$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.mft File: h9rsIO30ogEEI917AE4VdPETpzU.mft (raw, json) Hash identifier: r6gfKjJmGSk28h/ko/NJn1eFQ+L9NIQbg93s/pG33HI= Subject key identifier: 1F:00:71:20:23:AD:96:60:85:1F:4E:4E:C5:D3:34:5D:4F:CA:60:BD Authority key identifier: 87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35 Certificate issuer: /CN=87DAEC20EDF4A2010423DD7B004E1574F113A735 Certificate serial: 37 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.mft Manifest number: 0495 Signing time: Sat 26 Apr 2025 11:43:39 +0000 Manifest this update: Sat 26 Apr 2025 11:43:39 +0000 Manifest next update: Sun 11 May 2025 11:43:39 +0000 Files and hashes: 1: g5xMfTlCv6yT6FmfsGO_OjhTuOE.roa (hash: Iu3Os0J4wk8f3XlxlFnOJlAiwwKkxZbuiZxxIyoQ7BE=) 2: h9rsIO30ogEEI917AE4VdPETpzU.crl (hash: B6ObtTxC+S3orSx41Ivk7gm2kM4v7uAHbjBgZtT3rio=) 3: iU4M5_1vVClsIdSo6AKWusrbOeI.roa (hash: 5nWzulpEDokK/w4oeaq8jCheJ1eHHLlVDhSD1Tgk4mk=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87DAEC20EDF4A2010423DD7B004E1574F113A735 Validity Not Before: Apr 15 01:36:55 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=1F00712023AD9660851F4E4EC5D3345D4FCA60BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9f:67:ef:0b:cb:3a:84:f1:2c:e7:d8:df:e8: 82:b1:d8:8b:da:34:68:4e:b6:f9:c7:99:fa:59:fa: d1:08:00:b8:04:c2:36:f9:1d:b4:73:5f:96:f0:d8: c4:5f:75:a4:10:44:33:35:1a:ce:7e:c1:fd:bd:d1: fa:4e:e6:f4:52:53:67:ec:71:76:c6:96:f9:96:d2: 95:30:78:a1:89:1a:c9:4a:da:a0:8f:ab:b0:63:bf: 4a:64:ea:1b:c7:7b:ec:a0:87:9e:63:a8:6a:79:a5: 60:57:4d:2f:50:d4:8c:81:e7:c6:38:45:f1:2c:96: a5:02:b6:f1:e2:8a:48:f7:4f:0c:91:0e:b7:1c:60: f1:9f:f2:50:ba:cd:e4:87:4e:d0:34:f0:2c:b3:f2: ff:4f:1f:37:a9:22:8f:50:aa:03:ed:e3:35:12:61: f5:fd:d7:0c:6a:01:82:91:90:35:b9:33:05:c0:d8: c4:25:03:ab:ba:92:f2:5f:2f:86:bb:e1:1a:78:c3: 93:63:95:c5:55:72:c4:c0:bf:ff:cd:63:2d:24:c7: af:1f:ce:1a:57:51:61:86:8d:f9:b5:5f:4e:0a:01: da:ca:89:62:23:97:12:61:62:7b:28:b9:fa:50:01: 93:c3:c3:a7:fd:a9:f8:e3:76:e0:28:1b:7b:df:30: 4c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:00:71:20:23:AD:96:60:85:1F:4E:4E:C5:D3:34:5D:4F:CA:60:BD X509v3 Authority Key Identifier: keyid:87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f0:d6:b0:62:63:22:26:c0:fe:64:a6:69:15:7b:19:2b:9e: 0f:b5:ef:47:c8:f1:b6:e7:0a:ae:8e:b3:a0:88:8c:98:27:ca: 70:e6:4b:ed:94:d3:c8:d1:67:5c:ec:b5:ea:7b:bd:5a:6d:24: ea:3b:cc:66:b5:c4:1d:4f:9f:5f:4e:b6:f2:5a:dd:ba:16:f1: d4:30:01:06:80:cc:0c:5d:f5:04:a6:25:d9:22:1a:79:e3:92: 01:2e:63:79:b3:07:96:19:27:e0:b4:d5:33:53:1a:42:f6:f1: 3f:3c:0e:00:51:b2:5c:7f:65:ee:b7:1b:7f:41:57:4c:78:52: 9a:24:14:f6:09:4c:66:24:65:22:df:f7:7d:02:02:53:75:f0: 00:03:8c:94:c1:ea:91:84:1e:f6:ca:46:8e:ab:87:ea:8c:e9: 1e:eb:1a:bc:76:21:21:b8:03:76:74:0f:ca:68:20:3c:d1:ac: 8a:57:15:b2:39:4c:53:dd:9b:78:fd:f3:3f:7d:92:a0:cd:7d: 52:10:34:fd:94:43:5a:5f:d0:89:10:bf:55:d4:42:7b:24:c2: ac:3d:9c:8e:17:4a:95:a6:ff:4a:ef:8b:a5:69:9b:e8:2a:fe: 6c:30:c2:b2:e9:2f:05:94:5f:a9:e4:a0:be:c0:21:51:f1:c7: 63:39:20:c2 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4N0RB RUMyMEVERjRBMjAxMDQyM0REN0IwMDRFMTU3NEYxMTNBNzM1MB4XDTI1MDQxNTAx MzY1NVoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMUYwMDcxMjAyM0FEOTY2 MDg1MUY0RTRFQzVEMzM0NUQ0RkNBNjBCRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOifZ+8LyzqE8Szn2N/ogrHYi9o0aE62+ceZ+ln60QgAuATCNvkd tHNflvDYxF91pBBEMzUazn7B/b3R+k7m9FJTZ+xxdsaW+ZbSlTB4oYkayUraoI+r sGO/SmTqG8d77KCHnmOoanmlYFdNL1DUjIHnxjhF8SyWpQK28eKKSPdPDJEOtxxg 8Z/yULrN5IdO0DTwLLPy/08fN6kij1CqA+3jNRJh9f3XDGoBgpGQNbkzBcDYxCUD q7qS8l8vhrvhGnjDk2OVxVVyxMC//81jLSTHrx/OGldRYYaN+bVfTgoB2sqJYiOX EmFieyi5+lABk8PDp/2p+ON24Cgbe98wTAMCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQfAHEgI62WYIUfTk7F0zRdT8pgvTAfBgNVHSMEGDAWgBSH2uwg7fSiAQQj3XsA ThV08ROnNTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxNDQvaDlyc0lPMzBvZ0VFSTkxN0FFNFZkUEVUcHpVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaDlyc0lPMzBvZ0VFSTkxN0FFNFZk UEVUcHpVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTQ0L2g5cnNJTzMwb2dFRUk5MTdBRTRWZFBFVHB6VS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq8NawYmMiJsD+ZKZpFXsZK54Pte9HyPG25wqujrOgiIyYJ8pw5kvt lNPI0Wdc7LXqe71abSTqO8xmtcQdT59fTrbyWt26FvHUMAEGgMwMXfUEpiXZIhp5 45IBLmN5sweWGSfgtNUzUxpC9vE/PA4AUbJcf2Xutxt/QVdMeFKaJBT2CUxmJGUi 3/d9AgJTdfAAA4yUweqRhB72ykaOq4fqjOke6xq8diEhuAN2dA/KaCA80ayKVxWy OUxT3Zt4/fM/fZKgzX1SEDT9lENaX9CJEL9V1EJ7JMKsPZyOF0qVpv9K74ulaZvo Kv5sMMKy6S8FlF+p5KC+wCFR8cdjOSDC -----END CERTIFICATE-----Generated at Sat Apr 26 17:18:42 2025 by rpki-client