$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft File: if8a6GSr-fEmFOMHZAT1VtVv-oI.mft (raw, json) Hash identifier: 9LDDe8F6E1uh4e1o5LJ+CpE4AwFjfvZ0r/9tnkIzxnQ= Subject key identifier: F1:90:9A:A8:7C:86:7B:21:FD:B4:D1:14:F2:2D:6D:F0:B3:2E:F5:17 Authority key identifier: 89:FF:1A:E8:64:AB:F9:F1:26:14:E3:07:64:04:F5:56:D5:6F:FA:82 Certificate issuer: /CN=89FF1AE864ABF9F12614E3076404F556D56FFA82 Certificate serial: 16 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft Manifest number: 06D0 Signing time: Sat 23 Aug 2025 20:07:44 +0000 Manifest this update: Sat 23 Aug 2025 20:07:44 +0000 Manifest next update: Sun 07 Sep 2025 20:07:44 +0000 Files and hashes: 1: L81cz7y0oxWNHbQl8rUmzHWBNyE.roa (hash: GPSOFB4tYhpekULTWP99E6iKTUsR4vN9JPL9sV2pNTo=) 2: if8a6GSr-fEmFOMHZAT1VtVv-oI.crl (hash: RgLGTQXeW8vQaOmEY+4XW0U8Kbxy54ZwphRyrGaY2wI=) 3: lc34sKmnuTaf1zwMLkP85-29nLo.roa (hash: /WIhfZI0ncbjU2jZLBVHY+eMeD/i+XMv5UxJY0iSQYY=) 4: n8eQBYjvsUifgiHUdBIk3JHJA2E.roa (hash: lgdTeUR2d4aveju6dE0o2ntWyi20B2bFNgnTeqmPTpM=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 19:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89FF1AE864ABF9F12614E3076404F556D56FFA82 Validity Not Before: Aug 15 01:36:35 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=F1909AA87C867B21FDB4D114F22D6DF0B32EF517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:23:e0:34:8b:f8:f6:49:bf:f9:7e:b7:2b:fe: d8:d9:31:2c:93:47:7c:cb:15:ad:10:b8:16:94:05: 3d:fb:39:81:24:32:db:9f:20:5d:e4:b1:1d:77:47: 45:05:61:00:dc:b9:8d:b0:63:64:7f:a9:d6:22:c4: 93:cd:e5:8d:e7:c2:3c:d2:32:e1:4f:a4:50:36:42: c9:f7:09:e2:1e:bb:f1:52:7e:c1:ca:4b:c4:29:6f: 40:9c:05:45:de:be:8f:cb:81:f0:6c:dd:f0:79:6f: 8a:f7:8a:03:a9:ec:c6:f9:8e:be:e9:ba:c6:3e:7e: 80:ff:cc:c3:39:76:72:ff:12:2e:f3:46:6e:2a:04: ca:43:d7:8b:18:22:91:b0:77:3f:45:87:1b:f3:b7: e1:94:31:1b:4f:40:6a:7b:1f:f4:10:24:e0:7b:df: bc:ad:ef:52:63:d3:15:e6:50:c2:02:08:35:85:67: 64:0e:c6:db:61:9a:25:d4:c8:ff:ab:0b:b5:f1:9f: 43:20:95:aa:7e:d1:72:6a:77:10:fa:4b:8f:bc:3d: 03:eb:84:32:3a:e8:ca:6f:83:c3:b4:28:ac:b2:68: 89:2a:98:af:78:2e:bd:80:45:06:3c:54:ae:dd:36: 35:06:7f:a9:fa:98:3b:3d:87:fc:aa:55:2b:e0:15: 34:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:90:9A:A8:7C:86:7B:21:FD:B4:D1:14:F2:2D:6D:F0:B3:2E:F5:17 X509v3 Authority Key Identifier: keyid:89:FF:1A:E8:64:AB:F9:F1:26:14:E3:07:64:04:F5:56:D5:6F:FA:82 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:0b:39:8c:0a:09:95:68:f1:02:bf:f5:5b:f2:de:12:ae:62: 0a:94:8e:da:86:aa:3b:18:ea:24:b2:47:a8:2e:05:88:f4:4c: f3:ea:5e:0c:c0:4d:33:a0:08:2c:b0:3a:9b:d5:09:31:e4:10: d0:e8:31:14:62:df:8b:4d:10:23:cc:5e:a7:16:8f:34:3f:6e: 2a:df:78:a4:9a:bb:d6:55:41:86:0a:75:6f:b1:55:86:42:2f: d7:08:49:92:e0:40:71:8a:91:29:d9:44:1b:c6:3c:11:bd:eb: d5:a7:a2:4f:10:bc:1a:9b:e1:4a:e9:04:2f:f7:b5:dc:7c:ff: 53:b9:4e:45:ab:0d:c4:ab:52:a8:84:d2:30:1b:8b:72:19:da: bf:ce:91:4a:e7:a0:39:31:69:ca:51:53:fe:3d:5f:eb:07:7a: 6a:a4:fa:bc:13:15:71:cd:11:79:75:eb:21:cb:35:1d:39:39: c7:a6:04:55:be:9e:ef:fc:97:82:f3:a1:9f:12:05:72:d4:a5: 7a:16:d0:07:97:10:79:91:1b:f6:46:41:a2:8d:69:50:4f:9c: 28:8d:37:c0:c9:75:0e:14:c4:09:23:33:a4:ee:fb:ed:66:4e: b3:56:97:38:f1:a1:db:41:b7:9a:56:45:be:d8:ff:f1:82:da: 6c:f8:e8:0d -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OUZG MUFFODY0QUJGOUYxMjYxNEUzMDc2NDA0RjU1NkQ1NkZGQTgyMB4XDTI1MDgxNTAx MzYzNVoXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoRjE5MDlBQTg3Qzg2N0Iy MUZEQjREMTE0RjIyRDZERjBCMzJFRjUxNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMIj4DSL+PZJv/l+tyv+2NkxLJNHfMsVrRC4FpQFPfs5gSQy258g XeSxHXdHRQVhANy5jbBjZH+p1iLEk83ljefCPNIy4U+kUDZCyfcJ4h678VJ+wcpL xClvQJwFRd6+j8uB8Gzd8HlviveKA6nsxvmOvum6xj5+gP/Mwzl2cv8SLvNGbioE ykPXixgikbB3P0WHG/O34ZQxG09Aansf9BAk4HvfvK3vUmPTFeZQwgIINYVnZA7G 22GaJdTI/6sLtfGfQyCVqn7Rcmp3EPpLj7w9A+uEMjroym+Dw7QorLJoiSqYr3gu vYBFBjxUrt02NQZ/qfqYOz2H/KpVK+AVNFMCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBTxkJqofIZ7If200RTyLW3wsy71FzAfBgNVHSMEGDAWgBSJ/xroZKv58SYU4wdk BPVW1W/6gjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyNTAvaWY4YTZHU3ItZkVtRk9NSFpBVDFWdFZ2LW9JLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaWY4YTZHU3ItZkVtRk9NSFpBVDFW dFZ2LW9JLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMjUwL2lmOGE2R1NyLWZFbUZPTUhaQVQxVnRWdi1vSS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTCzmMCgmVaPECv/Vb8t4SrmIKlI7ahqo7GOokskeoLgWI9Ezz6l4M wE0zoAgssDqb1Qkx5BDQ6DEUYt+LTRAjzF6nFo80P24q33ikmrvWVUGGCnVvsVWG Qi/XCEmS4EBxipEp2UQbxjwRvevVp6JPELwam+FK6QQv97XcfP9TuU5Fqw3Eq1Ko hNIwG4tyGdq/zpFK56A5MWnKUVP+PV/rB3pqpPq8ExVxzRF5deshyzUdOTnHpgRV vp7v/JeC86GfEgVy1KV6FtAHlxB5kRv2RkGijWlQT5wojTfAyXUOFMQJIzOk7vvt Zk6zVpc48aHbQbeaVkW+2P/xgtps+OgN -----END CERTIFICATE-----Generated at Sat Aug 23 22:16:31 2025 by rpki-client