$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20099/IyfNG08fi4lWhhWX5JQxSmhWFZE.mft File: IyfNG08fi4lWhhWX5JQxSmhWFZE.mft (raw, json) Hash identifier: Jo6cd5tFEbg0IoVcHitmeprUeIEjU6Q09Fg4CgDJAXg= Subject key identifier: A6:12:0E:95:EF:D4:4C:E4:48:A4:B4:80:AB:C6:74:FD:38:40:BD:8A Authority key identifier: 23:27:CD:1B:4F:1F:8B:89:56:86:15:97:E4:94:31:4A:68:56:15:91 Certificate issuer: /CN=2327CD1B4F1F8B8956861597E494314A68561591 Certificate serial: 3C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IyfNG08fi4lWhhWX5JQxSmhWFZE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/IyfNG08fi4lWhhWX5JQxSmhWFZE.mft Manifest number: 0648 Signing time: Fri 04 Jul 2025 10:07:41 +0000 Manifest this update: Fri 04 Jul 2025 10:07:41 +0000 Manifest next update: Sat 19 Jul 2025 10:07:41 +0000 Files and hashes: 1: IyfNG08fi4lWhhWX5JQxSmhWFZE.crl (hash: 5BZsU4dqQOIcNEvLiZO8rW5srXJMDE7RYgNTRp+A61w=) 2: LE_VU1zIJ7Sf-G8oHcpQFLBo_xk.roa (hash: UrflveAc7l0Q8Hrej9i00kyi/P3+utZZm2gYylp3rZ4=) 3: LjZndwl0AGUTIGt_z2LLUoFmp7w.roa (hash: 1nBR4pvFMYnlpIR8Ay2STTWjX+IVT5xdg/wvO0jkVjg=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/IyfNG08fi4lWhhWX5JQxSmhWFZE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/IyfNG08fi4lWhhWX5JQxSmhWFZE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IyfNG08fi4lWhhWX5JQxSmhWFZE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2327CD1B4F1F8B8956861597E494314A68561591 Validity Not Before: Jun 15 01:34:56 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=A6120E95EFD44CE448A4B480ABC674FD3840BD8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0a:e0:6d:de:17:b4:ba:90:a4:07:4a:81:f9: 1b:c5:b9:f3:b6:cb:a8:0e:2f:0f:f1:c4:45:7e:75: 8e:0a:c1:7a:86:e1:6d:ad:a6:d1:f2:81:b8:17:1a: b8:38:53:0c:54:52:ee:0f:f6:9d:b4:23:23:95:4a: a7:55:ee:22:e7:b3:74:43:ff:de:fa:af:7f:f1:bc: 19:7c:5d:da:b1:b6:fe:ff:6f:7f:28:1a:db:08:71: e0:68:0d:2f:10:59:bd:aa:c3:52:df:7c:15:4d:21: 8c:32:e9:b8:e2:93:33:1d:6c:68:8a:21:f7:17:8e: 0e:f5:bb:1e:8e:d9:b0:9e:13:b7:06:e0:c8:10:f5: 20:a1:3a:75:0c:b7:b8:17:b4:e9:5d:16:c0:a5:23: 04:ca:61:4f:aa:f7:d8:0c:f4:e9:61:d9:1a:9a:93: 64:79:5e:90:29:b8:93:6a:c6:08:9c:a2:c3:92:ee: 90:c5:ce:a5:c1:96:9e:3d:af:75:6e:0a:00:e0:08: 99:33:45:a9:6e:e4:f8:82:29:ae:7a:fd:d5:a4:ec: c6:68:a5:7e:cd:25:1a:c1:0d:42:7d:6f:50:ce:b1: b6:77:c7:b9:96:bd:14:91:be:ca:34:22:86:44:b9: 77:c7:ea:d2:d6:23:77:83:a8:22:1e:fa:03:15:4d: ff:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:12:0E:95:EF:D4:4C:E4:48:A4:B4:80:AB:C6:74:FD:38:40:BD:8A X509v3 Authority Key Identifier: keyid:23:27:CD:1B:4F:1F:8B:89:56:86:15:97:E4:94:31:4A:68:56:15:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/IyfNG08fi4lWhhWX5JQxSmhWFZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IyfNG08fi4lWhhWX5JQxSmhWFZE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/IyfNG08fi4lWhhWX5JQxSmhWFZE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:20:00:a4:05:5d:aa:80:40:3f:4a:06:c2:d6:fe:a6:64:8e: b4:1d:ea:c6:11:33:24:c7:8f:a2:1a:93:66:6f:3e:1a:b3:91: 8b:cc:75:88:08:5b:bd:95:37:cb:e9:59:d4:46:09:33:23:13: 9d:8f:60:86:fc:2a:a2:01:93:f7:7b:6e:7d:7a:96:7d:2f:25: e9:df:c3:7c:56:bd:3a:33:98:ea:d0:fc:57:04:19:fc:6b:93: e3:c5:c9:dc:a3:e0:5a:0a:4b:22:06:90:b4:de:f2:0d:99:fa: 29:b2:4d:41:58:9d:0d:c3:cd:61:67:4f:5b:4c:86:83:a5:cc: e6:76:44:ed:af:02:a9:ac:cb:1f:b3:bc:aa:c2:d6:4c:94:c6: 42:5f:31:15:8b:c1:24:79:f0:8c:fa:3e:f9:9d:77:2b:4c:0b: 9e:4b:61:88:0c:86:48:b7:b6:dd:94:a3:26:aa:8e:36:17:46: 06:6c:3c:b9:dc:a0:5a:5e:1b:cf:f2:60:da:af:d8:7d:90:71: e7:05:25:ae:be:a4:51:b9:e7:df:f9:01:99:90:44:d5:3f:42: ec:bc:bb:a3:1c:c6:31:be:82:1a:33:fd:86:d9:bc:ec:2c:07: 3d:88:6e:55:f6:ed:c1:7d:bb:aa:d7:fa:67:6e:64:61:8a:38: 2f:44:1a:4e -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMzI3 Q0QxQjRGMUY4Qjg5NTY4NjE1OTdFNDk0MzE0QTY4NTYxNTkxMB4XDTI1MDYxNTAx MzQ1NloXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoQTYxMjBFOTVFRkQ0NENF NDQ4QTRCNDgwQUJDNjc0RkQzODQwQkQ4QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKsK4G3eF7S6kKQHSoH5G8W587bLqA4vD/HERX51jgrBeobhba2m 0fKBuBcauDhTDFRS7g/2nbQjI5VKp1XuIuezdEP/3vqvf/G8GXxd2rG2/v9vfyga 2whx4GgNLxBZvarDUt98FU0hjDLpuOKTMx1saIoh9xeODvW7Ho7ZsJ4TtwbgyBD1 IKE6dQy3uBe06V0WwKUjBMphT6r32Az06WHZGpqTZHlekCm4k2rGCJyiw5LukMXO pcGWnj2vdW4KAOAImTNFqW7k+IIprnr91aTsxmilfs0lGsENQn1vUM6xtnfHuZa9 FJG+yjQihkS5d8fq0tYjd4OoIh76AxVN/ysCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBSmEg6V79RM5EiktICrxnT9OEC9ijAfBgNVHSMEGDAWgBQjJ80bTx+LiVaGFZfk lDFKaFYVkTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwOTkvSXlmTkcwOGZpNGxXaGhXWDVKUXhTbWhXRlpFLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSXlmTkcwOGZpNGxXaGhXWDVKUXhT bWhXRlpFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDk5L0l5Zk5HMDhmaTRsV2hoV1g1SlF4U21oV0ZaRS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoIACkBV2qgEA/SgbC1v6mZI60HerGETMkx4+iGpNmbz4as5GLzHWI CFu9lTfL6VnURgkzIxOdj2CG/CqiAZP3e259epZ9LyXp38N8Vr06M5jq0PxXBBn8 a5Pjxcnco+BaCksiBpC03vINmfopsk1BWJ0Nw81hZ09bTIaDpczmdkTtrwKprMsf s7yqwtZMlMZCXzEVi8EkefCM+j75nXcrTAueS2GIDIZIt7bdlKMmqo42F0YGbDy5 3KBaXhvP8mDar9h9kHHnBSWuvqRRueff+QGZkETVP0LsvLujHMYxvoIaM/2G2bzs LAc9iG5V9u3Bfbuq1/pnbmRhijgvRBpO -----END CERTIFICATE-----Generated at Fri Jul 4 15:12:19 2025 by rpki-client