$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30382/jStimyfLTOa4ULYZAhzuU7HQlac.mft File: jStimyfLTOa4ULYZAhzuU7HQlac.mft (raw, json) Hash identifier: EhN1lf+UnvCAmCR8eLll2FmW5LJFeWRCgqLlhDOnHho= Subject key identifier: 81:BF:50:04:28:AE:7E:FB:81:B7:B0:82:EC:3E:BF:6F:07:2E:CA:07 Authority key identifier: 8D:2B:62:9B:27:CB:4C:E6:B8:50:B6:19:02:1C:EE:53:B1:D0:95:A7 Certificate issuer: /CN=8D2B629B27CB4CE6B850B619021CEE53B1D095A7 Certificate serial: 0F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jStimyfLTOa4ULYZAhzuU7HQlac.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/jStimyfLTOa4ULYZAhzuU7HQlac.mft Manifest number: 040F Signing time: Sat 26 Apr 2025 11:33:55 +0000 Manifest this update: Sat 26 Apr 2025 11:33:55 +0000 Manifest next update: Sun 11 May 2025 11:33:55 +0000 Files and hashes: 1: _qJosfXbhybIpgy8X1X6WgwKuq0.roa (hash: LJRTiS16en3aGZxhlxf1FDrXSAM9sCaVQqsR+M9VIIQ=) 2: jStimyfLTOa4ULYZAhzuU7HQlac.crl (hash: CwGwKvrshGMF7gcSazxQO/j9C8yvWWhM3efDg1HVKuI=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/jStimyfLTOa4ULYZAhzuU7HQlac.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/jStimyfLTOa4ULYZAhzuU7HQlac.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jStimyfLTOa4ULYZAhzuU7HQlac.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D2B629B27CB4CE6B850B619021CEE53B1D095A7 Validity Not Before: Apr 15 01:32:07 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=81BF500428AE7EFB81B7B082EC3EBF6F072ECA07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:94:cd:4e:c8:72:ba:6c:bb:3f:4e:70:f2:84: 30:cb:04:79:4e:3e:f0:95:40:71:e2:24:a8:a1:07: 04:a9:04:0f:74:ae:c8:ca:00:63:e7:fa:a2:b5:5d: 0a:4d:73:9f:04:81:de:e6:21:9c:e9:c1:f4:c4:c6: ba:2b:0d:65:db:7d:c0:96:b6:10:ef:bd:44:36:c3: 17:8f:7e:4f:50:18:25:e6:0d:90:99:db:01:8c:56: 3a:09:2a:7b:d3:f0:f8:d8:b0:43:ad:63:8b:9b:77: 5e:a3:c5:58:2a:6f:cc:ed:49:9e:54:97:87:e8:77: 2c:1e:20:6a:d7:01:f8:d4:d0:3a:ad:de:1c:12:42: c1:b4:01:6f:12:b9:28:53:f7:59:72:fd:d1:d4:b5: e2:2b:03:85:ba:25:39:e7:22:8c:96:0e:f8:25:e9: f5:a5:43:1f:5c:0a:34:8b:66:19:cc:5e:98:72:31: ba:5c:4a:6e:82:19:f5:3d:ce:4f:79:d4:86:1a:41: 16:bf:cb:c4:5d:f3:ba:37:2f:7f:06:5f:0e:a6:ca: 85:19:0a:4a:c2:eb:d7:5c:4f:3f:df:66:54:db:fd: 5a:b3:20:ad:7f:b1:62:ed:c7:cd:ce:af:bc:30:f2: a0:dd:fe:1c:e7:e5:31:3e:18:72:20:96:c9:8e:00: 58:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BF:50:04:28:AE:7E:FB:81:B7:B0:82:EC:3E:BF:6F:07:2E:CA:07 X509v3 Authority Key Identifier: keyid:8D:2B:62:9B:27:CB:4C:E6:B8:50:B6:19:02:1C:EE:53:B1:D0:95:A7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/jStimyfLTOa4ULYZAhzuU7HQlac.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jStimyfLTOa4ULYZAhzuU7HQlac.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/jStimyfLTOa4ULYZAhzuU7HQlac.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:9f:59:db:c7:62:13:1a:ba:56:ba:06:1b:81:c4:a4:6c:e4: 3a:4f:fe:8e:45:89:d3:65:01:95:3c:a5:7f:b8:ab:15:37:6b: 4c:8e:85:7b:72:be:3f:7c:79:b9:dc:84:85:21:9a:6a:54:ef: 00:f6:8c:b6:69:e2:70:26:b5:67:a4:4e:8b:1c:ac:4f:73:70: 1b:54:cc:82:1f:d3:e4:da:6b:48:3c:9b:ef:f1:f2:f3:58:3c: d4:67:24:7a:5b:3c:99:1d:9c:7d:86:30:ba:5d:91:72:f8:40: 25:d3:74:01:1b:6f:34:0e:0d:e1:72:f1:5f:f4:bc:d5:6c:4a: 4d:f0:39:e5:5c:9e:4c:91:0a:b0:30:aa:7c:62:76:7f:da:48: 32:8e:26:75:34:de:9a:b6:2c:fb:52:4c:77:07:46:11:d7:8b: f8:3d:60:a9:bf:e7:91:00:ca:58:39:04:77:29:11:44:38:7a: 14:30:4a:d9:86:9b:68:a3:69:86:7d:41:69:c7:b7:63:2e:72: 82:dd:96:96:bf:9e:fb:96:f0:49:e7:59:5d:41:c7:84:57:42: cd:0a:59:eb:03:63:a5:c5:3d:06:f5:eb:4d:9a:17:eb:97:bb: 43:0f:a9:74:3c:7d:32:f2:bb:9e:2d:5f:a0:d2:2f:c9:cf:6e: 29:88:6d:0f -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDJC NjI5QjI3Q0I0Q0U2Qjg1MEI2MTkwMjFDRUU1M0IxRDA5NUE3MB4XDTI1MDQxNTAx MzIwN1oXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoODFCRjUwMDQyOEFFN0VG QjgxQjdCMDgyRUMzRUJGNkYwNzJFQ0EwNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOSUzU7Icrpsuz9OcPKEMMsEeU4+8JVAceIkqKEHBKkED3SuyMoA Y+f6orVdCk1znwSB3uYhnOnB9MTGuisNZdt9wJa2EO+9RDbDF49+T1AYJeYNkJnb AYxWOgkqe9Pw+NiwQ61ji5t3XqPFWCpvzO1JnlSXh+h3LB4gatcB+NTQOq3eHBJC wbQBbxK5KFP3WXL90dS14isDhbolOecijJYO+CXp9aVDH1wKNItmGcxemHIxulxK boIZ9T3OT3nUhhpBFr/LxF3zujcvfwZfDqbKhRkKSsLr11xPP99mVNv9WrMgrX+x Yu3Hzc6vvDDyoN3+HOflMT4YciCWyY4AWFECAwEAAaOCAkEwggI9MB0GA1UdDgQW BBSBv1AEKK5++4G3sILsPr9vBy7KBzAfBgNVHSMEGDAWgBSNK2KbJ8tM5rhQthkC HO5TsdCVpzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzODIvalN0aW15ZkxUT2E0VUxZWkFoenVVN0hRbGFjLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvalN0aW15ZkxUT2E0VUxZWkFoenVV N0hRbGFjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzgyL2pTdGlteWZMVE9hNFVMWVpBaHp1VTdIUWxhYy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyn1nbx2ITGrpWugYbgcSkbOQ6T/6ORYnTZQGVPKV/uKsVN2tMjoV7 cr4/fHm53ISFIZpqVO8A9oy2aeJwJrVnpE6LHKxPc3AbVMyCH9Pk2mtIPJvv8fLz WDzUZyR6WzyZHZx9hjC6XZFy+EAl03QBG280Dg3hcvFf9LzVbEpN8DnlXJ5MkQqw MKp8YnZ/2kgyjiZ1NN6atiz7Ukx3B0YR14v4PWCpv+eRAMpYOQR3KRFEOHoUMErZ hptoo2mGfUFpx7djLnKC3ZaWv577lvBJ51ldQceEV0LNClnrA2OlxT0G9etNmhfr l7tDD6l0PH0y8rueLV+g0i/Jz24piG0P -----END CERTIFICATE-----Generated at Sat Apr 26 17:26:02 2025 by rpki-client