$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/KM2VrwuHjgFh5iigzCQM6tqRmLU.mft File: KM2VrwuHjgFh5iigzCQM6tqRmLU.mft (raw, json) Hash identifier: GRU9ujNJeyxLg2QxMS5dTri1PCk+wC8VxQi7Aqba0NE= Subject key identifier: 07:71:D2:9B:AF:FC:18:9D:95:85:41:4B:E1:A3:7B:DC:F3:53:1E:A7 Authority key identifier: 28:CD:95:AF:0B:87:8E:01:61:E6:28:A0:CC:24:0C:EA:DA:91:98:B5 Certificate issuer: /CN=28CD95AF0B878E0161E628A0CC240CEADA9198B5 Certificate serial: 2C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KM2VrwuHjgFh5iigzCQM6tqRmLU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/KM2VrwuHjgFh5iigzCQM6tqRmLU.mft Manifest number: 0488 Signing time: Sat 26 Apr 2025 23:53:20 +0000 Manifest this update: Sat 26 Apr 2025 23:53:20 +0000 Manifest next update: Sun 11 May 2025 23:53:20 +0000 Files and hashes: 1: KM2VrwuHjgFh5iigzCQM6tqRmLU.crl (hash: GrLBI5le4ozfnkle68PUbgaMUQt4PU2ZxW8uSESwmBY=) 2: kdmvYaSX6d2ltTGVcbdZQhcWkuM.roa (hash: RUGypG1Bfvbu81JITZWG7nEJ8TffTyOuL0ybjQA3p+A=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/KM2VrwuHjgFh5iigzCQM6tqRmLU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/KM2VrwuHjgFh5iigzCQM6tqRmLU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KM2VrwuHjgFh5iigzCQM6tqRmLU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28CD95AF0B878E0161E628A0CC240CEADA9198B5 Validity Not Before: Apr 15 01:37:20 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=0771D29BAFFC189D9585414BE1A37BDCF3531EA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ec:4d:d8:8d:27:5b:0f:b1:c2:fd:80:89:7b: 59:cd:ff:88:d1:50:61:87:29:2f:c3:26:c1:5a:4d: cb:62:f2:b7:0c:70:9b:c0:4e:e8:6f:52:2e:83:43: 53:d3:21:89:c7:dc:73:ce:0d:79:00:2c:21:7a:45: 04:1b:8f:d0:96:9d:fe:0f:16:65:72:7c:ac:09:ad: a9:84:76:98:16:38:da:b1:5d:10:d3:09:8b:8c:e5: 6e:eb:3f:90:0f:c2:ee:a7:00:36:7c:2c:bc:e4:90: f7:bc:52:83:fc:c1:e8:2c:eb:48:fc:b8:8b:c9:8e: 9d:5d:a1:73:8b:b8:1b:0f:1e:17:72:7d:33:58:49: 4d:a6:0c:78:4c:68:f0:68:98:97:7e:bb:87:55:bb: 1b:5a:5d:72:08:54:9e:44:27:0a:82:20:34:a4:49: f9:fb:a0:f2:5f:47:7c:9f:c7:48:8c:52:0f:df:e0: 7e:7b:a2:01:a7:ec:90:39:98:09:33:c1:fa:69:ff: d9:7f:ff:8b:02:70:a6:cd:a7:69:bf:80:fe:d0:55: 8e:25:cc:9a:cc:8d:d9:8d:9e:95:e8:b3:45:90:51: 3f:66:05:ae:82:f0:2b:78:c9:68:a4:6d:49:cd:e3: 7a:8e:16:a9:be:c6:ee:c4:5a:7e:01:9c:3a:5f:68: 38:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:71:D2:9B:AF:FC:18:9D:95:85:41:4B:E1:A3:7B:DC:F3:53:1E:A7 X509v3 Authority Key Identifier: keyid:28:CD:95:AF:0B:87:8E:01:61:E6:28:A0:CC:24:0C:EA:DA:91:98:B5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/KM2VrwuHjgFh5iigzCQM6tqRmLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KM2VrwuHjgFh5iigzCQM6tqRmLU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/KM2VrwuHjgFh5iigzCQM6tqRmLU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:e2:00:ce:03:08:d3:fb:79:df:45:a4:56:ce:af:d6:10:f7: 0d:c6:fb:56:1b:60:58:4b:89:de:b6:76:ae:ed:2d:2e:b8:67: 6d:85:1e:55:ac:04:dc:08:b7:f1:ad:a2:8b:af:4a:08:63:ff: c3:80:af:ac:b3:05:11:dd:2d:5f:d7:f7:51:79:20:9a:f8:b6: ce:7a:c0:4c:18:24:b8:da:b4:86:01:c6:77:32:d3:0a:4a:95: ef:72:69:f3:e3:89:60:02:87:36:80:e7:e1:46:ff:7e:f7:08: d5:85:21:60:c6:4b:55:c8:dd:59:6d:e7:e3:a3:d4:24:a7:f5: a7:c4:15:46:11:bc:28:73:58:16:ad:0f:e5:a7:e5:d1:ed:30: 36:76:a5:ce:f6:8d:88:ad:76:17:f2:51:94:e3:4e:13:a5:ad: f0:3a:09:4d:50:b8:88:e0:71:72:e0:cd:0c:5b:0e:68:ce:bf: 2f:4e:10:67:3e:63:e5:eb:4a:0e:e3:75:c5:0d:6f:58:40:29: 08:76:7d:40:3d:31:a9:ad:ac:8b:70:93:11:6f:ee:e0:24:53: 0f:4f:e4:0f:8f:8c:a5:40:e9:32:5c:c0:e8:ed:ec:ca:91:aa: a8:90:3c:b9:ed:49:6f:1c:2b:93:fb:8e:b0:99:72:f9:b3:3e: c4:01:54:0b -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOENE OTVBRjBCODc4RTAxNjFFNjI4QTBDQzI0MENFQURBOTE5OEI1MB4XDTI1MDQxNTAx MzcyMFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMDc3MUQyOUJBRkZDMTg5 RDk1ODU0MTRCRTFBMzdCRENGMzUzMUVBNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKfsTdiNJ1sPscL9gIl7Wc3/iNFQYYcpL8MmwVpNy2Lytwxwm8BO 6G9SLoNDU9Mhicfcc84NeQAsIXpFBBuP0Jad/g8WZXJ8rAmtqYR2mBY42rFdENMJ i4zlbus/kA/C7qcANnwsvOSQ97xSg/zB6CzrSPy4i8mOnV2hc4u4Gw8eF3J9M1hJ TaYMeExo8GiYl367h1W7G1pdcghUnkQnCoIgNKRJ+fug8l9HfJ/HSIxSD9/gfnui AafskDmYCTPB+mn/2X//iwJwps2nab+A/tBVjiXMmsyN2Y2eleizRZBRP2YFroLw K3jJaKRtSc3jeo4Wqb7G7sRafgGcOl9oOCUCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBQHcdKbr/wYnZWFQUvho3vc81MepzAfBgNVHSMEGDAWgBQozZWvC4eOAWHmKKDM JAzq2pGYtTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjc5L0tNMlZyd3VIamdGaDVpaWd6Q1FNNnRxUm1MVS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0tNMlZyd3VIamdGaDVpaWd6Q1FNNnRx Um1MVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82NzkvS00yVnJ3dUhqZ0ZoNWlpZ3pDUU02dHFSbUxVLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIbiAM4DCNP7ed9FpFbOr9YQ9w3G+1YbYFhLid62dq7tLS64Z22FHlWsBNwI t/GtoouvSghj/8OAr6yzBRHdLV/X91F5IJr4ts56wEwYJLjatIYBxncy0wpKle9y afPjiWAChzaA5+FG/373CNWFIWDGS1XI3Vlt5+Oj1CSn9afEFUYRvChzWBatD+Wn 5dHtMDZ2pc72jYitdhfyUZTjThOlrfA6CU1QuIjgcXLgzQxbDmjOvy9OEGc+Y+Xr Sg7jdcUNb1hAKQh2fUA9MamtrItwkxFv7uAkUw9P5A+PjKVA6TJcwOjt7MqRqqiQ PLntSW8cK5P7jrCZcvmzPsQBVAs= -----END CERTIFICATE-----Generated at Sun Apr 27 05:08:05 2025 by rpki-client