$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft File: JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft (raw, json) Hash identifier: 3ZC54CMiX5UI+yreMXkHuQYzjfgRAxi0+wZ0MkWKv9w= Subject key identifier: 31:50:38:AA:C2:4C:17:54:9A:82:BA:AD:E2:AF:44:63:12:D6:F6:D2 Authority key identifier: 25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05 Certificate issuer: /CN=250E82975D8291C44AA7E53EA15124F0EEA20B05 Certificate serial: 23 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft Manifest number: 044D Signing time: Sat 26 Apr 2025 11:44:24 +0000 Manifest this update: Sat 26 Apr 2025 11:44:24 +0000 Manifest next update: Sun 11 May 2025 11:44:24 +0000 Files and hashes: 1: -hY0Txahey-phWtRvAvwAIYth9A.roa (hash: XBTF2xX2XSiXh35iU+RSDBwa9pjdewfeGBpMfN7D1Vw=) 2: JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl (hash: QsRqTP0nncjFjmmRmBx3XtW4RS0HrbKPpREZeAKJ5KU=) 3: XeA5ylDtb-s48_LxIZwUMsAdYoA.roa (hash: 3pKBvF0Hnsthcwi5Z/B6yv5rqW+jwwyG3dDJJBbmcG4=) 4: kafqO83HAVCwySc-07rlqdKTmgY.roa (hash: DFvL43vFx9bAV0wMN41/bL2NMFJruDgxGScpILO8nPE=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 13:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=250E82975D8291C44AA7E53EA15124F0EEA20B05 Validity Not Before: Apr 15 01:39:09 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=315038AAC24C17549A82BAADE2AF446312D6F6D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:40:91:7a:c7:7c:e2:70:90:2c:3d:bb:7a:46: 2d:3a:26:24:9d:51:43:55:5b:fd:9b:50:38:f5:15: df:2c:0a:72:61:07:25:48:f4:d1:2b:0f:20:0c:ac: c2:c2:21:f0:6f:7a:c6:20:65:7c:7b:a8:f4:01:62: 64:31:1a:12:72:f0:70:53:1c:05:a0:77:c3:5c:40: 28:f7:cc:59:fe:c2:4b:24:d9:26:08:58:75:f5:c2: a3:3f:aa:5d:74:a2:5f:15:5b:2c:bf:5c:0c:19:5d: 4f:c3:20:f6:16:75:a5:4e:f0:82:35:a8:da:fc:d8: d6:7e:1a:ca:be:87:a6:c5:bc:90:a3:c9:aa:12:ed: 0e:5e:1d:06:bd:94:d2:6f:c8:34:9f:ea:a2:fc:3e: 61:11:2e:95:36:aa:54:5d:af:63:3a:02:42:df:0c: e5:d7:a0:e7:3a:5a:80:85:6a:0d:0c:60:53:fd:56: cd:aa:b1:b0:77:e3:d7:77:af:c7:c1:5b:fe:db:3a: 3d:1a:a9:2d:6d:cc:b4:44:5b:5b:e2:a6:2b:ef:de: 39:9f:44:66:4b:d6:4a:8c:e9:5e:6a:5a:0e:d5:ef: a9:44:97:13:6f:0e:bc:11:7c:ef:41:4f:9f:b3:9c: 28:6b:f6:75:b2:05:3a:0d:2b:24:53:28:bd:cd:81: 6b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:50:38:AA:C2:4C:17:54:9A:82:BA:AD:E2:AF:44:63:12:D6:F6:D2 X509v3 Authority Key Identifier: keyid:25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d5:cd:56:5c:cf:87:3e:3f:51:67:f4:48:ff:41:ae:fa:4e: 7e:a4:d1:74:b8:9a:ee:57:74:25:f2:9e:7c:15:7e:d3:96:85: 44:ef:3a:94:43:68:38:71:ed:a3:bd:14:77:71:c7:7a:01:fc: a5:92:13:29:41:97:e4:05:cd:96:50:1e:31:0a:40:4c:b2:1c: e0:0a:c7:30:fe:54:4e:7d:f9:bd:e9:ab:8b:6b:92:a5:bc:b6: 47:9d:37:70:0d:6f:86:75:71:87:bf:c9:b9:1b:a8:93:5e:c9: cb:35:41:6b:40:90:e9:14:63:fc:1f:a2:70:ca:13:b4:0b:73: 5f:4b:72:1c:92:fa:ac:d9:15:b7:9d:f9:76:f8:60:e8:25:02: 46:7a:00:16:2c:8a:69:61:9c:b5:46:45:a5:4d:b1:93:13:da: a4:a7:6c:9f:a9:d1:9d:9c:c7:8d:1c:31:59:5e:04:4b:74:42: 74:95:ac:65:22:59:33:9a:51:6f:5b:13:9a:fe:27:db:84:e8: 14:7f:df:b5:bd:c0:25:04:68:cc:de:37:a3:5d:65:f3:08:5b: 3e:5a:ef:71:8d:a4:c7:77:af:94:b7:22:ac:72:b5:63:2a:9d: 78:6f:9d:73:4e:fb:8d:c7:1a:91:e7:68:41:69:ba:cf:7d:86: 71:b9:34:7c -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNTBF ODI5NzVEODI5MUM0NEFBN0U1M0VBMTUxMjRGMEVFQTIwQjA1MB4XDTI1MDQxNTAx MzkwOVoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMzE1MDM4QUFDMjRDMTc1 NDlBODJCQUFERTJBRjQ0NjMxMkQ2RjZEMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKFAkXrHfOJwkCw9u3pGLTomJJ1RQ1Vb/ZtQOPUV3ywKcmEHJUj0 0SsPIAyswsIh8G96xiBlfHuo9AFiZDEaEnLwcFMcBaB3w1xAKPfMWf7CSyTZJghY dfXCoz+qXXSiXxVbLL9cDBldT8Mg9hZ1pU7wgjWo2vzY1n4ayr6HpsW8kKPJqhLt Dl4dBr2U0m/INJ/qovw+YREulTaqVF2vYzoCQt8M5deg5zpagIVqDQxgU/1Wzaqx sHfj13evx8Fb/ts6PRqpLW3MtERbW+KmK+/eOZ9EZkvWSozpXmpaDtXvqUSXE28O vBF870FPn7OcKGv2dbIFOg0rJFMovc2BaxMCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQxUDiqwkwXVJqCuq3ir0RjEtb20jAfBgNVHSMEGDAWgBQlDoKXXYKRxEqn5T6h USTw7qILBTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyMTQvSlE2Q2wxMkNrY1JLcC1VLW9WRWs4TzZpQ3dVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSlE2Q2wxMkNrY1JLcC1VLW9WRWs4 TzZpQ3dVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMjE0L0pRNkNsMTJDa2NSS3AtVS1vVkVrOE82aUN3VS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP1c1WXM+HPj9RZ/RI/0Gu+k5+pNF0uJruV3Ql8p58FX7TloVE7zqU Q2g4ce2jvRR3ccd6AfylkhMpQZfkBc2WUB4xCkBMshzgCscw/lROffm96auLa5Kl vLZHnTdwDW+GdXGHv8m5G6iTXsnLNUFrQJDpFGP8H6JwyhO0C3NfS3Ickvqs2RW3 nfl2+GDoJQJGegAWLIppYZy1RkWlTbGTE9qkp2yfqdGdnMeNHDFZXgRLdEJ0laxl IlkzmlFvWxOa/ifbhOgUf9+1vcAlBGjM3jejXWXzCFs+Wu9xjaTHd6+UtyKscrVj Kp14b51zTvuNxxqR52hBabrPfYZxuTR8 -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:54 2025 by rpki-client