$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft File: FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft (raw, json) Hash identifier: 80nJIX+jb8weK48aY7Tnx3K4ZIIidUGAC8Y6OmCqDmk= Subject key identifier: B9:43:24:40:9B:59:15:BC:C5:9B:9F:13:CE:4C:B4:27:46:E4:1E:2A Authority key identifier: 14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85 Certificate issuer: /CN=1426C384E2A49283FA747D079E83DD32B65D7E85 Certificate serial: 4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft Manifest number: 0804 Signing time: Sat 26 Apr 2025 14:24:37 +0000 Manifest this update: Sat 26 Apr 2025 14:24:37 +0000 Manifest next update: Sun 11 May 2025 14:24:37 +0000 Files and hashes: 1: 3DMBnMrkzHTEZydJ8Z_YbgcDNis.roa (hash: pABnEty8E04ycw6oPAlLGvw4El3xbN6PSUwGEWh2rlU=) 2: FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl (hash: l7KkvypJOFLTmur5aLyyfKeyXVTRzAmTdofu2Q/6Q3g=) 3: rr2l_BrlPICs6GaXOLyguTCsRdA.roa (hash: SPVoInmOh3chMjxVqsWUoEpQZMOkSDuudZk/GJi7f3Q=) 4: ucLnLB-OnNXJ5rn9FADqN8YGxj4.roa (hash: DkgGRBDToPP1fqMqqt356eBNizFUzzsaWYf3AYdg5cY=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1426C384E2A49283FA747D079E83DD32B65D7E85 Validity Not Before: Apr 15 01:34:24 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=B94324409B5915BCC59B9F13CE4CB42746E41E2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:52:97:0c:2c:8e:9a:c6:90:9d:04:a0:79:eb: f2:64:c2:46:b4:3e:99:44:a2:f6:7a:81:4b:a6:df: af:b7:f2:e9:e6:0e:64:32:00:12:a8:6c:33:80:20: e4:c9:3d:a5:8c:de:7d:45:29:63:45:04:95:96:1c: f0:64:7c:7c:82:b1:40:a3:63:19:b2:42:58:03:03: b3:ac:af:c7:33:62:08:fe:d6:04:6e:8a:29:09:be: 5c:e9:da:45:a7:ec:aa:05:4e:07:14:91:f7:b1:0c: ee:54:a5:71:7e:00:28:d8:a5:d2:65:af:55:82:49: 0b:43:f1:45:68:17:64:e4:7d:38:8a:86:d9:4a:43: a1:47:09:78:4d:a3:36:ae:52:a2:3c:c3:bf:f5:ce: aa:46:68:b6:f6:2e:46:12:ba:3d:7f:0b:8c:1e:df: 82:a2:1d:88:d3:39:2d:6d:c2:a5:51:9b:76:0c:65: 87:0a:3b:7d:5e:f7:6e:f2:2a:39:94:bc:6b:68:a1: 50:6a:00:03:1d:af:17:b1:92:6e:0c:58:2d:d2:71: 0f:c3:35:3e:18:e7:a4:56:3d:f7:dc:9c:1a:e1:f2: 2c:cb:39:b0:14:ea:6a:6a:31:fc:64:b2:d9:bf:a6: 20:d8:59:42:f0:ea:e7:f6:f6:d8:13:f2:1b:9f:18: 1e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:43:24:40:9B:59:15:BC:C5:9B:9F:13:CE:4C:B4:27:46:E4:1E:2A X509v3 Authority Key Identifier: keyid:14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:f1:8c:bc:50:00:27:b4:27:17:f6:f8:a9:c8:8f:ab:44:87: d0:82:38:e6:93:38:71:e2:fd:3e:18:40:1f:64:63:7e:2e:d2: 8b:b5:62:1a:c8:07:71:fa:49:0d:ad:19:41:09:4d:ad:7a:d8: 53:81:8e:41:96:ee:7a:8c:8e:08:90:10:d3:b1:ff:36:04:1c: e5:77:18:24:3c:78:5d:a7:72:f0:7c:61:df:39:bb:ea:d5:5b: 67:fb:52:db:2a:41:53:e8:df:95:d8:3d:4a:23:50:99:62:c6: c7:9a:35:8e:db:a0:55:23:70:13:2a:72:b5:fe:db:04:d0:08: 0a:01:52:56:3b:b0:da:79:43:12:31:0d:4d:9d:6b:19:72:f1: 5f:99:56:87:73:e8:7e:93:3c:ce:92:1e:52:a8:78:71:2b:6f: 3a:b1:53:bf:21:0f:f7:92:94:2f:dc:a2:ac:ee:e1:9a:92:96: b7:91:13:90:97:86:dd:84:77:49:54:e1:10:5d:cc:50:b0:e6: 95:70:e4:aa:0b:69:14:9d:c0:65:fc:ba:74:31:b3:b6:a1:6c: 08:9c:3d:cc:3e:2d:65:f8:31:95:8e:9b:c6:13:eb:6b:d8:e5: 04:de:f8:09:57:86:a7:1a:53:ad:02:8b:58:66:f6:73:33:e5: 89:a5:32:04 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNDI2 QzM4NEUyQTQ5MjgzRkE3NDdEMDc5RTgzREQzMkI2NUQ3RTg1MB4XDTI1MDQxNTAx MzQyNFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoQjk0MzI0NDA5QjU5MTVC Q0M1OUI5RjEzQ0U0Q0I0Mjc0NkU0MUUyQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM9SlwwsjprGkJ0EoHnr8mTCRrQ+mUSi9nqBS6bfr7fy6eYOZDIA EqhsM4Ag5Mk9pYzefUUpY0UElZYc8GR8fIKxQKNjGbJCWAMDs6yvxzNiCP7WBG6K KQm+XOnaRafsqgVOBxSR97EM7lSlcX4AKNil0mWvVYJJC0PxRWgXZOR9OIqG2UpD oUcJeE2jNq5SojzDv/XOqkZotvYuRhK6PX8LjB7fgqIdiNM5LW3CpVGbdgxlhwo7 fV73bvIqOZS8a2ihUGoAAx2vF7GSbgxYLdJxD8M1PhjnpFY999ycGuHyLMs5sBTq amox/GSy2b+mINhZQvDq5/b22BPyG58YHpkCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBS5QyRAm1kVvMWbnxPOTLQnRuQeKjAfBgNVHSMEGDAWgBQUJsOE4qSSg/p0fQee g90ytl1+hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTI1L0ZDYkRoT0tra29QNmRIMEhub1BkTXJaZGZvVS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZDYkRoT0tra29QNmRIMEhub1BkTXJa ZGZvVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MjUvRkNiRGhPS2trb1A2ZEgwSG5vUGRNclpkZm9VLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHbxjLxQACe0Jxf2+KnIj6tEh9CCOOaTOHHi/T4YQB9kY34u0ou1YhrIB3H6 SQ2tGUEJTa162FOBjkGW7nqMjgiQENOx/zYEHOV3GCQ8eF2ncvB8Yd85u+rVW2f7 UtsqQVPo35XYPUojUJlixseaNY7boFUjcBMqcrX+2wTQCAoBUlY7sNp5QxIxDU2d axly8V+ZVodz6H6TPM6SHlKoeHErbzqxU78hD/eSlC/coqzu4ZqSlreRE5CXht2E d0lU4RBdzFCw5pVw5KoLaRSdwGX8unQxs7ahbAicPcw+LWX4MZWOm8YT62vY5QTe +AlXhqcaU60Ci1hm9nMz5YmlMgQ= -----END CERTIFICATE-----Generated at Sat Apr 26 17:19:26 2025 by rpki-client