$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.mft File: ivQg8ZIA4Rvkro2RTroqy0KRe24.mft (raw, json) Hash identifier: FmX+/cn/0laROXSdN9v3LSgs0C7dyvzGE8RzatDGLxI= Subject key identifier: A8:0F:85:31:E6:AF:C1:A4:10:42:C4:A1:0D:6E:BB:D5:56:7A:90:9C Authority key identifier: 8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E Certificate issuer: /CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E Certificate serial: 32 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.mft Manifest number: 0480 Signing time: Sat 26 Apr 2025 11:49:25 +0000 Manifest this update: Sat 26 Apr 2025 11:49:25 +0000 Manifest next update: Sun 11 May 2025 11:49:25 +0000 Files and hashes: 1: BGelDCeiwy32u-gVCgw5NxeiAtU.roa (hash: 1F5d3Fj6rY/65JtRFXf+WZb76BrTzJfpjVSgFY1EpCs=) 2: WnPS2XwN7I2DWl5oP4NuHCTceFk.roa (hash: lZVj42uXSTIyYrrBKmIaAFxc+oT8dgESu9uFSpL7Q8E=) 3: ewkMJJbDZQhNZBeV2IE8H_PD44c.roa (hash: gj1Y0EaQOlu9/ZYx3scd8GA+BOm5KD/6vZ6bfkKE8sw=) 4: ivQg8ZIA4Rvkro2RTroqy0KRe24.crl (hash: rOvNI4O74ThJ8GlI9/Su+b8ETu9Ua6sDfighY1FAXCY=) 5: qUUWBtYyU3T2CVq3mu3xKjm1h4s.roa (hash: YNqHAfsy0oOfib3jkno2UuiLubNz+gvsnxvuKE6Y3ig=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 13:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E Validity Not Before: Apr 15 01:37:32 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=A80F8531E6AFC1A41042C4A10D6EBBD5567A909C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:df:1a:e4:ff:14:03:99:4a:c4:52:e2:7b:1f: 65:e8:84:3b:d7:60:dc:b5:98:08:9d:af:78:79:6f: 93:10:9d:bd:37:d0:0c:07:7e:e9:8f:a2:4f:90:ef: c7:e9:ee:23:07:b4:61:99:87:01:f2:f0:7e:4f:ca: ed:05:96:3e:9d:69:cc:70:24:54:67:af:d6:ae:8d: 8c:eb:34:02:f6:b3:b1:73:89:65:08:d2:f0:12:48: fa:97:bc:53:c4:1f:c5:b9:5e:de:23:f6:46:46:45: 94:51:c7:c1:c8:62:af:bd:5f:91:93:c1:ad:0a:30: 2b:39:9c:32:ac:bb:2c:81:7f:16:c2:a5:f3:fc:66: ae:ec:cf:ca:87:fe:80:be:b8:46:17:88:a8:a9:ab: dd:cb:36:6e:35:aa:3a:1a:fb:8a:df:1e:2f:a1:08: 52:36:d5:45:1a:31:90:c0:89:44:78:ce:4c:42:25: 15:a4:ef:cf:c1:84:2e:ad:5b:bf:b4:34:f9:63:a9: da:f7:e8:eb:02:cc:f4:93:d6:8d:39:26:0b:68:de: 6e:e5:5c:61:52:b3:6a:c7:88:82:fe:82:c9:54:b6: 52:67:3e:c5:7b:a8:dc:e6:35:14:00:cb:97:08:ae: 08:e0:f4:1b:4f:26:12:15:7a:25:de:ce:57:21:82: 76:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:0F:85:31:E6:AF:C1:A4:10:42:C4:A1:0D:6E:BB:D5:56:7A:90:9C X509v3 Authority Key Identifier: keyid:8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:05:45:53:47:67:b4:08:3e:4c:b7:b9:a9:b6:56:88:f5:f6: 9d:d6:90:11:2b:22:81:80:e0:4c:8a:46:74:9a:74:0b:76:52: 20:37:e0:80:23:5f:32:e4:2c:85:01:53:98:dc:f6:f5:16:60: 4f:08:d1:f9:52:dc:e9:2d:3d:79:be:85:c2:72:0b:97:58:b1: 30:b9:26:a2:9b:da:40:d3:37:1f:1d:59:81:c6:55:47:77:ff: 27:52:ae:77:4e:88:4f:18:33:d1:a5:73:a5:df:09:e0:0e:44: e0:82:06:9b:5b:e7:bc:7e:93:87:9b:a3:0d:6f:7c:00:b8:08: ca:69:a7:4f:21:71:0f:e6:c9:6f:fa:9e:ad:00:b6:1f:57:6f: 74:fa:70:cb:74:28:41:b2:a6:c4:cd:14:dc:28:9e:63:f5:25: 23:1c:fb:7b:d8:61:43:77:70:f6:48:09:17:8a:89:7c:09:8b: 21:73:51:84:30:74:b6:79:1a:2d:ff:bc:4a:81:5b:86:bd:1d: ac:db:5e:b3:b3:75:19:bc:84:36:e2:f4:c3:94:e8:de:a1:af: f3:a6:4e:9d:43:7f:1d:42:3f:aa:85:08:4d:d5:28:f6:09:83: 7e:f1:30:22:4d:a3:e8:2e:a9:11:85:1d:13:5f:9f:5d:e5:c4: 93:c0:6d:a9 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QUY0 MjBGMTkyMDBFMTFCRTRBRThEOTE0RUJBMkFDQjQyOTE3QjZFMB4XDTI1MDQxNTAx MzczMloXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoQTgwRjg1MzFFNkFGQzFB NDEwNDJDNEExMEQ2RUJCRDU1NjdBOTA5QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMDfGuT/FAOZSsRS4nsfZeiEO9dg3LWYCJ2veHlvkxCdvTfQDAd+ 6Y+iT5Dvx+nuIwe0YZmHAfLwfk/K7QWWPp1pzHAkVGev1q6NjOs0AvazsXOJZQjS 8BJI+pe8U8Qfxble3iP2RkZFlFHHwchir71fkZPBrQowKzmcMqy7LIF/FsKl8/xm ruzPyof+gL64RheIqKmr3cs2bjWqOhr7it8eL6EIUjbVRRoxkMCJRHjOTEIlFaTv z8GELq1bv7Q0+WOp2vfo6wLM9JPWjTkmC2jebuVcYVKzaseIgv6CyVS2Umc+xXuo 3OY1FADLlwiuCOD0G08mEhV6Jd7OVyGCdusCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBSoD4Ux5q/BpBBCxKENbrvVVnqQnDAfBgNVHSMEGDAWgBSK9CDxkgDhG+SujZFO uirLQpF7bjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODg0L2l2UWc4WklBNFJ2a3JvMlJUcm9xeTBLUmUyNC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2l2UWc4WklBNFJ2a3JvMlJUcm9xeTBL UmUyNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84ODQvaXZRZzhaSUE0UnZrcm8yUlRyb3F5MEtSZTI0Lm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAUFRVNHZ7QIPky3uam2Voj19p3WkBErIoGA4EyKRnSadAt2UiA34IAjXzLk LIUBU5jc9vUWYE8I0flS3OktPXm+hcJyC5dYsTC5JqKb2kDTNx8dWYHGVUd3/ydS rndOiE8YM9Glc6XfCeAOROCCBptb57x+k4ebow1vfAC4CMppp08hcQ/myW/6nq0A th9Xb3T6cMt0KEGypsTNFNwonmP1JSMc+3vYYUN3cPZICReKiXwJiyFzUYQwdLZ5 Gi3/vEqBW4a9HazbXrOzdRm8hDbi9MOU6N6hr/OmTp1Dfx1CP6qFCE3VKPYJg37x MCJNo+guqRGFHRNfn13lxJPAbak= -----END CERTIFICATE-----Generated at Sat Apr 26 15:12:40 2025 by rpki-client