$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30442/_AsDcmR6JE0QuNgkrgtQd21kZeo.mft File: _AsDcmR6JE0QuNgkrgtQd21kZeo.mft (raw, json) Hash identifier: M/mEPygtzJRPoK3zrhDTERVloZTIywTZ35g/Tlqdsgc= Subject key identifier: 33:3D:CA:C2:A5:A0:36:CA:17:3E:E5:39:6A:25:6B:CD:C8:79:4B:0B Authority key identifier: FC:0B:03:72:64:7A:24:4D:10:B8:D8:24:AE:0B:50:77:6D:64:65:EA Certificate issuer: /CN=FC0B0372647A244D10B8D824AE0B50776D6465EA Certificate serial: 08 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_AsDcmR6JE0QuNgkrgtQd21kZeo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30442/_AsDcmR6JE0QuNgkrgtQd21kZeo.mft Manifest number: 03B8 Signing time: Sat 26 Apr 2025 07:36:08 +0000 Manifest this update: Sat 26 Apr 2025 07:36:08 +0000 Manifest next update: Sun 11 May 2025 07:36:08 +0000 Files and hashes: 1: _AsDcmR6JE0QuNgkrgtQd21kZeo.crl (hash: WU6ZtWrP2T/i4IjBEB/2LYHP1ZQ3a6pk4jY3JZpi6QU=) 2: y0l3vFrsPgNN9ZsqFGEzPr65lxU.roa (hash: jMDF/N1RbFU6eZIF3hb5Mi8G2lBm7OKGGPyaEOL/rGE=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30442/_AsDcmR6JE0QuNgkrgtQd21kZeo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30442/_AsDcmR6JE0QuNgkrgtQd21kZeo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_AsDcmR6JE0QuNgkrgtQd21kZeo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC0B0372647A244D10B8D824AE0B50776D6465EA Validity Not Before: Apr 15 01:32:35 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=333DCAC2A5A036CA173EE5396A256BCDC8794B0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:10:59:8f:2a:4e:8e:19:cb:d4:3f:1d:a8:07: 85:7d:a4:74:41:35:1d:5e:71:4d:a4:7d:9a:f4:44: c8:d7:5e:ff:2b:27:60:47:1c:38:d9:6c:55:c2:de: d0:6f:47:de:9d:5d:3d:4a:ff:d3:c1:ba:6a:b1:93: 07:ee:f6:51:c4:75:54:56:d0:df:e6:a6:ec:27:f9: d7:49:2f:45:4c:04:08:40:46:d8:89:57:f2:8d:28: 03:2d:a5:f2:7b:7d:b3:18:00:f5:65:b6:57:4e:8d: dd:5e:cb:9c:12:65:48:32:32:ef:53:01:17:44:c8: ba:34:ee:c3:80:b2:c3:c3:6e:d5:fd:27:c8:68:8c: a4:94:c4:6b:80:b0:7e:19:78:96:c4:cf:3d:de:3d: 5e:e0:c2:0b:a4:a2:43:29:ef:87:56:27:37:2f:0a: 0e:a1:1c:c9:d6:19:35:4e:2a:4d:89:90:a8:89:12: 7b:14:87:f2:e0:84:dc:cf:0c:18:75:37:04:67:d4: 32:a3:d9:4a:dd:5d:9a:35:9c:ab:42:3b:e2:bb:91: 8a:c0:be:29:19:d3:3f:aa:79:8e:36:fb:21:f5:bb: 4c:80:97:1f:74:7c:e6:82:30:c6:7b:2e:89:f7:30: d2:9f:29:48:74:b7:51:a2:48:a9:1e:34:24:fc:b0: 77:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3D:CA:C2:A5:A0:36:CA:17:3E:E5:39:6A:25:6B:CD:C8:79:4B:0B X509v3 Authority Key Identifier: keyid:FC:0B:03:72:64:7A:24:4D:10:B8:D8:24:AE:0B:50:77:6D:64:65:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30442/_AsDcmR6JE0QuNgkrgtQd21kZeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_AsDcmR6JE0QuNgkrgtQd21kZeo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30442/_AsDcmR6JE0QuNgkrgtQd21kZeo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:87:92:0b:24:cb:da:78:9f:46:59:5f:f4:c8:4b:ac:8c:38: 6e:91:d1:f2:15:f5:94:54:dd:a7:a5:6d:8d:5e:61:31:07:7d: c9:c9:17:a4:4e:a6:2b:e0:5f:aa:f7:b7:b9:85:c6:9a:42:07: 4d:0f:42:1b:83:d9:bd:6f:9c:91:8b:26:3f:d1:b3:b4:17:67: 00:70:bb:6f:b4:c0:80:6b:68:78:02:20:54:f3:e7:b0:cf:d7: af:02:14:5c:05:ff:0c:1a:e2:84:2a:85:92:bf:69:d8:11:6b: d4:fa:81:85:2e:3d:8c:27:6a:7c:06:00:76:3c:14:3a:1e:33: 09:fb:ee:dd:29:82:7d:07:af:12:e2:b2:f3:e3:8b:6e:c9:1c: e6:43:42:c5:8c:9f:df:6d:f4:26:8e:b1:86:25:9f:e7:be:e9: 02:21:54:e6:fa:17:1d:16:24:f9:51:97:7c:e3:8b:28:bc:74: 93:86:d7:9d:14:e9:a1:91:27:45:a2:f6:3e:03:1b:b5:5d:87: e3:86:bb:c7:04:b3:ca:68:ac:7c:9a:8c:4f:22:10:e4:ef:76: 8a:be:95:89:92:8c:e5:4f:24:8c:fd:10:29:6a:74:30:bb:0a: d5:39:58:b3:15:47:be:b7:02:5a:7a:2f:50:9b:92:9e:eb:96: 39:97:7d:1d -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQzBC MDM3MjY0N0EyNDREMTBCOEQ4MjRBRTBCNTA3NzZENjQ2NUVBMB4XDTI1MDQxNTAx MzIzNVoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMzMzRENBQzJBNUEwMzZD QTE3M0VFNTM5NkEyNTZCQ0RDODc5NEIwQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKYQWY8qTo4Zy9Q/HagHhX2kdEE1HV5xTaR9mvREyNde/ysnYEcc ONlsVcLe0G9H3p1dPUr/08G6arGTB+72UcR1VFbQ3+am7Cf510kvRUwECEBG2IlX 8o0oAy2l8nt9sxgA9WW2V06N3V7LnBJlSDIy71MBF0TIujTuw4Cyw8Nu1f0nyGiM pJTEa4Cwfhl4lsTPPd49XuDCC6SiQynvh1YnNy8KDqEcydYZNU4qTYmQqIkSexSH 8uCE3M8MGHU3BGfUMqPZSt1dmjWcq0I74ruRisC+KRnTP6p5jjb7IfW7TICXH3R8 5oIwxnsuifcw0p8pSHS3UaJIqR40JPywd6MCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQzPcrCpaA2yhc+5TlqJWvNyHlLCzAfBgNVHSMEGDAWgBT8CwNyZHokTRC42CSu C1B3bWRl6jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0NDIvX0FzRGNtUjZKRTBRdU5na3JndFFkMjFrWmVvLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvX0FzRGNtUjZKRTBRdU5na3JndFFk MjFrWmVvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDQyL19Bc0RjbVI2SkUwUXVOZ2tyZ3RRZDIxa1plby5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLh5ILJMvaeJ9GWV/0yEusjDhukdHyFfWUVN2npW2NXmExB33JyRek TqYr4F+q97e5hcaaQgdND0Ibg9m9b5yRiyY/0bO0F2cAcLtvtMCAa2h4AiBU8+ew z9evAhRcBf8MGuKEKoWSv2nYEWvU+oGFLj2MJ2p8BgB2PBQ6HjMJ++7dKYJ9B68S 4rLz44tuyRzmQ0LFjJ/fbfQmjrGGJZ/nvukCIVTm+hcdFiT5UZd844sovHSThted FOmhkSdFovY+Axu1XYfjhrvHBLPKaKx8moxPIhDk73aKvpWJkozlTySM/RApanQw uwrVOVizFUe+twJaei9Qm5Ke65Y5l30d -----END CERTIFICATE-----Generated at Sat Apr 26 13:11:46 2025 by rpki-client