$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft File: zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft (raw, json) Hash identifier: EvI/3ALOqdn+1VsfV+F4U4gqC43hTP8uUbXEqzQxDLA= Subject key identifier: 3E:C6:28:3B:83:73:8D:00:99:4E:B3:D0:7F:61:89:B5:41:73:55:22 Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Certificate serial: DD Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft Manifest number: 17DD Signing time: Sat 21 Jun 2025 18:42:15 +0000 Manifest this update: Sat 21 Jun 2025 18:42:15 +0000 Manifest next update: Sun 06 Jul 2025 18:42:15 +0000 Files and hashes: 1: 4xy2CWQ9PPM5I9ah5rfoVxupEBk.roa (hash: vtasrQjhyW9VQgbtAwIYMT3fBNNafdDFdd7m91AWZtQ=) 2: 5Ol2j2-zoC0T0kW7IYjRGDtlo3g.roa (hash: l1ZvvVenXGwjv81tLI7yddUYXEHmaiJI4owjl7rrO9M=) 3: M3cYqK4LUjl1OauTjsZjlyr9OzA.roa (hash: y+t9BGApdTy2sVBp4Y7HYm0baXJbBTkpsHeetIigNyw=) 4: RuxdsoCsL9SrWzfHdidddqnu-5E.roa (hash: woPt9e/qONz9vUx79Qh8Pq8fA66mhOE9QI3a3f0z8X0=) 5: U7OuapokLIQZ76REfj_eM1YXuME.roa (hash: ddYJO8WAE3h9G3iJMRZE7kaNZ1npm5UxxKpl9z0UxXs=) 6: _e3jgBm0uaHLPl8oLSQTAQj5Hvw.roa (hash: 7TJ7GER8imQiYyGKjrbKC6jumqWGW9cFBZs2Y0oyo78=) 7: a7sZgh200aTfpuTOIR2ii6h8Kzk.roa (hash: hisRXBGn6tIs0DN3ssnnOjNxMJ06EiX7TZL4iz0hI64=) 8: hfSHFV4DyeNxA2xvq3aBmPr1Q-M.roa (hash: HoNm62rA86M+fCGfwhGJZdkjUCy6zMxCpTj86BTXFNg=) 9: jhh_jSFkCm45_NS2lKm4Y3S4TbU.roa (hash: wOj81VSmWY63HO0GQpe9ks+IbgqvDqSZkCkLy3xEPfA=) 10: kDPxcp7iq4_STyniVj91rFBsZUc.roa (hash: Lo7SOWUjPjUSSJJkmKlNJ9PLvDkWl4ZMH2unMUi0BM0=) 11: khTcXRwJSZ8-d9ltCCcB4a1j_q8.roa (hash: Ayt9Ct6XWzRiPl0MN4LL8ZSLV9Zclv7K1gqQJOUK5x8=) 12: oaqOZtiJriEHWHXqnoZTl_F__DM.roa (hash: c52Lj/veFVLwmqsK2maVaTqJyiOt6AC9Ml2c51eIapk=) 13: yMppmJ0ePcCwV7jdLeFoJtTzti0.roa (hash: uVYzqGJSAvIxYWg/IYHGMRlpBWDvYdbvrkejQ/7v4A0=) 14: yRwo7eBFIGi8pOGoXVIJ4YGS_Ag.roa (hash: 2tKNG6svpV59eVTRpTo8opyrnZ2QnKws69jMVntxGxA=) 15: zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl (hash: xJVp4DvwrwICI2fGrPjwhC7RCVf4Czzq7xez2scWL+s=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Validity Not Before: Jun 15 01:32:03 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=3EC6283B83738D00994EB3D07F6189B541735522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:25:50:92:66:6d:f6:f4:a6:de:a1:f7:77:d0: 33:45:20:47:cb:32:20:be:90:1a:41:34:f4:d0:28: a8:44:73:5b:3f:ee:35:dc:ad:b8:6b:39:91:d0:a4: 77:4b:a0:ee:0c:36:e3:89:94:9d:e8:7a:f3:51:cf: 2d:26:3c:04:43:b7:27:e1:58:75:d4:7d:7f:be:38: 80:53:ce:aa:aa:1a:bf:13:4b:f1:d7:61:65:56:82: 34:25:b6:75:80:e3:bf:c4:69:da:d7:3f:d8:24:9d: 32:cc:cf:95:8a:5d:03:ff:13:6b:2e:8c:d2:6c:0c: 83:a7:b9:88:3a:31:3f:b5:4c:0e:2a:87:38:54:a0: 26:a2:97:3c:b0:37:5d:8b:70:5c:32:3a:cf:f5:67: 21:a5:92:da:0c:a2:50:58:ca:cd:4d:13:6c:56:e6: 86:2e:03:77:8e:5e:4d:e7:bf:50:59:34:57:eb:97: f7:1d:a2:e0:ee:64:16:09:e0:cf:4a:31:45:57:73: 62:d4:a6:c3:d9:f2:d9:1c:94:67:04:42:47:a9:71: 51:16:fd:93:f9:15:c4:8d:21:19:bc:f5:a6:8f:8d: 15:d9:19:92:43:a1:74:b5:ac:8f:70:3e:40:70:0b: d9:65:14:27:ca:15:71:a3:01:8d:3b:e3:a4:47:c4: e4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C6:28:3B:83:73:8D:00:99:4E:B3:D0:7F:61:89:B5:41:73:55:22 X509v3 Authority Key Identifier: keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:35:cb:b7:a4:d2:0e:17:e8:19:7a:af:55:68:e3:60:a8:82: 74:ab:23:be:c8:1b:61:9b:d1:c9:96:a1:f8:e6:1d:11:ec:ee: 71:55:2f:3b:e3:ba:3b:02:18:a1:c3:32:cc:0c:91:eb:2a:09: 62:90:9c:2a:68:7e:04:72:44:04:c2:af:cf:64:56:08:df:7a: c8:ea:7e:f5:6b:6e:0e:1f:ab:15:9e:07:c1:9b:47:5f:7c:48: 20:db:03:26:6a:e9:29:e6:34:42:2b:ab:4c:83:42:83:37:4a: 50:3c:c0:fc:a9:11:cf:70:a2:bb:15:40:db:d7:43:c0:02:15: 4d:5b:74:a9:7d:8f:f3:67:c2:9c:ec:ae:fd:7e:68:e5:3f:d6: d7:8f:2e:f8:73:a5:47:c0:e0:8c:ea:f6:e5:c4:17:ea:e2:4a: 94:c0:99:77:86:ea:f2:b4:5e:7e:f2:9b:fa:85:fd:9c:8c:f5: 00:3a:d1:04:ca:04:be:66:15:3f:4d:07:db:29:d4:a2:a5:c4: 6e:ce:9b:2d:d8:b7:2b:fa:0d:eb:cc:15:b1:99:96:c6:42:50: 8a:43:52:90:d7:c8:2b:4f:06:20:a3:26:82:13:90:7c:2e:ff: 11:14:89:25:8d:64:58:e1:8c:5a:00:33:59:2f:d9:b6:61:12: 68:46:26:74 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Qz MTI0MjdGODAwQjgyOTZEQTExNTQwQzhCODZFNUNFMTJGQzZDNTAeFw0yNTA2MTUw MTMyMDNaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNFQzYyODNCODM3MzhE MDA5OTRFQjNEMDdGNjE4OUI1NDE3MzU1MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSJVCSZm329Kbeofd30DNFIEfLMiC+kBpBNPTQKKhEc1s/7jXc rbhrOZHQpHdLoO4MNuOJlJ3oevNRzy0mPARDtyfhWHXUfX++OIBTzqqqGr8TS/HX YWVWgjQltnWA47/EadrXP9gknTLMz5WKXQP/E2sujNJsDIOnuYg6MT+1TA4qhzhU oCailzywN12LcFwyOs/1ZyGlktoMolBYys1NE2xW5oYuA3eOXk3nv1BZNFfrl/cd ouDuZBYJ4M9KMUVXc2LUpsPZ8tkclGcEQkepcVEW/ZP5FcSNIRm89aaPjRXZGZJD oXS1rI9wPkBwC9llFCfKFXGjAY0746RHxOQ/AgMBAAGjggI9MIICOTAdBgNVHQ4E FgQUPsYoO4NzjQCZTrPQf2GJtUFzVSIwHwYDVR0jBBgwFoAUzTEkJ/gAuCltoRVA yLhuXOEvxsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE3My96VEVrSl9nQXVDbHRvUlZBeUxodVhPRXZ4c1UuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC96VEVrSl9nQXVDbHRvUlZBeUxodVhP RXZ4c1UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTczL3pURWtKX2dBdUNsdG9SVkF5TGh1WE9FdnhzVS5tZnQw RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQA8Ncu3pNIOF+gZeq9VaONgqIJ0qyO+yBthm9HJlqH45h0R7O5xVS8747o7 AhihwzLMDJHrKglikJwqaH4EckQEwq/PZFYI33rI6n71a24OH6sVngfBm0dffEgg 2wMmaukp5jRCK6tMg0KDN0pQPMD8qRHPcKK7FUDb10PAAhVNW3SpfY/zZ8Kc7K79 fmjlP9bXjy74c6VHwOCM6vblxBfq4kqUwJl3hurytF5+8pv6hf2cjPUAOtEEygS+ ZhU/TQfbKdSipcRuzpst2Lcr+g3rzBWxmZbGQlCKQ1KQ18grTwYgoyaCE5B8Lv8R FIkljWRY4YxaADNZL9m2YRJoRiZ0 -----END CERTIFICATE-----Generated at Sat Jun 21 23:21:29 2025 by rpki-client