$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.mft File: A3Bvo5uORU66HcPnP-3Iih5Ar3Q.mft (raw, json) Hash identifier: be6j3GXp37f05iHVl31tA9VH/+aJ6RqTB8PAdmipWQg= Subject key identifier: 43:53:63:2F:AD:C1:4A:FD:9D:9E:07:E8:A8:25:96:C0:A7:A5:5E:5D Authority key identifier: 03:70:6F:A3:9B:8E:45:4E:BA:1D:C3:E7:3F:ED:C8:8A:1E:40:AF:74 Certificate issuer: /CN=03706FA39B8E454EBA1DC3E73FEDC88A1E40AF74 Certificate serial: 11 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.mft Manifest number: 0424 Signing time: Mon 28 Apr 2025 19:54:30 +0000 Manifest this update: Mon 28 Apr 2025 19:54:30 +0000 Manifest next update: Tue 13 May 2025 19:54:30 +0000 Files and hashes: 1: A3Bvo5uORU66HcPnP-3Iih5Ar3Q.crl (hash: 4M4Fia/ZjVzh+p/GYA3ELXrMddnbdaDCIL+lEt9VOhM=) 2: PFjStXjxQt6Q9iIjdUKIGUASIY0.roa (hash: w9ATA4UEM1s5HhSzQWK+VLQQbfEzNzqkivx7TWbLMvw=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03706FA39B8E454EBA1DC3E73FEDC88A1E40AF74 Validity Not Before: Apr 15 01:31:49 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=4353632FADC14AFD9D9E07E8A82596C0A7A55E5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:91:e5:b8:92:8f:96:ac:c7:e8:e2:61:ef:9a: c3:d8:43:10:3a:af:01:39:7c:5a:d8:49:d4:36:01: 6a:95:17:18:52:d0:e8:57:ed:80:d6:09:40:35:31: b0:6f:c1:84:c3:4f:aa:8e:03:46:d5:cc:2a:88:3c: fe:62:19:a8:62:be:f4:4d:7d:a4:e0:8c:e2:23:4a: b5:19:8c:a9:a7:35:46:27:91:1b:3b:19:d4:e6:7d: a4:a0:e1:cc:2c:12:c0:33:d3:70:a2:42:d9:d1:c7: ee:53:e2:d4:70:2d:f0:11:e1:3b:db:e8:46:b7:7b: ff:8a:53:b6:ee:79:d0:74:d0:36:8f:d4:65:4a:f2: 49:62:c3:61:fd:60:27:dc:5f:d3:39:81:68:77:34: ef:9f:5c:62:40:bf:9c:18:54:7f:d4:06:02:8a:ed: 11:00:14:5c:5f:1e:e1:35:c1:47:03:d5:38:18:c3: ea:c7:24:c5:85:8d:a5:f8:61:6f:34:3e:47:31:98: dd:9b:c4:00:cb:b8:ba:41:84:31:df:af:03:c7:df: ed:b5:15:be:b8:d0:a3:0f:09:5b:8d:a2:94:ad:5f: c5:19:83:b5:3d:8f:cc:9c:eb:d0:0e:5f:bc:b1:b8: 39:0d:5a:31:d7:b0:fe:51:ff:d8:11:d9:80:7d:83: 78:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:53:63:2F:AD:C1:4A:FD:9D:9E:07:E8:A8:25:96:C0:A7:A5:5E:5D X509v3 Authority Key Identifier: keyid:03:70:6F:A3:9B:8E:45:4E:BA:1D:C3:E7:3F:ED:C8:8A:1E:40:AF:74 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:12:0b:cc:0a:f8:91:52:65:87:a8:f7:da:7f:14:eb:55:ff: 53:76:78:9a:a7:f0:00:2b:00:6c:24:51:a9:9f:8f:9e:13:03: 72:5c:b4:67:18:0e:ef:b2:18:2e:86:17:25:e3:3d:4f:e4:54: a6:da:c5:a0:34:1f:19:c9:aa:0a:d0:18:c4:5d:d8:2f:22:7a: c2:3c:40:2e:c2:84:4e:44:44:eb:2a:68:6d:71:6c:b3:ca:74: ca:7c:a2:33:f0:ce:a3:80:27:a5:17:ea:b6:6d:61:d0:ad:63: b3:0b:5a:66:99:c7:22:f9:bf:a9:40:6c:1d:6c:86:06:e0:f0: e0:56:c4:9f:77:41:ae:e5:ae:6e:5b:e2:38:9c:e4:a9:1c:a0: 8d:35:e3:af:87:6b:5e:02:cb:0b:73:11:84:18:c6:74:78:a7: 54:3e:38:11:86:bc:0f:c1:e8:ea:2e:a0:fc:cc:76:b6:26:10: 3e:ee:51:fe:af:c8:0c:ca:fd:85:d3:7c:19:16:5f:d3:13:49: 72:a6:9e:95:cc:30:1f:80:b0:8f:22:f5:35:db:31:7c:88:75: 06:ad:d7:fa:91:0e:6c:3a:6a:1d:64:bd:da:68:ae:92:34:a2: 91:ee:4a:ca:49:2d:6c:d4:96:0c:ab:4b:96:4a:81:e3:de:27: d3:9a:d2:cd -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwMzcw NkZBMzlCOEU0NTRFQkExREMzRTczRkVEQzg4QTFFNDBBRjc0MB4XDTI1MDQxNTAx MzE0OVoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoNDM1MzYzMkZBREMxNEFG RDlEOUUwN0U4QTgyNTk2QzBBN0E1NUU1RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALmR5biSj5asx+jiYe+aw9hDEDqvATl8WthJ1DYBapUXGFLQ6Fft gNYJQDUxsG/BhMNPqo4DRtXMKog8/mIZqGK+9E19pOCM4iNKtRmMqac1RieRGzsZ 1OZ9pKDhzCwSwDPTcKJC2dHH7lPi1HAt8BHhO9voRrd7/4pTtu550HTQNo/UZUry SWLDYf1gJ9xf0zmBaHc0759cYkC/nBhUf9QGAortEQAUXF8e4TXBRwPVOBjD6sck xYWNpfhhbzQ+RzGY3ZvEAMu4ukGEMd+vA8ff7bUVvrjQow8JW42ilK1fxRmDtT2P zJzr0A5fvLG4OQ1aMdew/lH/2BHZgH2DeGECAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRDU2MvrcFK/Z2eB+ioJZbAp6VeXTAfBgNVHSMEGDAWgBQDcG+jm45FTrodw+c/ 7ciKHkCvdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyNTUvQTNCdm81dU9SVTY2SGNQblAtM0lpaDVBcjNRLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQTNCdm81dU9SVTY2SGNQblAtM0lp aDVBcjNRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMjU1L0EzQnZvNXVPUlU2NkhjUG5QLTNJaWg1QXIzUS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkEgvMCviRUmWHqPfafxTrVf9Tdniap/AAKwBsJFGpn4+eEwNyXLRn GA7vshguhhcl4z1P5FSm2sWgNB8ZyaoK0BjEXdgvInrCPEAuwoRORETrKmhtcWyz ynTKfKIz8M6jgCelF+q2bWHQrWOzC1pmmcci+b+pQGwdbIYG4PDgVsSfd0Gu5a5u W+I4nOSpHKCNNeOvh2teAssLcxGEGMZ0eKdUPjgRhrwPwejqLqD8zHa2JhA+7lH+ r8gMyv2F03wZFl/TE0lypp6VzDAfgLCPIvU12zF8iHUGrdf6kQ5sOmodZL3aaK6S NKKR7krKSS1s1JYMq0uWSoHj3ifTmtLN -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:14 2025 by rpki-client on console.sobornost.net