$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30382/jStimyfLTOa4ULYZAhzuU7HQlac.mft File: jStimyfLTOa4ULYZAhzuU7HQlac.mft (raw, json) Hash identifier: kiwzU9I1IBjC43l8mlYBHQCZD4FHGylDpCJGXbV2Duo= Subject key identifier: 81:BF:50:04:28:AE:7E:FB:81:B7:B0:82:EC:3E:BF:6F:07:2E:CA:07 Authority key identifier: 8D:2B:62:9B:27:CB:4C:E6:B8:50:B6:19:02:1C:EE:53:B1:D0:95:A7 Certificate issuer: /CN=8D2B629B27CB4CE6B850B619021CEE53B1D095A7 Certificate serial: 14 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jStimyfLTOa4ULYZAhzuU7HQlac.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/jStimyfLTOa4ULYZAhzuU7HQlac.mft Manifest number: 05AD Signing time: Fri 04 Jul 2025 14:14:12 +0000 Manifest this update: Fri 04 Jul 2025 14:14:12 +0000 Manifest next update: Sat 19 Jul 2025 14:14:12 +0000 Files and hashes: 1: HTQZHZI57G81PjLkqrIYsY_8A34.roa (hash: 6EWy+rb6CW9+FBEyPayWg8F/eSJi1w6LdqP9/aIHSe8=) 2: jStimyfLTOa4ULYZAhzuU7HQlac.crl (hash: I767EK8FSqDJBwa1pyYoykJBT7Kr02dwiH/ERmTUEqc=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/jStimyfLTOa4ULYZAhzuU7HQlac.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/jStimyfLTOa4ULYZAhzuU7HQlac.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jStimyfLTOa4ULYZAhzuU7HQlac.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D2B629B27CB4CE6B850B619021CEE53B1D095A7 Validity Not Before: Jun 15 01:42:54 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=81BF500428AE7EFB81B7B082EC3EBF6F072ECA07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:94:cd:4e:c8:72:ba:6c:bb:3f:4e:70:f2:84: 30:cb:04:79:4e:3e:f0:95:40:71:e2:24:a8:a1:07: 04:a9:04:0f:74:ae:c8:ca:00:63:e7:fa:a2:b5:5d: 0a:4d:73:9f:04:81:de:e6:21:9c:e9:c1:f4:c4:c6: ba:2b:0d:65:db:7d:c0:96:b6:10:ef:bd:44:36:c3: 17:8f:7e:4f:50:18:25:e6:0d:90:99:db:01:8c:56: 3a:09:2a:7b:d3:f0:f8:d8:b0:43:ad:63:8b:9b:77: 5e:a3:c5:58:2a:6f:cc:ed:49:9e:54:97:87:e8:77: 2c:1e:20:6a:d7:01:f8:d4:d0:3a:ad:de:1c:12:42: c1:b4:01:6f:12:b9:28:53:f7:59:72:fd:d1:d4:b5: e2:2b:03:85:ba:25:39:e7:22:8c:96:0e:f8:25:e9: f5:a5:43:1f:5c:0a:34:8b:66:19:cc:5e:98:72:31: ba:5c:4a:6e:82:19:f5:3d:ce:4f:79:d4:86:1a:41: 16:bf:cb:c4:5d:f3:ba:37:2f:7f:06:5f:0e:a6:ca: 85:19:0a:4a:c2:eb:d7:5c:4f:3f:df:66:54:db:fd: 5a:b3:20:ad:7f:b1:62:ed:c7:cd:ce:af:bc:30:f2: a0:dd:fe:1c:e7:e5:31:3e:18:72:20:96:c9:8e:00: 58:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BF:50:04:28:AE:7E:FB:81:B7:B0:82:EC:3E:BF:6F:07:2E:CA:07 X509v3 Authority Key Identifier: keyid:8D:2B:62:9B:27:CB:4C:E6:B8:50:B6:19:02:1C:EE:53:B1:D0:95:A7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/jStimyfLTOa4ULYZAhzuU7HQlac.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jStimyfLTOa4ULYZAhzuU7HQlac.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30382/jStimyfLTOa4ULYZAhzuU7HQlac.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:1b:0e:d2:8a:ed:3b:d7:92:8b:c8:e6:01:ed:75:95:ab:72: ea:23:d2:c4:0b:f5:2f:8d:6f:04:ab:2d:d2:c4:1a:e7:15:46: fd:06:1d:bb:f9:3a:71:90:60:b6:c5:c2:1a:f1:a1:09:ab:5c: 55:ac:10:fc:8d:f5:27:f9:b6:21:32:ca:40:0e:31:7f:1b:21: b9:e9:6a:56:00:e9:27:1e:2b:da:62:69:62:1a:09:2c:82:94: 64:77:62:16:95:7b:7f:ee:7b:04:a3:6d:5d:d0:01:ca:50:dc: ea:a0:df:59:a4:0a:24:f9:89:bd:bb:eb:51:62:1a:a4:89:dc: 6a:c3:7e:0c:19:bc:39:a8:d0:0b:17:95:f5:9c:2a:d9:fb:ea: a8:65:f4:ce:0d:cf:ee:45:e6:9a:8f:56:51:48:6e:ae:d9:06: 5a:e7:a0:0d:8c:35:12:09:06:8c:10:be:33:d5:cc:25:9c:5b: ea:7f:5b:a1:e2:81:c1:a0:3a:c6:89:77:32:21:e4:f3:09:62: b2:b7:25:14:67:dd:30:bf:9e:4d:3b:0d:60:a9:a8:f7:ec:83: 9a:93:f2:9a:0d:cc:91:d8:8a:b1:fa:8c:21:ac:9a:a9:86:a8: ca:1b:88:2d:65:78:42:bb:9c:23:0e:12:c9:57:e7:cb:32:ee: 5f:31:bf:0b -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDJC NjI5QjI3Q0I0Q0U2Qjg1MEI2MTkwMjFDRUU1M0IxRDA5NUE3MB4XDTI1MDYxNTAx NDI1NFoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoODFCRjUwMDQyOEFFN0VG QjgxQjdCMDgyRUMzRUJGNkYwNzJFQ0EwNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOSUzU7Icrpsuz9OcPKEMMsEeU4+8JVAceIkqKEHBKkED3SuyMoA Y+f6orVdCk1znwSB3uYhnOnB9MTGuisNZdt9wJa2EO+9RDbDF49+T1AYJeYNkJnb AYxWOgkqe9Pw+NiwQ61ji5t3XqPFWCpvzO1JnlSXh+h3LB4gatcB+NTQOq3eHBJC wbQBbxK5KFP3WXL90dS14isDhbolOecijJYO+CXp9aVDH1wKNItmGcxemHIxulxK boIZ9T3OT3nUhhpBFr/LxF3zujcvfwZfDqbKhRkKSsLr11xPP99mVNv9WrMgrX+x Yu3Hzc6vvDDyoN3+HOflMT4YciCWyY4AWFECAwEAAaOCAkEwggI9MB0GA1UdDgQW BBSBv1AEKK5++4G3sILsPr9vBy7KBzAfBgNVHSMEGDAWgBSNK2KbJ8tM5rhQthkC HO5TsdCVpzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzODIvalN0aW15ZkxUT2E0VUxZWkFoenVVN0hRbGFjLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvalN0aW15ZkxUT2E0VUxZWkFoenVV N0hRbGFjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzgyL2pTdGlteWZMVE9hNFVMWVpBaHp1VTdIUWxhYy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcGw7Siu0715KLyOYB7XWVq3LqI9LEC/UvjW8Eqy3SxBrnFUb9Bh27 +TpxkGC2xcIa8aEJq1xVrBD8jfUn+bYhMspADjF/GyG56WpWAOknHivaYmliGgks gpRkd2IWlXt/7nsEo21d0AHKUNzqoN9ZpAok+Ym9u+tRYhqkidxqw34MGbw5qNAL F5X1nCrZ++qoZfTODc/uReaaj1ZRSG6u2QZa56ANjDUSCQaMEL4z1cwlnFvqf1uh 4oHBoDrGiXcyIeTzCWKytyUUZ90wv55NOw1gqaj37IOak/KaDcyR2Iqx+owhrJqp hqjKG4gtZXhCu5wjDhLJV+fLMu5fMb8L -----END CERTIFICATE-----Generated at Fri Jul 4 16:21:44 2025 by rpki-client