$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft File: PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft (raw, json) Hash identifier: 2nTxc9uO9qMJHfreXEd/zUJv6ySOBkClS9FkQAUaa0c= Subject key identifier: 57:37:37:23:6B:69:B1:52:16:37:DB:F5:F1:8D:18:F1:4F:88:71:04 Authority key identifier: 3C:26:7D:02:8F:D9:9C:61:3E:3A:6F:42:54:15:D7:DB:7F:CD:1D:4A Certificate issuer: /CN=3C267D028FD99C613E3A6F425415D7DB7FCD1D4A Certificate serial: 27 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft Manifest number: 0480 Signing time: Mon 28 Apr 2025 20:09:57 +0000 Manifest this update: Mon 28 Apr 2025 20:09:57 +0000 Manifest next update: Tue 13 May 2025 20:09:57 +0000 Files and hashes: 1: F4_6mMGK-HTepssz1B8N-bnlse0.roa (hash: axV7ZGLQ7OOMyJT4G1Pv+HssyML+VnNx/zerJPxUQl8=) 2: PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.crl (hash: Uin9QIcNUkbMOHqnLQyo7CuOXM+r1lAv2i5FrouwQac=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C267D028FD99C613E3A6F425415D7DB7FCD1D4A Validity Not Before: Apr 15 01:38:00 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=573737236B69B1521637DBF5F18D18F14F887104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a9:a1:5f:6c:fd:2e:5f:07:b4:71:68:91:4c: 6b:64:ee:2e:28:8d:d7:6b:21:84:af:df:bc:9c:5f: 01:98:fa:c8:92:07:ab:01:22:66:97:63:22:9a:a4: 8b:2e:38:df:24:85:e3:81:3c:9d:56:87:e5:fd:33: 11:df:23:fb:6f:26:48:e5:3e:03:8b:71:c9:ad:40: 76:8b:a6:49:06:4d:2b:1f:7d:14:69:a5:5b:8b:68: 44:30:42:fc:48:ec:1b:7a:9a:c2:06:ab:50:1f:f0: 25:37:ce:1f:f6:17:e8:97:07:2a:71:ae:d6:b8:3d: 9b:ea:67:25:19:3c:0f:f0:78:c8:37:43:0b:ab:bb: 0f:ff:c3:bf:66:f1:09:c4:ef:f7:c9:d7:25:be:9b: 0b:66:fc:a2:5a:8b:3c:ca:d9:80:50:25:a7:00:2d: 00:f0:52:d2:0a:e8:35:bd:be:11:5e:03:01:b9:cc: 48:1f:36:73:d0:06:c8:b5:20:d3:ea:54:43:e6:e2: 05:6b:f8:48:41:37:39:56:75:7a:b6:86:31:60:d0: c8:74:92:f4:45:20:12:a8:00:40:22:a1:de:4f:82: 5e:d8:e4:f4:6c:57:19:2d:2b:a0:d9:36:9f:ee:5c: c6:aa:e8:6b:1d:54:03:aa:fe:ad:f7:04:b9:7e:9d: b8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:37:37:23:6B:69:B1:52:16:37:DB:F5:F1:8D:18:F1:4F:88:71:04 X509v3 Authority Key Identifier: keyid:3C:26:7D:02:8F:D9:9C:61:3E:3A:6F:42:54:15:D7:DB:7F:CD:1D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:42:a0:ac:17:8d:a0:e4:d0:9b:c0:81:ae:c6:b5:3d:51:ec: ef:0d:c9:bf:8e:d1:ca:f0:69:d8:79:62:15:9c:9d:92:67:27: 34:f9:e4:95:28:f5:bb:fc:c5:f7:ab:51:7c:6e:55:b2:f9:48: 38:df:db:97:0b:b8:a0:a0:52:9c:ab:23:b7:47:de:46:97:b5: 95:27:9c:16:18:95:f5:03:1d:54:b8:4d:fd:a5:d7:88:22:14: 14:bc:9f:75:68:b1:e2:e8:db:c2:3f:2e:fa:fd:27:97:79:1f: f5:15:42:a6:37:d7:55:a2:39:f2:30:cb:3b:4f:57:0c:ff:23: 1f:3f:02:97:55:90:d4:8a:1f:ec:3b:eb:06:b8:10:32:56:c5: 72:eb:03:42:b7:ea:e2:99:af:9a:50:b8:de:37:32:69:c1:c9: 44:30:f5:3b:66:e7:63:d4:13:4d:19:93:47:38:d9:e5:b2:87: 3c:e3:50:16:48:49:30:c1:8c:72:b0:47:7c:e5:ef:de:d2:ae: 70:fa:63:9f:35:54:be:99:1f:e6:3a:93:b2:ad:76:59:b9:1c: 9b:32:1f:59:e4:22:a8:3c:20:90:0d:fd:1c:b5:2c:bb:17:84: e7:b3:8f:0b:bb:1e:2f:bb:ab:b6:cb:84:0a:f7:c5:7e:ca:41: 49:22:34:a3 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQzI2 N0QwMjhGRDk5QzYxM0UzQTZGNDI1NDE1RDdEQjdGQ0QxRDRBMB4XDTI1MDQxNTAx MzgwMFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoNTczNzM3MjM2QjY5QjE1 MjE2MzdEQkY1RjE4RDE4RjE0Rjg4NzEwNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM6poV9s/S5fB7RxaJFMa2TuLiiN12shhK/fvJxfAZj6yJIHqwEi ZpdjIpqkiy443ySF44E8nVaH5f0zEd8j+28mSOU+A4txya1AdoumSQZNKx99FGml W4toRDBC/EjsG3qawgarUB/wJTfOH/YX6JcHKnGu1rg9m+pnJRk8D/B4yDdDC6u7 D//Dv2bxCcTv98nXJb6bC2b8olqLPMrZgFAlpwAtAPBS0groNb2+EV4DAbnMSB82 c9AGyLUg0+pUQ+biBWv4SEE3OVZ1eraGMWDQyHSS9EUgEqgAQCKh3k+CXtjk9GxX GS0roNk2n+5cxqroax1UA6r+rfcEuX6duEECAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRXNzcja2mxUhY32/XxjRjxT4hxBDAfBgNVHSMEGDAWgBQ8Jn0Cj9mcYT46b0JU Fdfbf80dSjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyNDUvUENaOUFvX1puR0UtT205Q1ZCWFgyM19OSFVvLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvUENaOUFvX1puR0UtT205Q1ZCWFgy M19OSFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjQ1L1BDWjlBb19abkdFLU9tOUNWQlhYMjNfTkhVby5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEQqCsF42g5NCbwIGuxrU9UezvDcm/jtHK8GnYeWIVnJ2SZyc0+eSV KPW7/MX3q1F8blWy+Ug439uXC7igoFKcqyO3R95Gl7WVJ5wWGJX1Ax1UuE39pdeI IhQUvJ91aLHi6NvCPy76/SeXeR/1FUKmN9dVojnyMMs7T1cM/yMfPwKXVZDUih/s O+sGuBAyVsVy6wNCt+rima+aULjeNzJpwclEMPU7Zudj1BNNGZNHONnlsoc841AW SEkwwYxysEd85e/e0q5w+mOfNVS+mR/mOpOyrXZZuRybMh9Z5CKoPCCQDf0ctSy7 F4Tns48Lux4vu6u2y4QK98V+ykFJIjSj -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:31 2025 by rpki-client on console.sobornost.net