$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.mft File: 7HBrbRGl7MjB9otL6m6OmoKgOv0.mft (raw, json) Hash identifier: A0Y90r6tfPM3rN2JhdShV1WC5Z4ag38pPSaWSP4+O+s= Subject key identifier: 29:59:DC:4E:B0:C9:AD:EF:A8:D7:DF:7A:4C:54:E9:36:45:BE:B8:EC Authority key identifier: EC:70:6B:6D:11:A5:EC:C8:C1:F6:8B:4B:EA:6E:8E:9A:82:A0:3A:FD Certificate issuer: /CN=EC706B6D11A5ECC8C1F68B4BEA6E8E9A82A03AFD Certificate serial: 42 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7HBrbRGl7MjB9otL6m6OmoKgOv0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.mft Manifest number: 04FD Signing time: Sat 26 Apr 2025 11:50:54 +0000 Manifest this update: Sat 26 Apr 2025 11:50:54 +0000 Manifest next update: Sun 11 May 2025 11:50:54 +0000 Files and hashes: 1: 7HBrbRGl7MjB9otL6m6OmoKgOv0.crl (hash: ow4G2C5YEy/lpg1fBjqVCnn/jEvrwVYSRgXPU9WVFzE=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7HBrbRGl7MjB9otL6m6OmoKgOv0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC706B6D11A5ECC8C1F68B4BEA6E8E9A82A03AFD Validity Not Before: Apr 15 01:35:32 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=2959DC4EB0C9ADEFA8D7DF7A4C54E93645BEB8EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:92:3e:f8:4b:13:2b:40:7e:43:99:98:60:d2: 7c:18:9a:07:55:34:4a:7f:f9:d2:d2:28:7f:e1:37: 41:30:58:31:63:52:0a:1c:7c:19:a0:e7:ed:fe:29: 80:df:cc:60:88:71:7e:ae:3c:ba:7c:23:52:d9:52: 9d:82:65:09:3b:84:c7:2c:24:76:3c:05:c1:db:2a: 56:ca:18:ed:b0:04:15:9c:08:25:7f:36:a8:e7:d8: 33:2f:37:39:84:71:10:9d:5e:cd:d5:89:9c:50:e6: c1:57:a8:85:60:62:a3:2c:06:55:8c:32:52:51:f8: 98:78:c5:fe:17:9a:d4:1b:62:7d:a8:2c:57:1a:9e: 91:b2:60:62:97:41:1f:e7:f2:0a:8f:cb:5c:46:f9: 5c:40:0c:73:25:4d:c9:05:76:77:56:6f:20:02:2e: f9:b9:1b:84:68:23:a3:af:68:a4:f6:28:c6:d1:5d: 35:12:cc:3a:0a:9e:13:d1:e5:62:8b:9a:2d:16:88: a6:c3:71:3b:c2:7d:8f:69:3a:05:48:08:13:f5:1a: 77:26:0a:60:76:f7:fd:01:3e:08:e1:47:6a:79:67: 44:a3:85:e3:f1:5b:30:22:d3:f7:f6:bc:d4:56:ea: 0b:d5:53:5f:73:fe:af:dc:ae:f7:45:8a:40:19:e0: fd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:59:DC:4E:B0:C9:AD:EF:A8:D7:DF:7A:4C:54:E9:36:45:BE:B8:EC X509v3 Authority Key Identifier: keyid:EC:70:6B:6D:11:A5:EC:C8:C1:F6:8B:4B:EA:6E:8E:9A:82:A0:3A:FD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7HBrbRGl7MjB9otL6m6OmoKgOv0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:61:a1:9b:2b:65:db:7b:05:b0:8f:f5:35:de:05:57:f6:eb: 6b:f3:32:de:38:ea:f3:ca:c2:6f:8e:7c:97:28:44:74:f4:de: 9c:a9:cb:2a:51:6a:e9:8e:10:b6:6b:c6:4d:87:42:f5:fe:0a: 59:7f:b6:ab:e1:25:6a:10:34:64:b8:52:f2:ec:28:d9:14:bf: 42:8c:b9:3a:39:7d:4b:a3:6f:4f:65:6d:66:7a:8d:0a:ef:33: 65:44:27:cf:91:8f:c9:cb:36:15:e7:a2:10:0c:90:92:5e:fd: a3:7f:fd:c9:da:bf:ce:dd:35:00:f8:d5:3e:0e:d7:eb:e4:5f: 4b:27:cb:55:d9:c0:9e:e0:5b:dc:66:f2:a4:56:c9:7d:fa:d3: 24:b0:96:be:c3:42:5a:0b:45:47:9f:88:54:43:d7:fa:74:ec: 7a:7f:32:48:1b:13:db:0a:20:5c:48:d4:f2:a1:19:51:2f:0a: 18:f2:7e:c8:e8:7c:38:08:82:3d:51:cb:dc:18:92:a3:0e:dc: cf:c1:6b:57:cb:ea:4d:0d:e6:a1:9d:4a:1f:92:08:59:40:e8: 5b:40:bd:e9:23:e3:4c:39:b2:9d:da:84:89:27:20:b3:30:a9: 53:35:09:39:bd:9c:fd:fd:86:14:00:72:0a:29:6a:ce:2e:4f: 6d:e8:d3:dd -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFQzcw NkI2RDExQTVFQ0M4QzFGNjhCNEJFQTZFOEU5QTgyQTAzQUZEMB4XDTI1MDQxNTAx MzUzMloXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMjk1OURDNEVCMEM5QURF RkE4RDdERjdBNEM1NEU5MzY0NUJFQjhFQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANOSPvhLEytAfkOZmGDSfBiaB1U0Sn/50tIof+E3QTBYMWNSChx8 GaDn7f4pgN/MYIhxfq48unwjUtlSnYJlCTuExywkdjwFwdsqVsoY7bAEFZwIJX82 qOfYMy83OYRxEJ1ezdWJnFDmwVeohWBioywGVYwyUlH4mHjF/hea1BtifagsVxqe kbJgYpdBH+fyCo/LXEb5XEAMcyVNyQV2d1ZvIAIu+bkbhGgjo69opPYoxtFdNRLM OgqeE9HlYouaLRaIpsNxO8J9j2k6BUgIE/UadyYKYHb3/QE+COFHanlnRKOF4/Fb MCLT9/a81FbqC9VTX3P+r9yu90WKQBng/S0CAwEAAaOCAj8wggI7MB0GA1UdDgQW BBQpWdxOsMmt76jX33pMVOk2Rb647DAfBgNVHSMEGDAWgBTscGttEaXsyMH2i0vq bo6agqA6/TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTEwOS83SEJyYlJHbDdNakI5b3RMNm02T21vS2dPdjAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC83SEJyYlJHbDdNakI5b3RMNm02T21v S2dPdjAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTEwOS83SEJyYlJHbDdNakI5b3RMNm02T21vS2dPdjAubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEAPmGhmytl23sFsI/1Nd4FV/bra/My3jjq88rCb458lyhEdPTenKnLKlFq 6Y4QtmvGTYdC9f4KWX+2q+ElahA0ZLhS8uwo2RS/Qoy5Ojl9S6NvT2VtZnqNCu8z ZUQnz5GPycs2FeeiEAyQkl79o3/9ydq/zt01APjVPg7X6+RfSyfLVdnAnuBb3Gby pFbJffrTJLCWvsNCWgtFR5+IVEPX+nTsen8ySBsT2wogXEjU8qEZUS8KGPJ+yOh8 OAiCPVHL3BiSow7cz8FrV8vqTQ3moZ1KH5IIWUDoW0C96SPjTDmyndqEiScgszCp UzUJOb2c/f2GFAByCilqzi5PbejT3Q== -----END CERTIFICATE-----Generated at Sat Apr 26 17:06:40 2025 by rpki-client