$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4722/NcTtJfIkvDcozOF3pTQ5TgyFw88.mft File: NcTtJfIkvDcozOF3pTQ5TgyFw88.mft (raw, json) Hash identifier: taDgyEzknfA6kZlPSQCMTo9AkZrLdOVcivGlfNDJn5I= Subject key identifier: AF:F1:4E:8C:8A:EB:53:EF:B4:B3:7F:49:63:6D:5A:52:E5:40:A8:B7 Authority key identifier: 35:C4:ED:25:F2:24:BC:37:28:CC:E1:77:A5:34:39:4E:0C:85:C3:CF Certificate issuer: /CN=35C4ED25F224BC3728CCE177A534394E0C85C3CF Certificate serial: 27 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NcTtJfIkvDcozOF3pTQ5TgyFw88.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4722/NcTtJfIkvDcozOF3pTQ5TgyFw88.mft Manifest number: 0473 Signing time: Sat 26 Apr 2025 07:47:30 +0000 Manifest this update: Sat 26 Apr 2025 07:47:30 +0000 Manifest next update: Sun 11 May 2025 07:47:30 +0000 Files and hashes: 1: B6GoN6ip25aK0Kzov_Fx0cW0h9w.roa (hash: epIKAs6u6h5aLoBUgopXRivTqReJ/G9zPami1vfnGS8=) 2: NcTtJfIkvDcozOF3pTQ5TgyFw88.crl (hash: noSssaUkwVQkf5mqxzOJsmVauN5pxDu74skPm5jlbJk=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4722/NcTtJfIkvDcozOF3pTQ5TgyFw88.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4722/NcTtJfIkvDcozOF3pTQ5TgyFw88.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NcTtJfIkvDcozOF3pTQ5TgyFw88.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C4ED25F224BC3728CCE177A534394E0C85C3CF Validity Not Before: Apr 15 01:37:49 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=AFF14E8C8AEB53EFB4B37F49636D5A52E540A8B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2d:4f:cf:d0:74:ce:36:8a:44:52:5a:3c:fd: ac:1a:d3:d0:4d:ca:bd:be:27:5d:83:e8:88:8b:56: d9:67:5e:8e:36:0e:ad:7c:0e:c9:86:64:a7:42:78: e8:ef:a3:ad:5e:54:3e:97:67:0e:97:0f:b1:90:cc: 63:ee:08:3d:d3:8d:06:85:7a:a1:74:37:37:11:8e: 41:45:1d:58:42:14:3c:a5:ca:5e:97:8f:a9:65:f4: ec:b2:44:a5:10:e8:7b:a4:3a:93:e9:3c:79:b9:ca: a0:72:77:34:b3:07:a8:8c:99:fb:6f:ea:7e:36:a3: ba:6b:74:6f:a4:8d:b4:dd:dc:ee:1c:30:9b:f4:15: 45:a1:44:47:28:b2:f6:13:33:70:4d:29:1a:0c:ee: 92:20:e1:99:3d:37:27:c4:33:11:73:a1:70:61:43: 33:d7:65:f2:8c:b6:f8:1c:2b:f8:fe:64:a8:c8:aa: fb:4f:14:15:d1:a8:68:0c:69:16:01:58:69:fe:8d: 99:e7:77:dc:fa:c4:d4:9d:59:4b:03:26:ea:d2:fa: af:2f:92:a2:9c:6b:ba:72:b1:1a:bc:ff:72:b0:54: 23:2d:b4:ce:e0:ed:93:17:bf:d2:e3:c6:b1:1e:69: 47:f0:8a:8a:b2:2d:3c:9f:1c:f6:1d:4c:2b:4d:5c: bb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F1:4E:8C:8A:EB:53:EF:B4:B3:7F:49:63:6D:5A:52:E5:40:A8:B7 X509v3 Authority Key Identifier: keyid:35:C4:ED:25:F2:24:BC:37:28:CC:E1:77:A5:34:39:4E:0C:85:C3:CF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4722/NcTtJfIkvDcozOF3pTQ5TgyFw88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NcTtJfIkvDcozOF3pTQ5TgyFw88.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4722/NcTtJfIkvDcozOF3pTQ5TgyFw88.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:96:ca:8c:87:b0:18:b0:33:73:1c:f8:60:3e:1e:06:1b:a3: 50:ea:2d:59:96:97:3e:f4:d3:f5:35:d0:c5:46:ba:cb:d9:f6: 45:0b:af:c2:f4:d9:fe:36:d3:18:6b:3c:14:4a:75:15:22:51: 24:69:be:5a:e1:50:25:f6:61:74:14:0d:a0:f3:9b:66:9c:dd: c5:21:00:e0:87:5e:41:88:df:a0:49:c3:2f:a3:9f:04:5c:86: ae:a2:3c:e5:25:df:41:f3:17:5a:69:1d:c3:94:45:a4:7f:e9: e0:c1:8d:c4:75:70:06:98:7e:f4:a0:00:70:db:93:f5:04:73: e2:c5:d7:45:53:cb:b9:68:f0:41:7c:89:02:02:d1:b6:c1:b5: 27:62:83:50:3f:47:1e:ab:b6:af:5c:51:0a:75:76:23:4e:64: 11:97:bc:21:5b:61:ce:29:74:eb:30:99:bf:80:9f:2c:8b:9d: 4d:78:33:3a:fa:0e:89:aa:99:7d:71:47:12:5f:6d:d2:7a:c3: a4:ba:fd:22:31:58:bc:73:da:f5:99:60:03:88:e0:5e:3e:80: 98:f5:4a:e1:9b:ea:bc:54:05:d3:3e:32:6d:17:6e:e3:77:e1: a5:c5:cd:fc:40:b2:29:9b:32:06:b3:a9:ca:e2:da:ef:12:97: 94:d4:85:f1 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNUM0 RUQyNUYyMjRCQzM3MjhDQ0UxNzdBNTM0Mzk0RTBDODVDM0NGMB4XDTI1MDQxNTAx Mzc0OVoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoQUZGMTRFOEM4QUVCNTNF RkI0QjM3RjQ5NjM2RDVBNTJFNTQwQThCNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALwtT8/QdM42ikRSWjz9rBrT0E3Kvb4nXYPoiItW2WdejjYOrXwO yYZkp0J46O+jrV5UPpdnDpcPsZDMY+4IPdONBoV6oXQ3NxGOQUUdWEIUPKXKXpeP qWX07LJEpRDoe6Q6k+k8ebnKoHJ3NLMHqIyZ+2/qfjajumt0b6SNtN3c7hwwm/QV RaFERyiy9hMzcE0pGgzukiDhmT03J8QzEXOhcGFDM9dl8oy2+Bwr+P5kqMiq+08U FdGoaAxpFgFYaf6Nmed33PrE1J1ZSwMm6tL6ry+SopxrunKxGrz/crBUIy20zuDt kxe/0uPGsR5pR/CKirItPJ8c9h1MK01cu6UCAwEAAaOCAj8wggI7MB0GA1UdDgQW BBSv8U6MiutT77Szf0ljbVpS5UCotzAfBgNVHSMEGDAWgBQ1xO0l8iS8NyjM4Xel NDlODIXDzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDcyMi9OY1R0SmZJa3ZEY296T0YzcFRRNVRneUZ3ODguY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9OY1R0SmZJa3ZEY296T0YzcFRRNVRn eUZ3ODguY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNDcyMi9OY1R0SmZJa3ZEY296T0YzcFRRNVRneUZ3ODgubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEAn5bKjIewGLAzcxz4YD4eBhujUOotWZaXPvTT9TXQxUa6y9n2RQuvwvTZ /jbTGGs8FEp1FSJRJGm+WuFQJfZhdBQNoPObZpzdxSEA4IdeQYjfoEnDL6OfBFyG rqI85SXfQfMXWmkdw5RFpH/p4MGNxHVwBph+9KAAcNuT9QRz4sXXRVPLuWjwQXyJ AgLRtsG1J2KDUD9HHqu2r1xRCnV2I05kEZe8IVthzil06zCZv4CfLIudTXgzOvoO iaqZfXFHEl9t0nrDpLr9IjFYvHPa9ZlgA4jgXj6AmPVK4ZvqvFQF0z4ybRdu43fh pcXN/ECyKZsyBrOpyuLa7xKXlNSF8Q== -----END CERTIFICATE-----Generated at Sat Apr 26 12:44:27 2025 by rpki-client