$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.mft File: OBzr1XGBOUGOK6UEN01SgWI06es.mft (raw, json) Hash identifier: lPr6uo+TOzERM4oeKEgQTAolOReMhAOSfahjKGyRWzo= Subject key identifier: 9E:4B:78:B5:26:57:AB:6A:6A:93:07:3C:E9:87:4C:34:56:3D:78:C7 Authority key identifier: 38:1C:EB:D5:71:81:39:41:8E:2B:A5:04:37:4D:52:81:62:34:E9:EB Certificate issuer: /CN=381CEBD5718139418E2BA504374D52816234E9EB Certificate serial: 1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.mft Manifest number: 0420 Signing time: Sat 26 Apr 2025 11:41:41 +0000 Manifest this update: Sat 26 Apr 2025 11:41:41 +0000 Manifest next update: Sun 11 May 2025 11:41:41 +0000 Files and hashes: 1: DS-93cMsrIm3awZIi4V5jjX8-qk.roa (hash: HrOCW7TZ3YwOzeh3efsY3YaVpetAB6BfcHnERnFQD+w=) 2: GgUZEPVhyK_6FVgAf4bzt_-cLv0.roa (hash: Pp0da5eBdWHpJ4/VdoauLk5b22QSBOkR+rCNM9Mhw4U=) 3: HMF1z7XBFWxb3woLbWXsbg1Wq3Y.roa (hash: HOtMIbM/kxUqbEjceCgxJo27QyYDncqveAiwIHBs3cU=) 4: Nsvran39qENj7C6G_K2RuqN3Pk4.roa (hash: 0BJTahg3PKdwX+kqmS2cX6XxmhQPPhElhDfcIp0M5qs=) 5: OBzr1XGBOUGOK6UEN01SgWI06es.crl (hash: Nqlpp1huFJ27/yemuhF+5d9kx91+aY0OSsu5I46AH8k=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=381CEBD5718139418E2BA504374D52816234E9EB Validity Not Before: Apr 15 01:31:24 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=9E4B78B52657AB6A6A93073CE9874C34563D78C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:17:cc:4e:ea:6a:1e:20:d8:aa:19:c8:98:a2: c6:4e:28:e0:7b:4d:d7:50:fe:aa:24:5a:18:1a:ee: 92:1f:65:a3:95:7c:a2:d1:95:02:21:80:9b:67:b1: 24:18:45:d5:ff:a1:7e:a6:14:2b:f8:c1:d6:47:18: 45:e9:0c:2d:5d:75:47:c5:1a:de:bd:81:d0:76:38: d5:8d:46:77:22:1c:0e:29:62:30:a5:44:63:8e:f1: ef:7d:30:70:21:39:ed:09:a6:e8:24:ef:1f:12:f1: c7:0b:7f:7a:97:0e:f7:88:39:63:11:f1:f3:10:7c: ce:c1:52:66:da:dd:26:40:ee:ab:cc:d8:ec:73:27: f8:e0:a7:c1:ac:82:0f:4d:dd:83:b9:d4:d2:0b:89: c7:2a:c6:45:6f:22:57:50:8b:b5:bc:51:c2:24:3d: c5:1d:9c:a0:46:89:a9:e4:4a:75:a5:c0:27:4d:7e: c2:4d:91:a9:49:dc:2f:ec:ae:a8:7a:f6:4d:3f:b3: 59:11:0a:a2:12:36:dc:1d:24:df:4a:1e:b4:d1:ee: ec:dc:54:ba:28:2a:66:1a:44:3e:67:38:36:bb:34: 6d:b2:20:39:9d:54:21:4f:28:57:c5:72:10:db:21: c9:e9:b2:a4:56:01:8f:2e:95:10:a3:d7:bb:49:f9: 8b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4B:78:B5:26:57:AB:6A:6A:93:07:3C:E9:87:4C:34:56:3D:78:C7 X509v3 Authority Key Identifier: keyid:38:1C:EB:D5:71:81:39:41:8E:2B:A5:04:37:4D:52:81:62:34:E9:EB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:8e:db:dc:93:6d:c8:d3:36:a2:8e:13:89:55:46:63:05:84: 83:d4:c2:c2:ef:04:48:8c:87:ba:1f:73:5e:5a:2f:09:4c:65: ec:82:9b:14:b5:d7:3a:e8:51:bb:7d:6f:3d:13:a3:8d:d3:e1: 16:fc:c7:fb:17:c9:3b:82:da:9b:08:44:d6:db:23:26:f6:de: 16:c8:9b:4e:cc:21:93:bf:e4:78:02:3a:71:3f:94:08:09:df: fa:c8:f8:eb:cf:c1:9f:98:d8:e4:e5:9b:dc:3f:77:45:d2:8f: 1a:26:29:7a:53:43:cf:9e:88:a3:35:ad:ea:91:1e:26:12:a2: cc:89:f0:83:d4:a3:14:37:99:a9:5f:4c:ca:f1:5a:cb:c2:7b: 6e:ea:53:d6:89:f8:38:5f:66:b3:0c:dd:78:a9:62:c5:91:af: 9b:a7:e8:c0:22:ff:d4:18:2c:5d:ef:a4:0e:ab:a0:ad:82:16: 23:3a:36:0b:8a:74:38:56:da:9c:d0:88:69:d8:d4:cd:48:48: 0c:58:57:1e:75:37:14:58:c5:bf:a2:4a:85:52:ba:db:d4:49: 3b:48:69:47:2d:16:3b:4f:25:10:fa:de:4e:89:3b:43:73:02: 5b:68:d5:88:35:2f:b7:d2:e5:00:ac:a3:56:80:40:8d:9b:cd: 33:b3:db:a4 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzODFD RUJENTcxODEzOTQxOEUyQkE1MDQzNzRENTI4MTYyMzRFOUVCMB4XDTI1MDQxNTAx MzEyNFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoOUU0Qjc4QjUyNjU3QUI2 QTZBOTMwNzNDRTk4NzRDMzQ1NjNENzhDNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPQXzE7qah4g2KoZyJiixk4o4HtN11D+qiRaGBrukh9lo5V8otGV AiGAm2exJBhF1f+hfqYUK/jB1kcYRekMLV11R8Ua3r2B0HY41Y1GdyIcDiliMKVE Y47x730wcCE57Qmm6CTvHxLxxwt/epcO94g5YxHx8xB8zsFSZtrdJkDuq8zY7HMn +OCnwayCD03dg7nU0guJxyrGRW8iV1CLtbxRwiQ9xR2coEaJqeRKdaXAJ01+wk2R qUncL+yuqHr2TT+zWREKohI23B0k30oetNHu7NxUuigqZhpEPmc4Nrs0bbIgOZ1U IU8oV8VyENshyemypFYBjy6VEKPXu0n5i1kCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBSeS3i1JleramqTBzzph0w0Vj14xzAfBgNVHSMEGDAWgBQ4HOvVcYE5QY4rpQQ3 TVKBYjTp6zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwODQvT0J6cjFYR0JPVUdPSzZVRU4wMVNnV0kwNmVzLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvT0J6cjFYR0JPVUdPSzZVRU4wMVNn V0kwNmVzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDg0L09CenIxWEdCT1VHT0s2VUVOMDFTZ1dJMDZlcy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzjtvck23I0zaijhOJVUZjBYSD1MLC7wRIjIe6H3NeWi8JTGXsgpsU tdc66FG7fW89E6ON0+EW/Mf7F8k7gtqbCETW2yMm9t4WyJtOzCGTv+R4AjpxP5QI Cd/6yPjrz8GfmNjk5ZvcP3dF0o8aJil6U0PPnoijNa3qkR4mEqLMifCD1KMUN5mp X0zK8VrLwntu6lPWifg4X2azDN14qWLFka+bp+jAIv/UGCxd76QOq6CtghYjOjYL inQ4Vtqc0Ihp2NTNSEgMWFcedTcUWMW/okqFUrrb1Ek7SGlHLRY7TyUQ+t5OiTtD cwJbaNWINS+30uUArKNWgECNm80zs9uk -----END CERTIFICATE-----Generated at Sat Apr 26 17:19:07 2025 by rpki-client