$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.mft File: h9rsIO30ogEEI917AE4VdPETpzU.mft (raw, json) Hash identifier: bVdby9cwNzV1/DFE8F3VTUZAvqDHWkPkHyz+gDGb9sc= Subject key identifier: 1F:00:71:20:23:AD:96:60:85:1F:4E:4E:C5:D3:34:5D:4F:CA:60:BD Authority key identifier: 87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35 Certificate issuer: /CN=87DAEC20EDF4A2010423DD7B004E1574F113A735 Certificate serial: 38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.mft Manifest number: 050F Signing time: Fri 16 May 2025 21:59:36 +0000 Manifest this update: Fri 16 May 2025 21:59:36 +0000 Manifest next update: Sat 31 May 2025 21:59:36 +0000 Files and hashes: 1: g5xMfTlCv6yT6FmfsGO_OjhTuOE.roa (hash: Iu3Os0J4wk8f3XlxlFnOJlAiwwKkxZbuiZxxIyoQ7BE=) 2: h9rsIO30ogEEI917AE4VdPETpzU.crl (hash: WYneJ+ygutXZURwhWCtR5qnEYkPVshux+F4G4mT9MDs=) 3: iU4M5_1vVClsIdSo6AKWusrbOeI.roa (hash: 5nWzulpEDokK/w4oeaq8jCheJ1eHHLlVDhSD1Tgk4mk=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 22:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87DAEC20EDF4A2010423DD7B004E1574F113A735 Validity Not Before: May 15 01:37:54 2025 GMT Not After : May 15 01:30:03 2026 GMT Subject: CN=1F00712023AD9660851F4E4EC5D3345D4FCA60BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9f:67:ef:0b:cb:3a:84:f1:2c:e7:d8:df:e8: 82:b1:d8:8b:da:34:68:4e:b6:f9:c7:99:fa:59:fa: d1:08:00:b8:04:c2:36:f9:1d:b4:73:5f:96:f0:d8: c4:5f:75:a4:10:44:33:35:1a:ce:7e:c1:fd:bd:d1: fa:4e:e6:f4:52:53:67:ec:71:76:c6:96:f9:96:d2: 95:30:78:a1:89:1a:c9:4a:da:a0:8f:ab:b0:63:bf: 4a:64:ea:1b:c7:7b:ec:a0:87:9e:63:a8:6a:79:a5: 60:57:4d:2f:50:d4:8c:81:e7:c6:38:45:f1:2c:96: a5:02:b6:f1:e2:8a:48:f7:4f:0c:91:0e:b7:1c:60: f1:9f:f2:50:ba:cd:e4:87:4e:d0:34:f0:2c:b3:f2: ff:4f:1f:37:a9:22:8f:50:aa:03:ed:e3:35:12:61: f5:fd:d7:0c:6a:01:82:91:90:35:b9:33:05:c0:d8: c4:25:03:ab:ba:92:f2:5f:2f:86:bb:e1:1a:78:c3: 93:63:95:c5:55:72:c4:c0:bf:ff:cd:63:2d:24:c7: af:1f:ce:1a:57:51:61:86:8d:f9:b5:5f:4e:0a:01: da:ca:89:62:23:97:12:61:62:7b:28:b9:fa:50:01: 93:c3:c3:a7:fd:a9:f8:e3:76:e0:28:1b:7b:df:30: 4c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:00:71:20:23:AD:96:60:85:1F:4E:4E:C5:D3:34:5D:4F:CA:60:BD X509v3 Authority Key Identifier: keyid:87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:a7:54:3c:c5:ab:ee:76:70:b9:83:4a:9f:74:be:21:12:f8: 2d:75:ba:03:54:10:90:35:c6:2e:d0:9c:8f:11:a0:8f:d4:59: e5:50:a0:d2:8e:e3:b0:b2:4e:12:fe:2f:46:03:b5:15:e4:77: a2:e4:2c:d5:c3:3d:01:b0:82:5b:e4:b8:24:ef:2b:9d:99:46: d8:ee:e2:00:b5:8f:c3:84:ac:5d:26:a5:04:95:04:a4:16:8a: d6:b7:f9:c3:71:dd:bf:59:2b:d9:5a:40:6e:29:30:3b:ba:8f: 90:05:f1:25:0a:3d:8d:68:49:da:8a:9b:87:81:dd:32:80:d7: 56:60:59:d8:fc:3b:82:59:54:9d:27:0c:2a:fc:4a:95:3f:fe: 94:ac:f1:75:ce:dd:2a:42:a4:ce:0d:b7:56:9d:bb:5f:59:02: 83:2d:ee:38:37:f7:80:97:7e:f6:15:98:52:5a:04:1d:58:68: 67:ca:29:72:a6:8d:8c:d4:e0:b2:23:a1:47:b4:44:6c:c7:21: 9f:0e:e5:19:d1:59:95:24:67:76:dd:de:72:d1:9b:11:79:66: a1:5d:75:4b:66:c7:f1:31:98:4f:e7:06:ad:b9:76:0e:03:79: 8a:d4:df:3f:0d:27:9d:35:8d:14:66:e8:6b:d9:91:f1:e7:5e: c1:2c:e8:b3 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4N0RB RUMyMEVERjRBMjAxMDQyM0REN0IwMDRFMTU3NEYxMTNBNzM1MB4XDTI1MDUxNTAx Mzc1NFoXDTI2MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoMUYwMDcxMjAyM0FEOTY2 MDg1MUY0RTRFQzVEMzM0NUQ0RkNBNjBCRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOifZ+8LyzqE8Szn2N/ogrHYi9o0aE62+ceZ+ln60QgAuATCNvkd tHNflvDYxF91pBBEMzUazn7B/b3R+k7m9FJTZ+xxdsaW+ZbSlTB4oYkayUraoI+r sGO/SmTqG8d77KCHnmOoanmlYFdNL1DUjIHnxjhF8SyWpQK28eKKSPdPDJEOtxxg 8Z/yULrN5IdO0DTwLLPy/08fN6kij1CqA+3jNRJh9f3XDGoBgpGQNbkzBcDYxCUD q7qS8l8vhrvhGnjDk2OVxVVyxMC//81jLSTHrx/OGldRYYaN+bVfTgoB2sqJYiOX EmFieyi5+lABk8PDp/2p+ON24Cgbe98wTAMCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQfAHEgI62WYIUfTk7F0zRdT8pgvTAfBgNVHSMEGDAWgBSH2uwg7fSiAQQj3XsA ThV08ROnNTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxNDQvaDlyc0lPMzBvZ0VFSTkxN0FFNFZkUEVUcHpVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaDlyc0lPMzBvZ0VFSTkxN0FFNFZk UEVUcHpVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTQ0L2g5cnNJTzMwb2dFRUk5MTdBRTRWZFBFVHB6VS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQp1Q8xavudnC5g0qfdL4hEvgtdboDVBCQNcYu0JyPEaCP1FnlUKDS juOwsk4S/i9GA7UV5Hei5CzVwz0BsIJb5Lgk7yudmUbY7uIAtY/DhKxdJqUElQSk ForWt/nDcd2/WSvZWkBuKTA7uo+QBfElCj2NaEnaipuHgd0ygNdWYFnY/DuCWVSd Jwwq/EqVP/6UrPF1zt0qQqTODbdWnbtfWQKDLe44N/eAl372FZhSWgQdWGhnyily po2M1OCyI6FHtERsxyGfDuUZ0VmVJGd23d5y0ZsReWahXXVLZsfxMZhP5watuXYO A3mK1N8/DSedNY0UZuhr2ZHx517BLOiz -----END CERTIFICATE-----Generated at Sat May 17 02:09:50 2025 by rpki-client