$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.mft File: BJs1qsogtjD0rVLLWY-VElD_B_0.mft (raw, json) Hash identifier: 5/MprtxhiuWBEXcHHBoRFpUbx5QfU5WUVUEykcUd1AE= Subject key identifier: 10:84:B2:BE:25:28:4F:DA:54:9C:11:17:70:94:86:6D:67:9B:70:37 Authority key identifier: 04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD Certificate issuer: /CN=049B35AACA20B630F4AD52CB598F951250FF07FD Certificate serial: 16 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.mft Manifest number: 0407 Signing time: Sat 26 Apr 2025 11:34:03 +0000 Manifest this update: Sat 26 Apr 2025 11:34:03 +0000 Manifest next update: Sun 11 May 2025 11:34:03 +0000 Files and hashes: 1: 3WTngtwLsm1rKpNdJx6RlZWDn9M.roa (hash: NFHPLherAn32s19+upIYzrj1+mkTJzys9pGN9ABipSI=) 2: 5NnDDA8tyG48C9cjsgrHxqzVIso.roa (hash: GRmcCfCqoDB/l+YjvkgIdrlzbZAuw/O1IATwQhvNjpw=) 3: 5XgOrzLXNNgwMLTyyvqVsySPUMg.roa (hash: zsAIevTpEGo+18ET96zjEvhynjwIXoFFxxJLZYDJcdg=) 4: 6tkozI0IUM4Z0oRj0akMAVcyKZs.roa (hash: DUwyq7/N1OiFB7kqwqTTJc7NblBySJLewjXeAHD8+Po=) 5: 7nqw-BnvipRy7I2ml2j2SuQkV6I.roa (hash: QdIQdbwEfOrAl9/ZY+k/zkpEkFbBZEaOiieKIIwadJE=) 6: BJs1qsogtjD0rVLLWY-VElD_B_0.crl (hash: 4javJPq4otGAahMfNSbev+honIU2HMb5pBtQVXxxiVI=) 7: FP2JXH90aa5ApPn2cJrAVr_0Syc.roa (hash: x4cQIQUrNicJqygwZsuR2gY5SySLKlDXtms/8sqcYXA=) 8: MxgiZzghJsux3ZsE7G27_Ri26Gw.roa (hash: OIwvBdLmWMNfTE4uheNCLpa2c1Srctx4OyqimuTuDk0=) 9: S9hoaUvcc1tYf26FlTicJIqgp48.roa (hash: eRQiCNbguS5//dWZpctreT/m63SW9orhb3KFXgLudZE=) 10: dZghe_dx457nYtXwyrKmBO_WufM.roa (hash: 5wmK3mPS8Oaricw7X6g88aKAe7uAEG5PKVoDFIc3noY=) 11: uHVVCg3e1Od6Xf6BvAmaHa8MNyw.roa (hash: HNgaMNKN67qGdW6cG/LMwGkR7neou4UaByBOmRJStGg=) 12: vEmKMaktbYGrftXwPrSHFDEq4AU.roa (hash: DBZ3iQo6m4vYNyGg5waBzjwM+bvHBLNpw39A6vn8z0k=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=049B35AACA20B630F4AD52CB598F951250FF07FD Validity Not Before: Apr 15 01:32:17 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=1084B2BE25284FDA549C11177094866D679B7037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:ff:90:c4:97:1b:28:db:a0:a5:02:fb:ce: f6:4e:b1:4f:1f:90:8f:5d:62:f2:65:33:9c:5d:4a: 85:e8:0b:fd:da:0b:c0:0b:af:3a:4b:85:2c:7f:26: 05:45:9e:9b:a5:0b:d8:72:70:46:2e:75:4d:76:95: 98:f3:d3:08:5c:60:f9:5e:87:59:fa:c4:69:24:6a: 82:d2:4c:23:cd:09:c2:e4:ac:f5:e0:50:93:41:f8: 4f:32:38:5d:bc:fe:76:67:7d:cd:f9:1b:0d:2b:2a: 9d:55:d2:8f:30:c3:fa:36:e1:db:e1:8f:59:06:c7: ca:94:1e:78:0e:65:42:f1:99:7c:2f:77:f7:81:ed: 02:33:38:f4:43:a6:19:44:43:a3:e6:da:08:61:1c: 48:6f:13:bb:18:8a:67:64:7c:11:01:69:75:0e:30: 8e:55:84:4e:ab:d7:5f:6e:c9:18:e2:25:35:9d:64: 89:1f:a5:04:54:04:b1:2a:91:9e:35:eb:e9:08:e7: 84:0a:18:28:eb:5b:61:d0:6d:73:e2:2e:63:ff:17: 17:58:25:5b:32:d2:a7:54:d7:ad:2e:ff:d4:17:05: c6:68:ba:59:64:7d:16:90:a9:ca:5a:e5:a4:27:71: fd:26:46:61:c7:06:0c:1c:a2:79:4f:a8:0c:e7:59: 33:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:84:B2:BE:25:28:4F:DA:54:9C:11:17:70:94:86:6D:67:9B:70:37 X509v3 Authority Key Identifier: keyid:04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:be:a4:5f:58:2e:de:c9:ee:a2:42:8d:5f:4e:db:77:84:85: 6a:b2:4f:f3:69:28:c2:8f:98:9e:d1:4e:d6:c7:6b:78:87:e0: 82:52:ce:3b:35:73:98:57:20:40:5d:d8:05:0f:ec:ae:d4:52: 59:ac:3e:a7:68:b2:72:a1:a3:64:21:e7:67:07:54:91:38:4a: 3a:c1:fa:ef:f0:c2:39:f2:6d:8e:cf:b4:59:78:5e:f9:14:61: 2b:b3:73:cd:d8:6e:0c:96:14:de:b9:25:4b:01:48:91:f6:0f: 54:5b:d0:a4:97:05:e6:3e:45:14:84:b4:4d:3c:c1:d2:1f:32: 55:74:85:d6:92:82:b3:a1:9f:3e:4a:10:8a:de:dd:86:0b:18: 63:26:e6:ce:0e:82:4f:b6:ec:db:65:db:09:56:8c:91:b6:2f: 8c:1f:8b:94:23:85:15:6b:28:b4:a7:f7:c1:aa:59:c9:cd:7c: e0:64:28:0d:da:26:e1:75:b3:64:63:51:e0:aa:d6:3e:12:e8: 95:5b:3d:83:80:7b:4a:17:29:4d:39:bb:b1:09:a4:0a:95:14: d5:ab:c6:13:c1:df:5d:aa:b2:71:ed:b3:e7:72:25:70:a6:e3: ed:f6:3a:2a:31:d5:fe:08:d3:31:28:81:59:6d:23:6a:16:1b: 82:51:6c:fc -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNDlC MzVBQUNBMjBCNjMwRjRBRDUyQ0I1OThGOTUxMjUwRkYwN0ZEMB4XDTI1MDQxNTAx MzIxN1oXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMTA4NEIyQkUyNTI4NEZE QTU0OUMxMTE3NzA5NDg2NkQ2NzlCNzAzNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL73/5DElxso26ClAvvO9k6xTx+Qj11i8mUznF1KhegL/doLwAuv OkuFLH8mBUWem6UL2HJwRi51TXaVmPPTCFxg+V6HWfrEaSRqgtJMI80JwuSs9eBQ k0H4TzI4Xbz+dmd9zfkbDSsqnVXSjzDD+jbh2+GPWQbHypQeeA5lQvGZfC9394Ht AjM49EOmGURDo+baCGEcSG8TuxiKZ2R8EQFpdQ4wjlWETqvXX27JGOIlNZ1kiR+l BFQEsSqRnjXr6QjnhAoYKOtbYdBtc+IuY/8XF1glWzLSp1TXrS7/1BcFxmi6WWR9 FpCpylrlpCdx/SZGYccGDByieU+oDOdZM9kCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQQhLK+JShP2lScERdwlIZtZ5twNzAfBgNVHSMEGDAWgBQEmzWqyiC2MPStUstZ j5USUP8H/TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwODEvQkpzMXFzb2d0akQwclZMTFdZLVZFbERfQl8wLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQkpzMXFzb2d0akQwclZMTFdZLVZF bERfQl8wLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDgxL0JKczFxc29ndGpEMHJWTExXWS1WRWxEX0JfMC5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSvqRfWC7eye6iQo1fTtt3hIVqsk/zaSjCj5ie0U7Wx2t4h+CCUs47 NXOYVyBAXdgFD+yu1FJZrD6naLJyoaNkIednB1SROEo6wfrv8MI58m2Oz7RZeF75 FGErs3PN2G4MlhTeuSVLAUiR9g9UW9CklwXmPkUUhLRNPMHSHzJVdIXWkoKzoZ8+ ShCK3t2GCxhjJubODoJPtuzbZdsJVoyRti+MH4uUI4UVayi0p/fBqlnJzXzgZCgN 2ibhdbNkY1HgqtY+EuiVWz2DgHtKFylNObuxCaQKlRTVq8YTwd9dqrJx7bPnciVw puPt9joqMdX+CNMxKIFZbSNqFhuCUWz8 -----END CERTIFICATE-----Generated at Sat Apr 26 17:09:02 2025 by rpki-client