$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft File: FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft (raw, json) Hash identifier: tgVeUh53Lv0fynQWLAm0WMtyCekcyr/JT6s340YeDGQ= Subject key identifier: B9:43:24:40:9B:59:15:BC:C5:9B:9F:13:CE:4C:B4:27:46:E4:1E:2A Authority key identifier: 14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85 Certificate issuer: /CN=1426C384E2A49283FA747D079E83DD32B65D7E85 Certificate serial: 50 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft Manifest number: 0A83 Signing time: Mon 11 Aug 2025 08:59:18 +0000 Manifest this update: Mon 11 Aug 2025 08:59:18 +0000 Manifest next update: Tue 26 Aug 2025 08:59:18 +0000 Files and hashes: 1: 3DMBnMrkzHTEZydJ8Z_YbgcDNis.roa (hash: pABnEty8E04ycw6oPAlLGvw4El3xbN6PSUwGEWh2rlU=) 2: FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl (hash: EdjRd3IFTIVDgfKVGeDs0RYfr/bEImEtyUU0GXQKUeg=) 3: rr2l_BrlPICs6GaXOLyguTCsRdA.roa (hash: SPVoInmOh3chMjxVqsWUoEpQZMOkSDuudZk/GJi7f3Q=) 4: ucLnLB-OnNXJ5rn9FADqN8YGxj4.roa (hash: DkgGRBDToPP1fqMqqt356eBNizFUzzsaWYf3AYdg5cY=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1426C384E2A49283FA747D079E83DD32B65D7E85 Validity Not Before: Jul 30 06:38:03 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=B94324409B5915BCC59B9F13CE4CB42746E41E2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:52:97:0c:2c:8e:9a:c6:90:9d:04:a0:79:eb: f2:64:c2:46:b4:3e:99:44:a2:f6:7a:81:4b:a6:df: af:b7:f2:e9:e6:0e:64:32:00:12:a8:6c:33:80:20: e4:c9:3d:a5:8c:de:7d:45:29:63:45:04:95:96:1c: f0:64:7c:7c:82:b1:40:a3:63:19:b2:42:58:03:03: b3:ac:af:c7:33:62:08:fe:d6:04:6e:8a:29:09:be: 5c:e9:da:45:a7:ec:aa:05:4e:07:14:91:f7:b1:0c: ee:54:a5:71:7e:00:28:d8:a5:d2:65:af:55:82:49: 0b:43:f1:45:68:17:64:e4:7d:38:8a:86:d9:4a:43: a1:47:09:78:4d:a3:36:ae:52:a2:3c:c3:bf:f5:ce: aa:46:68:b6:f6:2e:46:12:ba:3d:7f:0b:8c:1e:df: 82:a2:1d:88:d3:39:2d:6d:c2:a5:51:9b:76:0c:65: 87:0a:3b:7d:5e:f7:6e:f2:2a:39:94:bc:6b:68:a1: 50:6a:00:03:1d:af:17:b1:92:6e:0c:58:2d:d2:71: 0f:c3:35:3e:18:e7:a4:56:3d:f7:dc:9c:1a:e1:f2: 2c:cb:39:b0:14:ea:6a:6a:31:fc:64:b2:d9:bf:a6: 20:d8:59:42:f0:ea:e7:f6:f6:d8:13:f2:1b:9f:18: 1e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:43:24:40:9B:59:15:BC:C5:9B:9F:13:CE:4C:B4:27:46:E4:1E:2A X509v3 Authority Key Identifier: keyid:14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:d7:f3:84:c2:c9:c5:6c:cf:aa:97:19:fc:94:44:70:c2:0c: 58:ae:ec:af:ce:87:71:aa:40:48:a5:b5:7f:bf:95:22:2f:df: 1e:ba:91:f7:f0:97:54:58:ba:14:3e:3e:25:8f:27:d6:18:67: 7d:50:d5:b0:c7:3c:f6:c5:d9:51:8a:9b:49:9d:64:3f:4a:dd: c8:34:6c:4a:99:4c:a0:1c:57:b8:8d:dc:31:55:43:ef:b4:aa: ad:53:b5:0d:a1:42:01:3d:26:24:a2:63:7d:5b:b3:dc:eb:71: 35:9b:7d:e6:65:b6:11:80:8a:eb:42:b7:f6:bc:17:54:d1:c8: 1f:e6:f9:9a:9c:27:03:7e:49:c4:81:da:50:92:16:d8:22:b6: ba:7c:9d:42:8b:55:d1:64:bc:bd:a5:f7:44:f2:93:4d:b2:6f: f6:7a:eb:12:36:19:2d:9d:97:a2:14:a3:74:2d:49:20:bf:d6: ee:20:da:05:84:8e:cb:eb:81:30:fd:0e:72:7e:b5:cf:b4:11: 45:04:b2:ae:43:8c:a6:d6:17:a3:b7:d7:17:d4:e9:e0:6d:14: 23:f0:b1:bd:57:be:9a:f7:f5:7d:1a:92:d2:f2:11:7b:06:9b: b5:59:a4:c2:83:89:8e:27:37:79:34:26:47:f0:0e:94:3c:49: a9:3d:81:c8 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBUDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNDI2 QzM4NEUyQTQ5MjgzRkE3NDdEMDc5RTgzREQzMkI2NUQ3RTg1MB4XDTI1MDczMDA2 MzgwM1oXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoQjk0MzI0NDA5QjU5MTVC Q0M1OUI5RjEzQ0U0Q0I0Mjc0NkU0MUUyQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM9SlwwsjprGkJ0EoHnr8mTCRrQ+mUSi9nqBS6bfr7fy6eYOZDIA EqhsM4Ag5Mk9pYzefUUpY0UElZYc8GR8fIKxQKNjGbJCWAMDs6yvxzNiCP7WBG6K KQm+XOnaRafsqgVOBxSR97EM7lSlcX4AKNil0mWvVYJJC0PxRWgXZOR9OIqG2UpD oUcJeE2jNq5SojzDv/XOqkZotvYuRhK6PX8LjB7fgqIdiNM5LW3CpVGbdgxlhwo7 fV73bvIqOZS8a2ihUGoAAx2vF7GSbgxYLdJxD8M1PhjnpFY999ycGuHyLMs5sBTq amox/GSy2b+mINhZQvDq5/b22BPyG58YHpkCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBS5QyRAm1kVvMWbnxPOTLQnRuQeKjAfBgNVHSMEGDAWgBQUJsOE4qSSg/p0fQee g90ytl1+hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTI1L0ZDYkRoT0tra29QNmRIMEhub1BkTXJaZGZvVS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZDYkRoT0tra29QNmRIMEhub1BkTXJa ZGZvVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MjUvRkNiRGhPS2trb1A2ZEgwSG5vUGRNclpkZm9VLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALLX84TCycVsz6qXGfyURHDCDFiu7K/Oh3GqQEiltX+/lSIv3x66kffwl1RY uhQ+PiWPJ9YYZ31Q1bDHPPbF2VGKm0mdZD9K3cg0bEqZTKAcV7iN3DFVQ++0qq1T tQ2hQgE9JiSiY31bs9zrcTWbfeZlthGAiutCt/a8F1TRyB/m+ZqcJwN+ScSB2lCS Ftgitrp8nUKLVdFkvL2l90Tyk02yb/Z66xI2GS2dl6IUo3QtSSC/1u4g2gWEjsvr gTD9DnJ+tc+0EUUEsq5DjKbWF6O31xfU6eBtFCPwsb1Xvpr39X0aktLyEXsGm7VZ pMKDiY4nN3k0JkfwDpQ8Sak9gcg= -----END CERTIFICATE-----Generated at Mon Aug 11 10:33:19 2025 by rpki-client