$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.mft File: LdP9aL13TPnCuZ1nCtqcrZ-WOl0.mft (raw, json) Hash identifier: G3D7Ei+Bga5AjdkXg1zDii8Ot8HE452qu2YA/jVu3A4= Subject key identifier: 33:85:C4:4C:DA:33:63:58:55:4B:17:E7:49:73:61:1D:1E:42:B5:BA Authority key identifier: 2D:D3:FD:68:BD:77:4C:F9:C2:B9:9D:67:0A:DA:9C:AD:9F:96:3A:5D Certificate issuer: /CN=2DD3FD68BD774CF9C2B99D670ADA9CAD9F963A5D Certificate serial: 1B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.mft Manifest number: 0433 Signing time: Sat 26 Apr 2025 11:41:19 +0000 Manifest this update: Sat 26 Apr 2025 11:41:19 +0000 Manifest next update: Sun 11 May 2025 11:41:19 +0000 Files and hashes: 1: DMEf0IIjrT74nFhO8l7gBjiueK8.roa (hash: HZ7NjnweAew9fmnmjyFFgAFKL2Pz9rbKIYpHkInwCbE=) 2: LdP9aL13TPnCuZ1nCtqcrZ-WOl0.crl (hash: jrm16ZIoeyeUiTYufBLVZ8ze0Y/JJ7yFxQ5jN/zXjGI=) 3: s0LosKfW7jmX5MAUsgzpm6c9LPs.roa (hash: qJmx5/b8f+9aqYP9y2iDnRMDDo41zen5wYcNbyAK2QM=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DD3FD68BD774CF9C2B99D670ADA9CAD9F963A5D Validity Not Before: Apr 15 01:30:48 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=3385C44CDA336358554B17E74973611D1E42B5BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a7:26:76:a0:92:e8:ee:48:3e:a1:6c:64:b7: b2:03:ff:56:04:ed:8c:99:d4:2b:e9:a6:12:ac:39: a4:e3:cd:c9:e5:5b:d9:c7:54:b7:58:ea:bf:58:71: 86:b6:89:39:54:5c:95:89:cc:eb:73:cf:c5:cc:a3: b2:e7:7d:71:f0:f7:3d:a7:90:29:33:9c:cb:2b:fb: bb:cb:02:12:b5:75:31:a8:ac:14:4f:aa:bc:82:1b: a3:96:98:da:3c:4a:36:fd:91:a9:1d:6d:e1:c1:f8: 20:ec:28:5e:b4:4d:eb:57:d8:98:f8:ab:11:80:aa: 87:05:ec:16:da:11:ea:e0:ac:d1:8d:33:2d:3c:5f: b5:6e:55:9d:64:2a:f8:d3:a5:b2:8d:02:07:a3:77: 95:f2:05:08:e9:c6:88:92:ef:ed:7d:b8:e1:4d:b3: 51:ad:05:a1:42:0e:4b:d7:dc:dd:9f:6f:08:dc:20: e4:3e:ae:cb:a6:68:49:62:f6:4f:88:90:84:97:bc: 0d:0f:4b:d2:41:c2:90:55:a7:6c:d7:9b:6e:87:35: 75:0c:96:d8:89:c8:a9:2f:93:ce:4d:b7:30:ee:fe: 44:77:55:37:ad:a1:42:ba:2b:ae:00:8a:0b:5d:b5: 61:ad:f1:44:be:48:d5:5a:5f:4e:7a:d8:b7:47:27: 56:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:85:C4:4C:DA:33:63:58:55:4B:17:E7:49:73:61:1D:1E:42:B5:BA X509v3 Authority Key Identifier: keyid:2D:D3:FD:68:BD:77:4C:F9:C2:B9:9D:67:0A:DA:9C:AD:9F:96:3A:5D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:d7:4e:c1:46:6e:ce:1e:79:28:9e:d3:9a:c3:41:cc:a6:27: 30:81:9e:0a:45:1c:26:95:09:57:48:8c:50:8a:f5:0b:61:7a: 1a:1c:2c:72:1b:54:d2:3e:27:63:d9:bd:5d:82:c7:68:66:88: b3:15:cb:29:2c:7e:27:93:07:6c:3b:c1:47:d7:48:36:6f:19: 66:61:24:15:f3:98:19:f8:5b:6b:02:85:b9:a1:87:7f:65:24: 3e:e7:cf:e8:f3:bc:77:8f:88:dd:d1:e4:ba:df:e6:47:0d:c1: 62:6b:55:04:15:4e:04:31:46:26:b0:f2:4d:69:e2:81:20:d4: 60:e9:d6:9c:34:6e:6f:55:b0:93:77:65:58:3b:d9:a3:c0:9e: 16:bb:66:25:89:35:2e:b5:49:14:f8:d3:3d:18:08:6c:fc:a2: 99:98:67:f3:87:32:09:ed:3b:b9:2e:f2:70:d9:8d:21:b9:e6: 51:fe:7e:66:4d:9a:75:d9:04:bb:55:dc:f9:aa:05:b3:13:5e: 14:0a:c9:8f:45:0e:84:40:23:f2:6f:cc:af:7a:75:72:cd:68: a0:6f:3c:51:8f:f7:27:9c:07:3e:37:fe:bd:f2:4e:ab:e2:cc: 82:68:9f:95:6b:ca:9d:da:54:5e:f2:7f:d2:44:05:d3:6d:8e: 5b:d9:0a:5e -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBGzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyREQz RkQ2OEJENzc0Q0Y5QzJCOTlENjcwQURBOUNBRDlGOTYzQTVEMB4XDTI1MDQxNTAx MzA0OFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMzM4NUM0NENEQTMzNjM1 ODU1NEIxN0U3NDk3MzYxMUQxRTQyQjVCQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAManJnagkujuSD6hbGS3sgP/VgTtjJnUK+mmEqw5pOPNyeVb2cdU t1jqv1hxhraJOVRclYnM63PPxcyjsud9cfD3PaeQKTOcyyv7u8sCErV1MaisFE+q vIIbo5aY2jxKNv2RqR1t4cH4IOwoXrRN61fYmPirEYCqhwXsFtoR6uCs0Y0zLTxf tW5VnWQq+NOlso0CB6N3lfIFCOnGiJLv7X244U2zUa0FoUIOS9fc3Z9vCNwg5D6u y6ZoSWL2T4iQhJe8DQ9L0kHCkFWnbNebboc1dQyW2InIqS+Tzk23MO7+RHdVN62h QrorrgCKC121Ya3xRL5I1VpfTnrYt0cnVq8CAwEAAaOCAj0wggI5MB0GA1UdDgQW BBQzhcRM2jNjWFVLF+dJc2EdHkK1ujAfBgNVHSMEGDAWgBQt0/1ovXdM+cK5nWcK 2pytn5Y6XTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjk0L0xkUDlhTDEzVFBuQ3VaMW5DdHFjclotV09sMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0xkUDlhTDEzVFBuQ3VaMW5DdHFjclot V09sMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82OTQvTGRQOWFMMTNUUG5DdVoxbkN0cWNyWi1XT2wwLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFTXTsFGbs4eeSie05rDQcymJzCBngpFHCaVCVdIjFCK9QthehocLHIbVNI+ J2PZvV2Cx2hmiLMVyyksfieTB2w7wUfXSDZvGWZhJBXzmBn4W2sChbmhh39lJD7n z+jzvHePiN3R5Lrf5kcNwWJrVQQVTgQxRiaw8k1p4oEg1GDp1pw0bm9VsJN3ZVg7 2aPAnha7ZiWJNS61SRT40z0YCGz8opmYZ/OHMgntO7ku8nDZjSG55lH+fmZNmnXZ BLtV3PmqBbMTXhQKyY9FDoRAI/JvzK96dXLNaKBvPFGP9yecBz43/r3yTqvizIJo n5Vryp3aVF7yf9JEBdNtjlvZCl4= -----END CERTIFICATE-----Generated at Sat Apr 26 17:22:35 2025 by rpki-client