$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.mft File: 2r9tldslaBbSlCNGufwuoMGv2AM.mft (raw, json) Hash identifier: Qno/u6+6bO1pvxoN86WoyPwmjxCrNHflocT/2gkdPqk= Subject key identifier: FE:AE:DB:5F:15:39:34:57:2A:87:D9:09:BD:5A:23:63:21:CB:F2:02 Authority key identifier: DA:BF:6D:95:DB:25:68:16:D2:94:23:46:B9:FC:2E:A0:C1:AF:D8:03 Certificate issuer: /CN=DABF6D95DB256816D2942346B9FC2EA0C1AFD803 Certificate serial: 15 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2r9tldslaBbSlCNGufwuoMGv2AM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.mft Manifest number: 0422 Signing time: Sun 27 Apr 2025 03:49:58 +0000 Manifest this update: Sun 27 Apr 2025 03:49:58 +0000 Manifest next update: Mon 12 May 2025 03:49:58 +0000 Files and hashes: 1: 2r9tldslaBbSlCNGufwuoMGv2AM.crl (hash: tddJlcZqZqp+D9Jc1ChEBiqNo8CH0RlYpqIp4p0kGBU=) 2: jUBZ3h95XcZ3vcS3YrGxyXcD14M.roa (hash: gLq7mQJhD6bWfiN2mlRsXihm/zbbDpqbw+m6asm9ss8=) 3: zEfVSLA6W_ogjqkTwfH3n0Yg2Xc.roa (hash: xVqL4eK/PEn0AJ3ejadbtmQdejI7TJmRQH+RrjrP4A8=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2r9tldslaBbSlCNGufwuoMGv2AM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DABF6D95DB256816D2942346B9FC2EA0C1AFD803 Validity Not Before: Apr 15 01:31:36 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=FEAEDB5F153934572A87D909BD5A236321CBF202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2e:d3:2a:5f:02:f3:ef:b1:68:50:bd:8a:d9: 92:0e:d8:39:58:08:cc:db:9f:a9:df:2e:cf:8e:28: 82:cb:f9:bd:d7:dc:09:71:bc:37:7f:67:b6:e5:52: b4:68:11:82:8a:07:20:98:ca:bf:f5:77:49:6a:fb: 32:68:64:ec:10:79:e3:18:d5:5f:6f:1c:f2:18:c4: ba:b8:73:f6:e0:1c:bc:90:6a:26:f8:ef:22:a5:72: 76:b4:fb:6e:30:00:d2:1c:bf:af:69:3f:22:fa:a7: 30:7c:8c:86:a7:ef:78:c2:fe:b2:a6:17:21:eb:c6: be:64:f6:96:50:40:6c:82:a6:14:24:92:14:59:8e: 19:1c:bc:85:4f:9f:b8:84:35:98:89:c7:f1:21:28: d3:ef:a0:9d:16:94:10:3d:31:1c:ba:e1:91:df:34: 53:28:3c:48:c8:83:a9:dc:24:f7:81:1a:7a:b3:da: 1d:b9:ce:7d:ba:f2:3a:ae:b9:b6:77:6a:ae:56:4c: 66:65:7b:3c:31:57:43:f1:86:ae:42:66:d3:3b:16: e6:a7:77:49:72:36:73:42:2b:54:2b:b3:7b:7a:e3: d3:86:17:d9:cc:bb:3d:ed:ad:ac:37:7c:02:a4:3f: c7:63:f9:c7:15:e3:55:be:ad:0a:16:e7:c4:77:bc: 07:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AE:DB:5F:15:39:34:57:2A:87:D9:09:BD:5A:23:63:21:CB:F2:02 X509v3 Authority Key Identifier: keyid:DA:BF:6D:95:DB:25:68:16:D2:94:23:46:B9:FC:2E:A0:C1:AF:D8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2r9tldslaBbSlCNGufwuoMGv2AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e6:db:88:97:c1:df:8a:7b:07:3d:59:db:06:f5:06:5c:fa: 4b:06:6a:ad:fd:a8:e7:ea:a9:19:c3:57:4d:02:39:80:99:3c: 96:8e:e1:c7:7d:63:c0:74:21:88:7f:2f:a7:bd:cd:15:e1:77: cc:a0:17:20:16:c7:79:02:fc:ed:9e:44:10:63:99:a6:c1:b8: ec:69:96:e5:56:26:33:95:f4:c9:e0:58:39:09:c3:9a:f4:a1: 4a:ed:74:57:cf:f5:a7:62:00:79:b5:24:e0:91:17:2b:34:f0: b3:08:f8:f4:77:8d:bf:a1:3d:4c:2d:15:8d:2b:0f:9e:21:5a: 1e:18:8e:e8:88:8c:d8:18:f5:62:bb:75:37:e7:24:5b:e6:bd: 99:19:2f:a5:be:2f:f2:0e:fe:6c:d1:58:6b:ab:0f:c4:3b:99: 8b:91:6a:92:d6:c1:ab:d9:03:df:e9:66:ee:3d:0b:f3:70:91: 3b:81:57:64:55:2b:51:2a:8c:c5:ec:97:76:9c:1d:7e:d1:90: 96:59:8a:b4:b2:9d:28:cb:bc:b9:f1:27:3c:9a:f4:c6:38:2e: 8d:1c:30:d4:79:a9:2b:9f:b0:37:14:51:09:0e:72:ad:f2:a6: f8:71:f9:a6:23:8a:d0:dd:3f:f1:4a:84:a1:ae:0b:9f:70:01: 84:16:1a:70 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBFTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEQUJG NkQ5NURCMjU2ODE2RDI5NDIzNDZCOUZDMkVBMEMxQUZEODAzMB4XDTI1MDQxNTAx MzEzNloXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoRkVBRURCNUYxNTM5MzQ1 NzJBODdEOTA5QkQ1QTIzNjMyMUNCRjIwMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALEu0ypfAvPvsWhQvYrZkg7YOVgIzNufqd8uz44ogsv5vdfcCXG8 N39ntuVStGgRgooHIJjKv/V3SWr7Mmhk7BB54xjVX28c8hjEurhz9uAcvJBqJvjv IqVydrT7bjAA0hy/r2k/IvqnMHyMhqfveML+sqYXIevGvmT2llBAbIKmFCSSFFmO GRy8hU+fuIQ1mInH8SEo0++gnRaUED0xHLrhkd80Uyg8SMiDqdwk94EaerPaHbnO fbryOq65tndqrlZMZmV7PDFXQ/GGrkJm0zsW5qd3SXI2c0IrVCuze3rj04YX2cy7 Pe2trDd8AqQ/x2P5xxXjVb6tChbnxHe8B58CAwEAAaOCAkEwggI9MB0GA1UdDgQW BBT+rttfFTk0VyqH2Qm9WiNjIcvyAjAfBgNVHSMEGDAWgBTav22V2yVoFtKUI0a5 /C6gwa/YAzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNTMvMnI5dGxkc2xhQmJTbENOR3Vmd3VvTUd2MkFNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMnI5dGxkc2xhQmJTbENOR3Vmd3Vv TUd2MkFNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDUzLzJyOXRsZHNsYUJiU2xDTkd1Znd1b01HdjJBTS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu5tuIl8HfinsHPVnbBvUGXPpLBmqt/ajn6qkZw1dNAjmAmTyWjuHH fWPAdCGIfy+nvc0V4XfMoBcgFsd5AvztnkQQY5mmwbjsaZblViYzlfTJ4Fg5CcOa 9KFK7XRXz/WnYgB5tSTgkRcrNPCzCPj0d42/oT1MLRWNKw+eIVoeGI7oiIzYGPVi u3U35yRb5r2ZGS+lvi/yDv5s0Vhrqw/EO5mLkWqS1sGr2QPf6WbuPQvzcJE7gVdk VStRKozF7Jd2nB1+0ZCWWYq0sp0oy7y58Sc8mvTGOC6NHDDUeakrn7A3FFEJDnKt 8qb4cfmmI4rQ3T/xSoShrgufcAGEFhpw -----END CERTIFICATE-----Generated at Sun Apr 27 05:04:51 2025 by rpki-client