$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/158/DDDSD1aGuuqd0oV4siuy4eiUGYk.mft File: DDDSD1aGuuqd0oV4siuy4eiUGYk.mft (raw, json) Hash identifier: Ez4IdHk3ZK8ZkPhLwetZaMDFF35p+AmRZ6fTVaqHQQg= Subject key identifier: 22:CA:B7:49:DE:4E:59:7F:1C:94:A0:05:14:9D:51:B3:23:9F:71:69 Authority key identifier: 0C:30:D2:0F:56:86:BA:EA:9D:D2:85:78:B2:2B:B2:E1:E8:94:19:89 Certificate issuer: /CN=0C30D20F5686BAEA9DD28578B22BB2E1E8941989 Certificate serial: 13 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DDDSD1aGuuqd0oV4siuy4eiUGYk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/158/DDDSD1aGuuqd0oV4siuy4eiUGYk.mft Manifest number: 042B Signing time: Mon 28 Apr 2025 20:13:29 +0000 Manifest this update: Mon 28 Apr 2025 20:13:29 +0000 Manifest next update: Tue 13 May 2025 20:13:29 +0000 Files and hashes: 1: DDDSD1aGuuqd0oV4siuy4eiUGYk.crl (hash: 6Pk1pqRu5fM+gp3vGmQiVIvtCsnjF4X42oWzYrnDSDg=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/158/DDDSD1aGuuqd0oV4siuy4eiUGYk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/158/DDDSD1aGuuqd0oV4siuy4eiUGYk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DDDSD1aGuuqd0oV4siuy4eiUGYk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C30D20F5686BAEA9DD28578B22BB2E1E8941989 Validity Not Before: Apr 15 01:31:18 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=22CAB749DE4E597F1C94A005149D51B3239F7169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f7:60:09:3d:40:ca:45:e2:c9:9f:22:8c:28: 6e:f5:ae:e8:e4:b2:f7:32:7c:42:a9:01:77:56:0d: 80:d6:42:43:e4:d2:3f:6a:43:fd:cf:7d:e4:18:7a: c6:8d:1e:c5:65:e2:e5:ea:e7:1d:47:f4:80:a1:76: 32:2c:2f:b7:19:1d:8d:24:0a:d7:e6:e7:44:fb:5b: 87:08:f0:73:70:e6:7a:64:08:95:b0:0e:16:df:b2: 6f:76:e5:57:e8:77:d2:fd:0c:30:db:02:20:b7:99: b9:59:89:d3:59:d5:46:a7:c2:1e:19:e2:15:f1:04: 83:90:ae:ef:f0:b4:b5:73:b7:6a:00:21:6e:b3:4f: 26:85:a0:a1:66:9c:be:72:cc:d8:a0:b5:23:f3:62: 71:9b:db:2e:fb:9d:b0:d1:2e:87:d9:46:cf:3b:a2: ac:bb:df:71:d8:a6:7f:bd:45:6a:f6:8f:91:a9:4e: f5:f7:ab:ad:4b:1a:6c:e0:1f:49:9f:17:06:19:bb: b4:b3:a4:68:aa:e3:ba:d1:21:84:bb:e7:0c:e1:49: c0:cc:96:2c:b6:98:42:db:94:ad:57:a0:c8:ed:9d: 98:2f:e8:8a:76:36:1b:4d:12:8a:ae:14:18:be:de: 84:86:67:15:cf:27:b9:42:4a:c2:a4:0a:d3:c9:36: 89:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CA:B7:49:DE:4E:59:7F:1C:94:A0:05:14:9D:51:B3:23:9F:71:69 X509v3 Authority Key Identifier: keyid:0C:30:D2:0F:56:86:BA:EA:9D:D2:85:78:B2:2B:B2:E1:E8:94:19:89 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/158/DDDSD1aGuuqd0oV4siuy4eiUGYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DDDSD1aGuuqd0oV4siuy4eiUGYk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/158/DDDSD1aGuuqd0oV4siuy4eiUGYk.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:01:4c:e4:27:e0:1c:83:6d:31:f1:ad:c6:4f:94:86:4d:b0: b7:5d:30:f5:6f:79:ae:b0:28:c2:df:23:5a:81:22:37:fd:15: 61:fb:ba:d3:c5:5a:60:d1:36:e3:a0:5c:6b:fe:1c:c3:cf:78: 86:8f:34:e3:f3:5c:ff:3d:3b:44:8c:07:7a:67:c8:aa:8c:68: 40:ab:a2:31:a3:74:ae:5c:bf:76:2d:96:60:7e:20:38:85:b5: a6:ae:d7:89:47:53:f3:eb:4d:64:51:55:20:36:9a:bc:1e:09: 92:8d:54:b2:c7:c6:92:f1:83:1e:d7:35:57:ad:04:96:1c:76: 19:da:80:c0:9d:c9:8e:c0:ab:43:48:ae:bf:28:15:77:cb:1d: 56:85:dd:56:0a:3a:d1:12:63:e7:75:1c:51:bd:56:bd:f3:72: c8:bd:6e:46:04:df:18:93:e1:f3:d6:65:be:f3:d7:01:f7:cc: 0e:2f:5f:b8:9f:43:f8:5c:02:e2:5b:59:04:5d:80:45:5c:86: 4e:e1:54:1a:eb:06:1c:6a:34:83:68:f5:23:63:87:e3:61:2c: 34:bf:19:47:8a:a8:8c:c9:00:a9:3a:45:2d:85:f1:fb:34:e8: 42:6f:98:ff:2e:94:89:b7:8d:50:c4:14:e8:3a:0a:3c:31:df: d8:c2:b4:17 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwQzMw RDIwRjU2ODZCQUVBOUREMjg1NzhCMjJCQjJFMUU4OTQxOTg5MB4XDTI1MDQxNTAx MzExOFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMjJDQUI3NDlERTRFNTk3 RjFDOTRBMDA1MTQ5RDUxQjMyMzlGNzE2OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALr3YAk9QMpF4smfIowobvWu6OSy9zJ8QqkBd1YNgNZCQ+TSP2pD /c995Bh6xo0exWXi5ernHUf0gKF2MiwvtxkdjSQK1+bnRPtbhwjwc3DmemQIlbAO Ft+yb3blV+h30v0MMNsCILeZuVmJ01nVRqfCHhniFfEEg5Cu7/C0tXO3agAhbrNP JoWgoWacvnLM2KC1I/NicZvbLvudsNEuh9lGzzuirLvfcdimf71FavaPkalO9fer rUsabOAfSZ8XBhm7tLOkaKrjutEhhLvnDOFJwMyWLLaYQtuUrVegyO2dmC/oinY2 G00Siq4UGL7ehIZnFc8nuUJKwqQK08k2iR0CAwEAAaOCAj0wggI5MB0GA1UdDgQW BBQiyrdJ3k5ZfxyUoAUUnVGzI59xaTAfBgNVHSMEGDAWgBQMMNIPVoa66p3ShXiy K7Lh6JQZiTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTU4L0RERFNEMWFHdXVxZDBvVjRzaXV5NGVpVUdZay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RERFNEMWFHdXVxZDBvVjRzaXV5NGVp VUdZay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8xNTgvREREU0QxYUd1dXFkMG9WNHNpdXk0ZWlVR1lrLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFUBTOQn4ByDbTHxrcZPlIZNsLddMPVvea6wKMLfI1qBIjf9FWH7utPFWmDR NuOgXGv+HMPPeIaPNOPzXP89O0SMB3pnyKqMaECrojGjdK5cv3YtlmB+IDiFtaau 14lHU/PrTWRRVSA2mrweCZKNVLLHxpLxgx7XNVetBJYcdhnagMCdyY7Aq0NIrr8o FXfLHVaF3VYKOtESY+d1HFG9Vr3zcsi9bkYE3xiT4fPWZb7z1wH3zA4vX7ifQ/hc AuJbWQRdgEVchk7hVBrrBhxqNINo9SNjh+NhLDS/GUeKqIzJAKk6RS2F8fs06EJv mP8ulIm3jVDEFOg6Cjwx39jCtBc= -----END CERTIFICATE-----Generated at Mon Apr 28 22:50:58 2025 by rpki-client on console.sobornost.net