$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft File: PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft (raw, json) Hash identifier: erTd7TiqkCOr6iwVKQMOQ4wEfkpREggigEw1HRgHKUk= Subject key identifier: 57:37:37:23:6B:69:B1:52:16:37:DB:F5:F1:8D:18:F1:4F:88:71:04 Authority key identifier: 3C:26:7D:02:8F:D9:9C:61:3E:3A:6F:42:54:15:D7:DB:7F:CD:1D:4A Certificate issuer: /CN=3C267D028FD99C613E3A6F425415D7DB7FCD1D4A Certificate serial: 28 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft Manifest number: 04F3 Signing time: Sun 18 May 2025 02:17:17 +0000 Manifest this update: Sun 18 May 2025 02:17:17 +0000 Manifest next update: Mon 02 Jun 2025 02:17:17 +0000 Files and hashes: 1: F4_6mMGK-HTepssz1B8N-bnlse0.roa (hash: axV7ZGLQ7OOMyJT4G1Pv+HssyML+VnNx/zerJPxUQl8=) 2: PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.crl (hash: bfRmSG0ggV4T8fqQfWqTelftlvNh1O0bsvXUs0Mpp2g=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 18:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C267D028FD99C613E3A6F425415D7DB7FCD1D4A Validity Not Before: May 15 01:34:13 2025 GMT Not After : May 15 01:30:03 2026 GMT Subject: CN=573737236B69B1521637DBF5F18D18F14F887104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a9:a1:5f:6c:fd:2e:5f:07:b4:71:68:91:4c: 6b:64:ee:2e:28:8d:d7:6b:21:84:af:df:bc:9c:5f: 01:98:fa:c8:92:07:ab:01:22:66:97:63:22:9a:a4: 8b:2e:38:df:24:85:e3:81:3c:9d:56:87:e5:fd:33: 11:df:23:fb:6f:26:48:e5:3e:03:8b:71:c9:ad:40: 76:8b:a6:49:06:4d:2b:1f:7d:14:69:a5:5b:8b:68: 44:30:42:fc:48:ec:1b:7a:9a:c2:06:ab:50:1f:f0: 25:37:ce:1f:f6:17:e8:97:07:2a:71:ae:d6:b8:3d: 9b:ea:67:25:19:3c:0f:f0:78:c8:37:43:0b:ab:bb: 0f:ff:c3:bf:66:f1:09:c4:ef:f7:c9:d7:25:be:9b: 0b:66:fc:a2:5a:8b:3c:ca:d9:80:50:25:a7:00:2d: 00:f0:52:d2:0a:e8:35:bd:be:11:5e:03:01:b9:cc: 48:1f:36:73:d0:06:c8:b5:20:d3:ea:54:43:e6:e2: 05:6b:f8:48:41:37:39:56:75:7a:b6:86:31:60:d0: c8:74:92:f4:45:20:12:a8:00:40:22:a1:de:4f:82: 5e:d8:e4:f4:6c:57:19:2d:2b:a0:d9:36:9f:ee:5c: c6:aa:e8:6b:1d:54:03:aa:fe:ad:f7:04:b9:7e:9d: b8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:37:37:23:6B:69:B1:52:16:37:DB:F5:F1:8D:18:F1:4F:88:71:04 X509v3 Authority Key Identifier: keyid:3C:26:7D:02:8F:D9:9C:61:3E:3A:6F:42:54:15:D7:DB:7F:CD:1D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:ca:ee:94:f1:91:6b:d1:4f:4d:02:a0:3a:12:52:0c:8d:cb: d9:b6:96:c1:5d:87:a7:c9:fd:1e:f3:5c:ad:fc:97:4c:66:1f: 90:63:2a:42:d4:d5:00:e5:12:8f:31:59:84:b7:36:21:f2:70: 29:25:92:d7:de:d4:f1:f2:57:d3:d7:11:1a:aa:58:8d:d8:17: 4e:b8:86:3a:27:23:23:2d:83:43:25:cd:15:1f:3d:90:c7:57: 7f:b7:5b:fb:91:1a:13:ea:4b:fd:7c:df:cc:ab:76:bc:1b:a4: 82:e8:98:be:39:b6:8d:8b:41:45:a9:98:23:d6:4d:d7:99:05: c2:55:80:19:69:cf:6f:8e:db:5e:42:e8:9b:b1:f8:e0:d8:cc: c7:02:d8:f9:46:2d:54:ad:a4:bf:0f:d6:05:3f:47:45:e6:31: 4a:7e:b3:e5:19:62:0d:84:88:5e:ec:09:39:08:49:22:63:89: 7d:ec:91:da:8b:ee:63:43:96:b3:a4:b6:17:c2:f5:85:ab:25: 55:0b:d6:c0:4d:58:68:87:6c:0f:9a:70:69:85:cd:7c:3c:b3: df:b0:cd:14:0a:9b:a5:b3:de:04:0a:e8:02:ea:7a:53:56:96: f1:2f:a9:86:40:6c:ce:b0:10:da:14:52:de:c2:cd:99:4d:f4: 02:ef:39:78 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQzI2 N0QwMjhGRDk5QzYxM0UzQTZGNDI1NDE1RDdEQjdGQ0QxRDRBMB4XDTI1MDUxNTAx MzQxM1oXDTI2MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoNTczNzM3MjM2QjY5QjE1 MjE2MzdEQkY1RjE4RDE4RjE0Rjg4NzEwNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM6poV9s/S5fB7RxaJFMa2TuLiiN12shhK/fvJxfAZj6yJIHqwEi ZpdjIpqkiy443ySF44E8nVaH5f0zEd8j+28mSOU+A4txya1AdoumSQZNKx99FGml W4toRDBC/EjsG3qawgarUB/wJTfOH/YX6JcHKnGu1rg9m+pnJRk8D/B4yDdDC6u7 D//Dv2bxCcTv98nXJb6bC2b8olqLPMrZgFAlpwAtAPBS0groNb2+EV4DAbnMSB82 c9AGyLUg0+pUQ+biBWv4SEE3OVZ1eraGMWDQyHSS9EUgEqgAQCKh3k+CXtjk9GxX GS0roNk2n+5cxqroax1UA6r+rfcEuX6duEECAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRXNzcja2mxUhY32/XxjRjxT4hxBDAfBgNVHSMEGDAWgBQ8Jn0Cj9mcYT46b0JU Fdfbf80dSjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyNDUvUENaOUFvX1puR0UtT205Q1ZCWFgyM19OSFVvLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvUENaOUFvX1puR0UtT205Q1ZCWFgy M19OSFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjQ1L1BDWjlBb19abkdFLU9tOUNWQlhYMjNfTkhVby5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQyu6U8ZFr0U9NAqA6ElIMjcvZtpbBXYenyf0e81yt/JdMZh+QYypC 1NUA5RKPMVmEtzYh8nApJZLX3tTx8lfT1xEaqliN2BdOuIY6JyMjLYNDJc0VHz2Q x1d/t1v7kRoT6kv9fN/Mq3a8G6SC6Ji+ObaNi0FFqZgj1k3XmQXCVYAZac9vjtte Quibsfjg2MzHAtj5Ri1UraS/D9YFP0dF5jFKfrPlGWINhIhe7Ak5CEkiY4l97JHa i+5jQ5azpLYXwvWFqyVVC9bATVhoh2wPmnBphc18PLPfsM0UCpuls94ECugC6npT VpbxL6mGQGzOsBDaFFLews2ZTfQC7zl4 -----END CERTIFICATE-----Generated at Sun May 18 21:09:10 2025 by rpki-client