$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.mft File: LdP9aL13TPnCuZ1nCtqcrZ-WOl0.mft (raw, json) Hash identifier: BIcWmtbwQ1nMGRPgJvCRYXrHkEzkQJ6kAdGQxZmwnNw= Subject key identifier: 33:85:C4:4C:DA:33:63:58:55:4B:17:E7:49:73:61:1D:1E:42:B5:BA Authority key identifier: 2D:D3:FD:68:BD:77:4C:F9:C2:B9:9D:67:0A:DA:9C:AD:9F:96:3A:5D Certificate issuer: /CN=2DD3FD68BD774CF9C2B99D670ADA9CAD9F963A5D Certificate serial: 20 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.mft Manifest number: 05D0 Signing time: Fri 04 Jul 2025 11:12:42 +0000 Manifest this update: Fri 04 Jul 2025 11:12:42 +0000 Manifest next update: Sat 19 Jul 2025 11:12:42 +0000 Files and hashes: 1: DMEf0IIjrT74nFhO8l7gBjiueK8.roa (hash: HZ7NjnweAew9fmnmjyFFgAFKL2Pz9rbKIYpHkInwCbE=) 2: LdP9aL13TPnCuZ1nCtqcrZ-WOl0.crl (hash: O07xwjE1UEvTHCvzpggnM6Rw8SDL69iB35zOK7ln9EA=) 3: s0LosKfW7jmX5MAUsgzpm6c9LPs.roa (hash: qJmx5/b8f+9aqYP9y2iDnRMDDo41zen5wYcNbyAK2QM=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DD3FD68BD774CF9C2B99D670ADA9CAD9F963A5D Validity Not Before: Jun 15 01:36:08 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=3385C44CDA336358554B17E74973611D1E42B5BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a7:26:76:a0:92:e8:ee:48:3e:a1:6c:64:b7: b2:03:ff:56:04:ed:8c:99:d4:2b:e9:a6:12:ac:39: a4:e3:cd:c9:e5:5b:d9:c7:54:b7:58:ea:bf:58:71: 86:b6:89:39:54:5c:95:89:cc:eb:73:cf:c5:cc:a3: b2:e7:7d:71:f0:f7:3d:a7:90:29:33:9c:cb:2b:fb: bb:cb:02:12:b5:75:31:a8:ac:14:4f:aa:bc:82:1b: a3:96:98:da:3c:4a:36:fd:91:a9:1d:6d:e1:c1:f8: 20:ec:28:5e:b4:4d:eb:57:d8:98:f8:ab:11:80:aa: 87:05:ec:16:da:11:ea:e0:ac:d1:8d:33:2d:3c:5f: b5:6e:55:9d:64:2a:f8:d3:a5:b2:8d:02:07:a3:77: 95:f2:05:08:e9:c6:88:92:ef:ed:7d:b8:e1:4d:b3: 51:ad:05:a1:42:0e:4b:d7:dc:dd:9f:6f:08:dc:20: e4:3e:ae:cb:a6:68:49:62:f6:4f:88:90:84:97:bc: 0d:0f:4b:d2:41:c2:90:55:a7:6c:d7:9b:6e:87:35: 75:0c:96:d8:89:c8:a9:2f:93:ce:4d:b7:30:ee:fe: 44:77:55:37:ad:a1:42:ba:2b:ae:00:8a:0b:5d:b5: 61:ad:f1:44:be:48:d5:5a:5f:4e:7a:d8:b7:47:27: 56:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:85:C4:4C:DA:33:63:58:55:4B:17:E7:49:73:61:1D:1E:42:B5:BA X509v3 Authority Key Identifier: keyid:2D:D3:FD:68:BD:77:4C:F9:C2:B9:9D:67:0A:DA:9C:AD:9F:96:3A:5D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:38:bb:4f:52:a1:c2:93:f8:f2:11:46:aa:22:8c:63:4d:bb: 9b:d8:41:a4:d6:36:1a:37:94:9d:a0:48:79:34:98:40:dc:f9: 48:3a:a0:69:3f:bf:fa:7c:4d:9d:43:0f:80:82:82:4c:35:ab: fe:28:e9:50:eb:6b:b8:56:36:33:a4:e5:af:ea:9d:bc:50:ff: cd:06:0e:b5:3c:93:aa:e6:1a:28:e7:e5:93:d9:14:8c:66:af: 4d:59:65:28:0a:bf:a8:0f:f6:03:74:11:94:39:22:2b:59:d8: 02:44:2f:b2:46:82:b3:c2:a8:f6:96:6d:7b:70:3f:e5:55:fd: e6:19:71:67:16:2d:bd:bd:bc:3d:eb:b4:e3:cb:8a:5e:b1:35: d8:6c:3a:bd:7d:b3:bb:63:12:f5:48:f0:1e:5f:88:b2:1e:76: 11:d1:66:66:45:e8:d9:0c:10:28:a8:27:36:5c:84:0b:59:f3: 9c:a7:b4:5a:8d:fa:47:cf:39:e6:4f:f3:86:72:f3:1b:07:9a: a8:0d:8a:57:de:b0:a6:2d:53:d5:8f:d2:d9:09:ee:9e:ad:92: fb:35:d5:30:78:f4:d2:bf:77:36:99:14:3b:44:89:ca:ca:6c: 2f:c0:9a:22:b2:1a:74:9f:ef:37:94:c6:b8:74:86:8b:3e:1a: 64:a2:ee:34 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyREQz RkQ2OEJENzc0Q0Y5QzJCOTlENjcwQURBOUNBRDlGOTYzQTVEMB4XDTI1MDYxNTAx MzYwOFoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoMzM4NUM0NENEQTMzNjM1 ODU1NEIxN0U3NDk3MzYxMUQxRTQyQjVCQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAManJnagkujuSD6hbGS3sgP/VgTtjJnUK+mmEqw5pOPNyeVb2cdU t1jqv1hxhraJOVRclYnM63PPxcyjsud9cfD3PaeQKTOcyyv7u8sCErV1MaisFE+q vIIbo5aY2jxKNv2RqR1t4cH4IOwoXrRN61fYmPirEYCqhwXsFtoR6uCs0Y0zLTxf tW5VnWQq+NOlso0CB6N3lfIFCOnGiJLv7X244U2zUa0FoUIOS9fc3Z9vCNwg5D6u y6ZoSWL2T4iQhJe8DQ9L0kHCkFWnbNebboc1dQyW2InIqS+Tzk23MO7+RHdVN62h QrorrgCKC121Ya3xRL5I1VpfTnrYt0cnVq8CAwEAAaOCAj0wggI5MB0GA1UdDgQW BBQzhcRM2jNjWFVLF+dJc2EdHkK1ujAfBgNVHSMEGDAWgBQt0/1ovXdM+cK5nWcK 2pytn5Y6XTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjk0L0xkUDlhTDEzVFBuQ3VaMW5DdHFjclotV09sMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0xkUDlhTDEzVFBuQ3VaMW5DdHFjclot V09sMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82OTQvTGRQOWFMMTNUUG5DdVoxbkN0cWNyWi1XT2wwLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGw4u09SocKT+PIRRqoijGNNu5vYQaTWNho3lJ2gSHk0mEDc+Ug6oGk/v/p8 TZ1DD4CCgkw1q/4o6VDra7hWNjOk5a/qnbxQ/80GDrU8k6rmGijn5ZPZFIxmr01Z ZSgKv6gP9gN0EZQ5IitZ2AJEL7JGgrPCqPaWbXtwP+VV/eYZcWcWLb29vD3rtOPL il6xNdhsOr19s7tjEvVI8B5fiLIedhHRZmZF6NkMECioJzZchAtZ85yntFqN+kfP OeZP84Zy8xsHmqgNilfesKYtU9WP0tkJ7p6tkvs11TB49NK/dzaZFDtEicrKbC/A miKyGnSf7zeUxrh0hos+GmSi7jQ= -----END CERTIFICATE-----Generated at Fri Jul 4 16:02:57 2025 by rpki-client