c8:c1:fc:bd:53:17:c5: 96:1b:5f:ef:f6:a4:be:71:be:8e:92:53:e0:ef:05:7e:fe:d1: 0c:72:78:0a:cc:d1:53:f3:63:8b:9d:bd:6c:a9:f6:17:47:a9: e8:b6:9e:fd:5e:1c:c6:26:c0:78:40:52:df:4b:cb:a9:7d:eb: 9d:27:2b:57:14:be:36:76:c2:76:35:a3:04:68:14:c0:66:72: f5:45:26:13:bf:c7:4a:34:31:0c:2f:cd:51:ea:e1:4b:7d:40: ec:b0:54:0a:f6:19:d2:e0:13:e1:06:60:70:41:27:02:5a:a5: 12:1a:2f:12:a5:ad:a1:2e:14:98:0b:6c:bd:88:36:e1:1a:eb: a4:77:37:21:cf:57:3e:b1:86:0c:3d:4e:0c:d0:3b:9e:d6:10: bc:d0:4f:77:33:99:55:6a:34:b9:d3:6c:ad:eb:c7:63:9c:96: a6:e3:8c:d3:7c:f7:33:ab:83:f3:e2:30:13:8c:86:f7:c8:e3: f9:49:04:e2:76:b2:de:bf:0b:32:cc:79:62:9e:5e:d0:e0:0e: 9b:08:10:30:43:eb:d1:4d:92:6f:c9:65:bb:f1:8b:bb:50:2a: 7c:2c:30:8f -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0QTY1 REIyMjI5OTYzRURFRkVBOUE0MTJCNTczMUVBM0M1MDdFNzE0MB4XDTI1MDQxNTAx MzYyMloXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoNjhBRkNEQTA3QTE3OEM0 RjM2NjlFQTkyMTlCQjgxOTRCMjYxQ0E0MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANPTtm5xOTuxrcghed6R8aEMbdQYLFRDm6c1jqcPBe06PeWUAj1m hCibbFC0fjwfpXl5PKDXYZJWThj1tKuKZT5xKDoDKZCJ8C0JWsgwdlqCRiieDMbR IvUp6OzMxrOKa7J9K4N06tItcBku9cqauwSSHnYBwVS+qxIW74P6lbcjNmM0jc9E cEVJTsHaY5nFwhm5Bhdha7qG1zzQoLw2fqz9wDIXJlpBpT0uNTJhJfXX/hVruplm hG2n1sA2SyrYQw2LPBuUq2hvaTMyIOvgq5Z92CeP2+rwezKzS8rCmcSgo3rdwIhj zJ4DzC+coMXqC0yo39d11d/i6SqXr8i/w7cCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRor82geheMTzZp6pIZu4GUsmHKQDAfBgNVHSMEGDAWgBRKZdsiKZY+3v6ppBK1 cx6jxQfnFDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA5NjYvU21YYklpbVdQdDctcWFRU3RYTWVvOFVINXhRLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvU21YYklpbVdQdDctcWFRU3RYTWVv OFVINXhRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwOTY2L1NtWGJJaW1XUHQ3LXFhUVN0WE1lbzhVSDV4US5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALvmtxErUSppnphZAnSlun7gRsdbYc01dEVVNQOcjB/L1TF8WWG1/v 9qS+cb6OklPg7wV+/tEMcngKzNFT82OLnb1sqfYXR6notp79XhzGJsB4QFLfS8up feudJytXFL42dsJ2NaMEaBTAZnL1RSYTv8dKNDEML81R6uFLfUDssFQK9hnS4BPh BmBwQScCWqUSGi8Spa2hLhSYC2y9iDbhGuukdzchz1c+sYYMPU4M0Due1hC80E93 M5lVajS502yt68djnJam44zTfPczq4Pz4jATjIb3yOP5SQTidrLevwsyzHlinl7Q 4A6bCBAwQ+vRTZJvyWW78Yu7UCp8LDCP -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:24 2025 by rpki-client