$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft File: 7hOsz353sCkq4XsFNAIRyPlxdgs.mft (raw, json) Hash identifier: vY374Ga2JqHUeCwGW0KN3DB0zhLHPfH9P39dh6wcDbo= Subject key identifier: A1:57:2E:60:59:AA:59:06:0E:81:A7:95:85:0D:A2:F0:07:C1:3A:A4 Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B Certificate issuer: /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B Certificate serial: 3D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft Manifest number: 04E3 Signing time: Sat 17 May 2025 02:07:46 +0000 Manifest this update: Sat 17 May 2025 02:07:46 +0000 Manifest next update: Sun 01 Jun 2025 02:07:46 +0000 Files and hashes: 1: 1SJbYUd8p8oMen6RPa00IOWV9mE.roa (hash: UDpcHQ+0Abc5mWmR8ULJBoE8aKN+3NO2e+ukT6tgxHE=) 2: 2tfCUV_uz9A4cuYQPukBhWSb95s.roa (hash: rLb9OLvnUAWM0boRqUkiI5TRFDZgMEpErnM1W8cSidY=) 3: 7Iv6J08zRQ7NsO3jJ0oHbfI2bEk.roa (hash: 3LyiamrnzDGpP8Svs8FK2CISDqoO7UiQPpQOYaoqlPA=) 4: 7hOsz353sCkq4XsFNAIRyPlxdgs.crl (hash: 0hLxeoUNsO2F5gCGkjlGfmV0WqK1BBxIHdeIG34LxA0=) 5: 85Nf2Qq391Vv7HxJ-kHXZY1pjc0.roa (hash: 9QoDjSKM9fHDfVtU1sq5tzZVzvHN7kh4uN+rudSmHfg=) 6: BkA8wyb8wW-wUM7VW6oPScpAa3c.roa (hash: SWTK7ZnqM8yHvUMKBTyOUXDewy5cp5fXqoSaN/6NwFw=) 7: HULAEhTEaPKAAqiwCPVJLRXA4c4.roa (hash: 3MawhDuyFtU+QZk+8/cvyWSFt4HpWdrcXZf0icZpJKg=) 8: PlXujQnIvaBVcgfdZUzMCXjJkDo.roa (hash: aCxl5jvQ7JXLWmmFHmSbXTq8loJZ9FyWSuvvPH4W5oM=) 9: pdXpMRQzmzHKpbd5WN1-fHvtxX4.roa (hash: iFw35uTbq7FkqOf44/VRS8oi7idiiwS4oRODoDjRvoU=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 18:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B Validity Not Before: May 15 01:38:58 2025 GMT Not After : May 15 01:30:03 2026 GMT Subject: CN=A1572E6059AA59060E81A795850DA2F007C13AA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:29:3b:f4:8c:d7:04:25:47:ed:0d:44:65:3e: 85:54:48:9a:0e:b7:4c:3c:5a:2e:3b:7b:2d:aa:bf: b8:24:01:16:7e:7b:75:fa:9a:36:6d:5e:47:84:d7: 45:a2:e2:60:14:20:1a:2c:0b:a7:77:03:08:b3:b9: fc:32:03:26:23:2e:dd:e3:e8:ed:f9:cf:f0:9f:ff: f2:7d:d0:e8:57:ba:bc:03:05:d4:7c:af:c1:32:ed: fb:b2:cf:01:f1:39:58:ab:aa:6d:df:4d:56:79:89: af:7a:37:44:b4:7c:78:1e:30:66:75:d3:ce:73:fe: 13:2f:b0:3a:0f:e2:28:aa:14:f8:97:66:78:cc:2f: 56:89:6b:58:f8:15:24:c7:f1:2f:df:11:37:a3:ac: 80:48:1d:b8:a4:4d:fb:ff:cc:27:34:1f:c4:b2:ef: 2c:e5:63:b4:ed:30:5e:ac:0b:8a:38:c9:c8:ac:22: eb:b2:43:a4:18:7d:a5:cf:96:37:e4:b3:57:54:85: a3:98:e7:04:a4:13:69:74:8b:24:29:4b:fa:29:f3: c0:1f:98:6c:07:96:cc:90:d4:35:14:aa:f2:f1:d9: 38:07:d3:1f:4e:57:b2:1a:46:c8:ad:3e:ae:88:8d: f9:36:88:85:1c:ab:c6:0e:3d:7f:f6:f4:ef:87:4f: 38:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:57:2E:60:59:AA:59:06:0E:81:A7:95:85:0D:A2:F0:07:C1:3A:A4 X509v3 Authority Key Identifier: keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f2:23:29:c8:3f:2c:11:f3:37:65:51:71:9c:a4:64:f2:2b: 7e:a9:3d:fa:96:42:07:4a:d5:8a:fc:d6:30:b1:e6:83:b3:f5: e6:f1:bb:60:93:de:35:10:8e:51:2d:0e:da:ce:9c:46:a8:66: a7:39:55:40:24:ef:ee:9f:86:d9:0c:76:a6:93:4e:27:31:d6: 0b:3d:f9:af:81:0f:15:57:1a:97:ac:ee:df:bd:ec:3c:d7:49: 19:81:c8:5e:84:fa:a1:2f:78:1e:67:d5:5d:ef:7f:1f:31:d7: 7c:51:54:4c:52:b8:ad:25:b5:68:33:01:67:d1:87:fb:93:00: 35:9e:72:d2:52:c8:8c:03:2a:0a:77:bc:49:0d:95:03:68:90: a2:b4:e7:93:78:a8:f1:24:76:23:16:0b:a7:d3:32:3f:d7:d0: 9a:1e:9f:5e:83:86:6b:74:7f:88:97:72:69:76:fe:6d:f6:74: d7:c0:f0:8c:ec:36:53:86:67:d1:4e:22:41:c2:2d:6a:e5:9e: 29:2c:3a:d5:8f:8a:7a:10:e1:fa:6c:23:b2:55:e3:f3:c7:75: f9:d7:c4:79:09:ee:47:a2:be:d5:d2:92:9b:53:eb:02:b3:6a: a9:95:19:68:7d:7c:5f:d3:93:76:ff:4f:77:ae:28:56:dd:a4: 7f:7c:6b:d6 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRTEz QUNDRjdFNzdCMDI5MkFFMTdCMDUzNDAyMTFDOEY5NzE3NjBCMB4XDTI1MDUxNTAx Mzg1OFoXDTI2MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoQTE1NzJFNjA1OUFBNTkw NjBFODFBNzk1ODUwREEyRjAwN0MxM0FBNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK4pO/SM1wQlR+0NRGU+hVRImg63TDxaLjt7Laq/uCQBFn57dfqa Nm1eR4TXRaLiYBQgGiwLp3cDCLO5/DIDJiMu3ePo7fnP8J//8n3Q6Fe6vAMF1Hyv wTLt+7LPAfE5WKuqbd9NVnmJr3o3RLR8eB4wZnXTznP+Ey+wOg/iKKoU+JdmeMwv VolrWPgVJMfxL98RN6OsgEgduKRN+//MJzQfxLLvLOVjtO0wXqwLijjJyKwi67JD pBh9pc+WN+SzV1SFo5jnBKQTaXSLJClL+inzwB+YbAeWzJDUNRSq8vHZOAfTH05X shpGyK0+roiN+TaIhRyrxg49f/b074dPOK0CAwEAAaOCAj0wggI5MB0GA1UdDgQW BBShVy5gWapZBg6Bp5WFDaLwB8E6pDAfBgNVHSMEGDAWgBTuE6zPfnewKSrhewU0 AhHI+XF2CzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTI0LzdoT3N6MzUzc0NrcTRYc0ZOQUlSeVBseGRncy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzdoT3N6MzUzc0NrcTRYc0ZOQUlSeVBs eGRncy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MjQvN2hPc3ozNTNzQ2txNFhzRk5BSVJ5UGx4ZGdzLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIryIynIPywR8zdlUXGcpGTyK36pPfqWQgdK1Yr81jCx5oOz9ebxu2CT3jUQ jlEtDtrOnEaoZqc5VUAk7+6fhtkMdqaTTicx1gs9+a+BDxVXGpes7t+97DzXSRmB yF6E+qEveB5n1V3vfx8x13xRVExSuK0ltWgzAWfRh/uTADWectJSyIwDKgp3vEkN lQNokKK055N4qPEkdiMWC6fTMj/X0Joen16Dhmt0f4iXcml2/m32dNfA8IzsNlOG Z9FOIkHCLWrlniksOtWPinoQ4fpsI7JV4/PHdfnXxHkJ7keivtXSkptT6wKzaqmV GWh9fF/Tk3b/T3euKFbdpH98a9Y= -----END CERTIFICATE-----Generated at Sat May 17 21:27:11 2025 by rpki-client