$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.mft File: NaqlmFHjkt-JLly3q-YiUWWuyJc.mft (raw, json) Hash identifier: 7L7iweEOgAjtLd0TzABI27eUYSRlvuovyEkeLQ00lJQ= Subject key identifier: A2:06:FD:E9:F6:B3:F5:C4:1E:11:44:EC:14:43:F2:F8:1D:E4:87:CF Authority key identifier: 35:AA:A5:98:51:E3:92:DF:89:2E:5C:B7:AB:E6:22:51:65:AE:C8:97 Certificate issuer: /CN=35AAA59851E392DF892E5CB7ABE6225165AEC897 Certificate serial: 28 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NaqlmFHjkt-JLly3q-YiUWWuyJc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.mft Manifest number: 05B1 Signing time: Sat 21 Jun 2025 11:30:58 +0000 Manifest this update: Sat 21 Jun 2025 11:30:58 +0000 Manifest next update: Sun 06 Jul 2025 11:30:58 +0000 Files and hashes: 1: NaqlmFHjkt-JLly3q-YiUWWuyJc.crl (hash: 6oMxPTz86Je1sy3sXV+3qsBJoNy6M1DN3q+o3XhcFTc=) 2: iuhQ_RekSxrD8vIcnCSrBzJTQWo.roa (hash: T6PeX/6uVDQCZEGlR0Qa1JBugPMwN6wSVXw/9GR9cYM=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NaqlmFHjkt-JLly3q-YiUWWuyJc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 10:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35AAA59851E392DF892E5CB7ABE6225165AEC897 Validity Not Before: Jun 15 01:40:46 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=A206FDE9F6B3F5C41E1144EC1443F2F81DE487CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:01:4e:1d:25:0d:12:d3:1a:ba:01:07:b4: 2d:0c:60:ce:43:5f:1a:1e:58:ac:1c:de:4a:78:34: 87:e3:6f:ae:de:f4:2a:84:15:85:26:68:f6:85:69: 0b:e3:48:93:8b:1c:77:57:2f:79:a6:f9:01:02:33: 10:9f:17:7c:8b:0c:71:14:ad:3d:5e:d6:b7:3f:03: 30:b1:56:5c:3f:ac:a6:37:4a:e2:9e:dc:2b:46:15: 10:75:ea:50:60:3a:27:0d:f1:45:84:93:b1:23:3f: 9c:6f:a7:a7:c1:b5:c2:93:08:fb:6b:59:13:c2:51: e7:f7:92:f7:81:f2:c0:fd:34:79:91:dd:05:0d:94: 6d:53:e5:68:49:52:91:6f:fa:07:39:92:af:b6:f4: f9:78:cd:c9:52:67:00:f9:ea:e4:0b:f5:8b:27:2a: 50:2e:7a:a2:31:2e:8d:8c:91:a8:ae:af:c0:04:15: 65:24:c7:69:bb:f3:94:65:e7:81:2e:2e:9d:a3:fe: 0b:38:f4:14:30:dd:25:ec:ba:ce:9d:9f:d7:73:a6: ff:e0:af:85:52:75:8d:2f:21:25:75:72:8b:c9:71: 42:7c:2d:d9:9a:d6:f1:ec:24:3e:4c:46:44:1c:5a: 06:29:be:ac:46:b8:ac:2d:41:3a:23:f7:f6:58:36: 76:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:06:FD:E9:F6:B3:F5:C4:1E:11:44:EC:14:43:F2:F8:1D:E4:87:CF X509v3 Authority Key Identifier: keyid:35:AA:A5:98:51:E3:92:DF:89:2E:5C:B7:AB:E6:22:51:65:AE:C8:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NaqlmFHjkt-JLly3q-YiUWWuyJc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:0d:fb:d9:b4:27:42:a7:78:56:f0:87:14:17:af:9c:e1:d3: a8:a6:b5:63:9b:04:dc:8e:51:ec:8c:4a:74:c5:52:77:48:df: 1f:99:f1:97:3b:11:3f:6a:49:4d:ef:42:57:98:de:47:28:35: 38:53:ab:58:00:e6:35:73:5f:9a:55:45:1b:7a:09:e4:83:77: e0:55:53:e5:15:e5:f3:09:9c:0f:10:47:3c:bd:c6:1e:f3:7a: e4:7e:32:43:fa:d1:d1:87:92:48:fe:bb:2b:6e:00:d8:08:8c: 3d:73:fb:95:26:96:41:94:69:8c:ce:17:64:7c:05:e6:05:aa: cb:30:32:df:11:c3:97:a9:f3:89:6d:c8:7a:ca:fa:ce:a6:2e: d0:61:92:bf:33:3e:16:d9:5d:d8:fa:dc:49:74:24:5a:02:e1: ec:5c:e6:8d:25:7e:01:4c:ff:d8:c8:9a:68:75:58:3e:8c:b6: 84:19:d4:e5:ac:a5:80:f2:6b:26:96:71:69:69:47:bf:7c:ae: cf:14:be:e8:51:af:53:d2:bf:27:e5:98:e8:22:eb:f3:c7:04: c7:4f:49:57:ec:52:ac:9b:ee:58:3e:6e:c9:f4:c6:12:3a:28: a2:f6:16:dc:6f:59:89:ef:55:0c:f8:5d:bd:f9:ea:0b:ca:0a: 95:2a:ea:be -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNUFB QTU5ODUxRTM5MkRGODkyRTVDQjdBQkU2MjI1MTY1QUVDODk3MB4XDTI1MDYxNTAx NDA0NloXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoQTIwNkZERTlGNkIzRjVD NDFFMTE0NEVDMTQ0M0YyRjgxREU0ODdDRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK1KAU4dJQ0S0xq6AQe0LQxgzkNfGh5YrBzeSng0h+Nvrt70KoQV hSZo9oVpC+NIk4scd1cveab5AQIzEJ8XfIsMcRStPV7Wtz8DMLFWXD+spjdK4p7c K0YVEHXqUGA6Jw3xRYSTsSM/nG+np8G1wpMI+2tZE8JR5/eS94HywP00eZHdBQ2U bVPlaElSkW/6BzmSr7b0+XjNyVJnAPnq5Av1iycqUC56ojEujYyRqK6vwAQVZSTH abvzlGXngS4unaP+Czj0FDDdJey6zp2f13Om/+CvhVJ1jS8hJXVyi8lxQnwt2ZrW 8ewkPkxGRBxaBim+rEa4rC1BOiP39lg2dj8CAwEAAaOCAkEwggI9MB0GA1UdDgQW BBSiBv3p9rP1xB4RROwUQ/L4HeSHzzAfBgNVHSMEGDAWgBQ1qqWYUeOS34kuXLer 5iJRZa7IlzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MTIvTmFxbG1GSGprdC1KTGx5M3EtWWlVV1d1eUpjLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTmFxbG1GSGprdC1KTGx5M3EtWWlV V1d1eUpjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDEyL05hcWxtRkhqa3QtSkxseTNxLVlpVVdXdXlKYy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABDfvZtCdCp3hW8IcUF6+c4dOoprVjmwTcjlHsjEp0xVJ3SN8fmfGX OxE/aklN70JXmN5HKDU4U6tYAOY1c1+aVUUbegnkg3fgVVPlFeXzCZwPEEc8vcYe 83rkfjJD+tHRh5JI/rsrbgDYCIw9c/uVJpZBlGmMzhdkfAXmBarLMDLfEcOXqfOJ bch6yvrOpi7QYZK/Mz4W2V3Y+txJdCRaAuHsXOaNJX4BTP/YyJpodVg+jLaEGdTl rKWA8msmlnFpaUe/fK7PFL7oUa9T0r8n5ZjoIuvzxwTHT0lX7FKsm+5YPm7J9MYS Oiii9hbcb1mJ71UM+F29+eoLygqVKuq+ -----END CERTIFICATE-----Generated at Sat Jun 21 13:38:24 2025 by rpki-client