This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.mft File: O3CeEsRyrtPcUkKKnItWyiHI_KE.mft (raw, json) Hash identifier: KAcPhQwhHyxoB7WZlqOy94ejL6+mMK9x2scADi1hwIM= Subject key identifier: CD:39:46:8F:E9:2D:0B:F9:07:D6:D9:D3:E6:83:D4:47:C2:F0:C2:57 Authority key identifier: 3B:70:9E:12:C4:72:AE:D3:DC:52:42:8A:9C:8B:56:CA:21:C8:FC:A1 Certificate issuer: /CN=3B709E12C472AED3DC52428A9C8B56CA21C8FCA1 Certificate serial: 49 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O3CeEsRyrtPcUkKKnItWyiHI_KE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.mft Manifest number: 0A5C Signing time: Mon 22 Dec 2025 07:38:27 +0000 Manifest this update: Mon 22 Dec 2025 07:38:27 +0000 Manifest next update: Tue 06 Jan 2026 07:38:27 +0000 Files and hashes: 1: O3CeEsRyrtPcUkKKnItWyiHI_KE.crl (hash: NTh1iscRrs3Q1po6k2XCNjOf5paUXTd6SnWCjtYnb3w=) 2: zEdFHnMZM1JZk4OUZ5kz70o6uSs.roa (hash: gm/wHJmIP38TmwJ+tsgGZ3xWzb4ONXALpLotNj/rhYM=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O3CeEsRyrtPcUkKKnItWyiHI_KE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 10:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B709E12C472AED3DC52428A9C8B56CA21C8FCA1 Validity Not Before: Dec 15 01:41:07 2025 GMT Not After : Dec 15 01:30:02 2026 GMT Subject: CN=CD39468FE92D0BF907D6D9D3E683D447C2F0C257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:54:de:e0:f8:af:d2:73:ce:c8:95:98:2b:a7: e0:7b:5c:ec:4f:84:0f:db:94:7d:c1:30:b6:d4:7f: cf:ef:e6:5e:66:d9:99:b2:95:bb:3b:cd:93:5a:9e: b7:f4:c0:20:52:8d:ac:d0:82:a7:13:a0:31:82:dd: 53:42:23:2a:83:b3:b6:fe:65:5c:d0:da:8a:d6:9a: 9b:e2:aa:a0:aa:d9:02:aa:85:91:87:44:d0:d9:ac: 04:fe:81:17:5a:42:8b:7f:90:08:fe:a1:7a:7c:84: 9d:c0:6c:37:e5:ad:a9:a0:8c:45:61:4f:76:5e:70: 31:e0:0e:9f:78:df:26:84:0b:e4:6b:f2:22:ff:a5: f6:23:7f:76:fc:7e:8d:84:a0:f3:02:cb:a0:59:32: c7:e1:4d:5b:03:f0:55:66:6d:59:5a:f4:50:a5:6d: 92:ac:69:b8:46:cb:94:8c:03:c7:ed:98:7a:77:a2: 68:dc:99:5c:8e:0a:d1:6b:ca:66:96:91:03:6d:52: 5d:f1:14:91:3b:eb:43:2e:0b:e4:4e:3a:92:5a:7a: 85:38:4a:a8:41:b1:7c:92:b6:cf:94:4c:27:aa:d0: b1:6b:ac:d0:5b:02:59:23:84:4b:8b:06:d9:64:97: ef:86:f3:cf:23:ea:24:e7:8a:f8:60:16:60:60:d6: 1a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:39:46:8F:E9:2D:0B:F9:07:D6:D9:D3:E6:83:D4:47:C2:F0:C2:57 X509v3 Authority Key Identifier: keyid:3B:70:9E:12:C4:72:AE:D3:DC:52:42:8A:9C:8B:56:CA:21:C8:FC:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O3CeEsRyrtPcUkKKnItWyiHI_KE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c0:7b:63:7c:74:1d:21:55:bd:62:fb:57:73:ff:fb:b2:66: e3:d9:aa:5f:da:42:ba:ff:6b:41:1f:6c:d1:d5:4e:f9:d8:e4: 2c:80:a5:2a:2a:3a:fc:36:10:3d:74:f7:7a:73:b5:22:da:51: 2d:05:59:52:6e:65:56:6a:5f:cf:89:ec:43:33:3c:09:55:a3: ad:19:4d:0c:08:d4:65:53:e9:03:dc:7e:57:96:4d:35:fd:e0: c6:80:72:0e:c4:5a:69:a2:8d:09:1d:21:17:3e:c5:c1:57:01: c6:90:91:ba:dc:da:e4:4a:27:d4:a1:6f:b0:8c:c5:0f:ca:ba: 00:0e:7d:8d:a0:a9:79:bc:05:66:7e:90:bb:90:8d:54:e7:80: 18:76:cf:19:70:1c:2c:1a:e3:23:60:e8:28:d9:f5:99:a4:37: ad:a6:72:2f:f2:c4:b8:ee:ab:e2:a4:48:c1:e8:73:7e:02:c6: ba:d5:f1:a9:05:f3:2f:7d:19:66:26:09:ed:c6:4e:8c:9e:8f: ef:9a:de:54:79:68:06:e2:86:18:b4:c6:24:53:17:34:52:8d: f1:c1:43:90:52:01:ba:cf:2a:5d:b9:9c:b7:9b:d7:8b:8f:0a: 7b:79:f0:c9:15:32:45:a6:ec:fb:f9:18:48:42:44:61:2b:20: b5:41:31:dd -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQjcw OUUxMkM0NzJBRUQzREM1MjQyOEE5QzhCNTZDQTIxQzhGQ0ExMB4XDTI1MTIxNTAx NDEwN1oXDTI2MTIxNTAxMzAwMlowMzExMC8GA1UEAxMoQ0QzOTQ2OEZFOTJEMEJG OTA3RDZEOUQzRTY4M0Q0NDdDMkYwQzI1NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKdU3uD4r9JzzsiVmCun4Htc7E+ED9uUfcEwttR/z+/mXmbZmbKV uzvNk1qet/TAIFKNrNCCpxOgMYLdU0IjKoOztv5lXNDaitaam+KqoKrZAqqFkYdE 0NmsBP6BF1pCi3+QCP6henyEncBsN+WtqaCMRWFPdl5wMeAOn3jfJoQL5GvyIv+l 9iN/dvx+jYSg8wLLoFkyx+FNWwPwVWZtWVr0UKVtkqxpuEbLlIwDx+2YeneiaNyZ XI4K0WvKZpaRA21SXfEUkTvrQy4L5E46klp6hThKqEGxfJK2z5RMJ6rQsWus0FsC WSOES4sG2WSX74bzzyPqJOeK+GAWYGDWGjsCAwEAAaOCAj8wggI7MB0GA1UdDgQW BBTNOUaP6S0L+QfW2dPmg9RHwvDCVzAfBgNVHSMEGDAWgBQ7cJ4SxHKu09xSQoqc i1bKIcj8oTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTQ0NC9PM0NlRXNSeXJ0UGNVa0tLbkl0V3lpSElfS0UuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9PM0NlRXNSeXJ0UGNVa0tLbkl0V3lp SElfS0UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ0NC9PM0NlRXNSeXJ0UGNVa0tLbkl0V3lpSElfS0UubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEADsB7Y3x0HSFVvWL7V3P/+7Jm49mqX9pCuv9rQR9s0dVO+djkLIClKio6 /DYQPXT3enO1ItpRLQVZUm5lVmpfz4nsQzM8CVWjrRlNDAjUZVPpA9x+V5ZNNf3g xoByDsRaaaKNCR0hFz7FwVcBxpCRutza5Eon1KFvsIzFD8q6AA59jaCpebwFZn6Q u5CNVOeAGHbPGXAcLBrjI2DoKNn1maQ3raZyL/LEuO6r4qRIwehzfgLGutXxqQXz L30ZZiYJ7cZOjJ6P75reVHloBuKGGLTGJFMXNFKN8cFDkFIBus8qXbmct5vXi48K e3nwyRUyRabs+/kYSEJEYSsgtUEx3Q== -----END CERTIFICATE-----Generated at Mon Dec 22 12:44:09 2025 by rpki-client