$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/GmfyjJYHcsaYRKZzvD3Jv8D1Fp4.mft File: GmfyjJYHcsaYRKZzvD3Jv8D1Fp4.mft (raw, json) Hash identifier: 2eMSFTnp8Csz72Pu5/WPU5esqX1t3Cr+FC8Bw8o14Mc= Subject key identifier: 9C:7C:3F:6C:F0:A4:46:5F:3F:15:15:A7:D3:2B:12:A0:9C:0F:9C:38 Authority key identifier: 1A:67:F2:8C:96:07:72:C6:98:44:A6:73:BC:3D:C9:BF:C0:F5:16:9E Certificate issuer: /CN=1A67F28C960772C69844A673BC3DC9BFC0F5169E Certificate serial: 0F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GmfyjJYHcsaYRKZzvD3Jv8D1Fp4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/GmfyjJYHcsaYRKZzvD3Jv8D1Fp4.mft Manifest number: 0419 Signing time: Sat 26 Apr 2025 16:00:56 +0000 Manifest this update: Sat 26 Apr 2025 16:00:56 +0000 Manifest next update: Sun 11 May 2025 16:00:56 +0000 Files and hashes: 1: GmfyjJYHcsaYRKZzvD3Jv8D1Fp4.crl (hash: UY2IndxypyIffuRmQQRNyRLqRKUZ1SGd52Hx7Z9TXZo=) 2: r8r1bAryu4Lr85f0pmP2AkASFj4.roa (hash: +Omcr/szl52wP5tlqeTqkIO2ZMCaSbaY0VQTQi3WblI=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/GmfyjJYHcsaYRKZzvD3Jv8D1Fp4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/GmfyjJYHcsaYRKZzvD3Jv8D1Fp4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GmfyjJYHcsaYRKZzvD3Jv8D1Fp4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A67F28C960772C69844A673BC3DC9BFC0F5169E Validity Not Before: Apr 15 01:35:53 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=9C7C3F6CF0A4465F3F1515A7D32B12A09C0F9C38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:31:af:71:86:7f:62:f3:0d:3c:a8:a4:3e:ed: 12:6b:37:df:2e:9e:26:20:f7:ef:ad:1a:fe:eb:81: 1b:e7:93:47:b8:12:b1:93:b0:09:a8:68:f4:1c:fe: dc:09:80:78:3a:cf:ad:51:1a:55:2e:b8:83:27:a5: 02:1d:e4:32:ef:fd:9d:dc:c7:cd:cb:14:3e:2a:21: f8:be:8c:63:59:8c:fd:08:6d:32:44:41:de:35:52: 9c:8f:66:b1:7c:4c:ed:22:f0:61:fb:d7:ec:12:35: 17:1e:ca:84:4f:a6:a6:2f:09:2e:a6:67:b1:4a:a2: da:71:24:e2:2a:26:a2:23:c1:cd:46:cd:9b:ce:97: 75:6b:6e:b5:bb:7c:8b:a7:18:3a:27:31:53:d7:9f: 89:45:a2:f0:d6:5f:52:6c:37:1b:bd:d5:e9:2e:45: d6:be:5a:61:d6:77:c7:a7:29:ad:b7:c7:98:88:d0: c7:a7:62:f5:ad:0e:83:da:ab:d0:ee:03:78:8a:8a: e2:9c:cd:10:e9:95:df:6f:c7:a8:2a:15:be:86:75: db:f5:f0:f5:d2:08:8e:de:80:c0:d9:88:28:15:e7: b7:10:7d:ea:77:a0:42:b0:a4:33:a3:06:86:7e:c9: 13:c6:e6:43:83:9a:b4:43:f6:90:17:de:72:40:35: ba:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:7C:3F:6C:F0:A4:46:5F:3F:15:15:A7:D3:2B:12:A0:9C:0F:9C:38 X509v3 Authority Key Identifier: keyid:1A:67:F2:8C:96:07:72:C6:98:44:A6:73:BC:3D:C9:BF:C0:F5:16:9E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/GmfyjJYHcsaYRKZzvD3Jv8D1Fp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GmfyjJYHcsaYRKZzvD3Jv8D1Fp4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/GmfyjJYHcsaYRKZzvD3Jv8D1Fp4.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:c4:61:73:e7:e0:03:fa:b3:76:cd:d4:9d:00:96:0a:de:c4: a5:a0:17:70:8e:f4:d6:69:c2:6f:58:88:1d:af:f3:ab:9f:80: ec:fc:12:c3:36:c6:2a:e0:bc:1d:22:d0:98:50:e5:12:58:65: 3e:8a:7c:7b:06:4b:7e:63:43:8b:89:26:6d:f1:71:77:46:71: c0:34:52:c4:77:94:36:4f:7a:0f:5c:b9:9f:3f:f6:1f:d2:5f: 8e:93:48:55:a5:b2:7a:e0:9f:2b:c3:b8:ee:9f:26:13:a0:10: 7a:13:dc:41:c8:f1:b1:3a:d5:b0:5c:b9:71:28:e1:51:3b:43: 37:57:41:30:a6:a9:9b:c7:a2:96:22:91:b5:69:0a:3e:31:2d: 21:06:cb:66:22:0a:2b:da:67:11:77:7b:11:61:a2:5c:dd:49: 3a:9f:fb:e7:f9:9e:6f:d4:81:a3:cb:c3:6f:f5:7a:80:e6:08: 2e:7f:14:55:25:f7:85:a3:5d:33:37:b1:e3:97:4d:c8:31:c5: ea:ee:52:6d:20:12:8d:68:3d:b3:ec:a9:c6:80:76:0f:e8:d6: 58:c0:a0:6a:e9:0b:23:d9:e6:1f:68:85:bc:e6:83:8c:bd:1c: 4e:e1:6a:2c:2a:6c:8f:96:45:2f:61:5d:9b:79:40:64:26:12: 18:98:cc:6e -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQTY3 RjI4Qzk2MDc3MkM2OTg0NEE2NzNCQzNEQzlCRkMwRjUxNjlFMB4XDTI1MDQxNTAx MzU1M1oXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoOUM3QzNGNkNGMEE0NDY1 RjNGMTUxNUE3RDMyQjEyQTA5QzBGOUMzODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKAxr3GGf2LzDTyopD7tEms33y6eJiD3760a/uuBG+eTR7gSsZOw Caho9Bz+3AmAeDrPrVEaVS64gyelAh3kMu/9ndzHzcsUPioh+L6MY1mM/QhtMkRB 3jVSnI9msXxM7SLwYfvX7BI1Fx7KhE+mpi8JLqZnsUqi2nEk4iomoiPBzUbNm86X dWtutbt8i6cYOicxU9efiUWi8NZfUmw3G73V6S5F1r5aYdZ3x6cprbfHmIjQx6di 9a0Og9qr0O4DeIqK4pzNEOmV32/HqCoVvoZ12/Xw9dIIjt6AwNmIKBXntxB96neg QrCkM6MGhn7JE8bmQ4OatEP2kBfeckA1ugUCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBScfD9s8KRGXz8VFafTKxKgnA+cODAfBgNVHSMEGDAWgBQaZ/KMlgdyxphEpnO8 Pcm/wPUWnjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxMTYvR21meWpKWUhjc2FZUktaenZEM0p2OEQxRnA0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvR21meWpKWUhjc2FZUktaenZEM0p2 OEQxRnA0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMTE2L0dtZnlqSllIY3NhWVJLWnp2RDNKdjhEMUZwNC5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2xGFz5+AD+rN2zdSdAJYK3sSloBdwjvTWacJvWIgdr/Orn4Ds/BLD NsYq4LwdItCYUOUSWGU+inx7Bkt+Y0OLiSZt8XF3RnHANFLEd5Q2T3oPXLmfP/Yf 0l+Ok0hVpbJ64J8rw7junyYToBB6E9xByPGxOtWwXLlxKOFRO0M3V0Ewpqmbx6KW IpG1aQo+MS0hBstmIgor2mcRd3sRYaJc3Uk6n/vn+Z5v1IGjy8Nv9XqA5ggufxRV JfeFo10zN7Hjl03IMcXq7lJtIBKNaD2z7KnGgHYP6NZYwKBq6Qsj2eYfaIW85oOM vRxO4WosKmyPlkUvYV2beUBkJhIYmMxu -----END CERTIFICATE-----Generated at Sat Apr 26 18:15:49 2025 by rpki-client