$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft File: KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft (raw, json) Hash identifier: JGrxYYh7WWwP+/oa9fco0p2JVo2CwXQXJpiIjEzfHIE= Subject key identifier: F9:AC:90:D3:EE:BB:83:9F:20:C6:52:E4:82:F6:A1:B5:B1:1D:92:96 Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4 Certificate issuer: /CN=296966DD720C30575F62D8FD4149458A90AACAA4 Certificate serial: 7A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft Manifest number: 0CB9 Signing time: Mon 28 Apr 2025 19:31:53 +0000 Manifest this update: Mon 28 Apr 2025 19:31:53 +0000 Manifest next update: Tue 13 May 2025 19:31:53 +0000 Files and hashes: 1: AOFhkipnxKTAp6Y0XGszOGLsf6E.roa (hash: x9h3xZpgrJWQRStm5lG5TxdPd5yqULuAs1H6X4b6nGs=) 2: BTEnNYsk8_F46nKQ0yGU1KdzAoQ.roa (hash: Gu9Euv8qQPFKbirJ2sdIn0U9waJ9P8x0vSmO5/F4VSI=) 3: KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl (hash: 0Y1vooIAYaaaKMJLNUQ55f/epu6aZna240CDoacs+oY=) 4: Z_AGdZv2-omGDoDuQZUwbdUTqIM.roa (hash: YETggOHUQiXlzsvPVdNDSv34DSUlbq9PKzuZt2AKyks=) 5: bIXoMTpvdXQOj9-okiT9I-xpoP8.roa (hash: EhZRk5GEmwRtI1iE4kDgGCw34Zy1QEf+6bQUuPIgLOM=) 6: q61pgXX-eUFqofO5ODK4ZSpgl1w.roa (hash: 8Zas3ZpE6/LGWrJPfo9jcS4S4UtoghFIXKcQjgQk10U=) 7: shcaRon1lwsJwBq4yOSy_I_7STg.roa (hash: BXY9dnOfYqiD7KG7KmpneYkhzR4OrPK0MeJf2q5BN0A=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4 Validity Not Before: Apr 15 01:34:49 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=F9AC90D3EEBB839F20C652E482F6A1B5B11D9296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:71:9c:e1:19:64:37:4c:1f:f0:7f:ef:10:dc: 0b:54:fb:cf:76:2c:da:5b:9f:2e:22:1b:24:09:4c: fa:cc:f4:1e:78:d2:76:43:b1:a8:cc:a7:58:f6:86: 22:48:39:e2:48:2d:fb:7f:cd:7d:a9:45:31:7b:b3: e2:17:d6:63:c6:59:04:ec:33:df:e3:7d:d2:4f:3e: e7:df:15:67:e1:df:1c:95:2f:a7:09:19:15:6c:68: 72:6e:22:a6:c2:95:74:eb:af:f8:c0:b5:86:58:95: bc:4d:47:9e:36:bd:e7:15:59:f4:9a:b6:71:05:33: f6:42:82:2c:3a:83:c4:d2:de:79:46:ef:4e:f0:cf: 73:40:fc:57:4c:fd:42:74:33:1a:a9:12:cb:1e:62: 22:19:bc:38:ff:a0:d7:1b:f8:fd:bf:70:52:f4:33: 06:79:52:e1:91:0a:fa:33:6b:a9:8a:78:af:bc:f4: c1:31:81:79:5b:32:7d:ae:b8:ec:84:5b:e8:8c:20: 99:cf:4c:04:f1:d6:0d:e3:f3:9d:54:9f:41:f4:51: 13:2a:0f:77:f3:07:f4:ad:7c:55:48:04:91:39:46: 79:37:d8:d2:52:8a:d0:01:58:b5:89:54:03:12:5d: 5b:d4:77:89:d4:9f:46:82:91:99:f2:db:5c:c1:6b: 8a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AC:90:D3:EE:BB:83:9F:20:C6:52:E4:82:F6:A1:B5:B1:1D:92:96 X509v3 Authority Key Identifier: keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:48:84:70:62:ae:44:49:fa:3b:38:2b:db:b7:72:b1:18:47: b0:f5:d4:45:fe:9c:79:54:b9:1a:0e:c2:a5:76:0a:67:82:0d: 50:7a:db:52:0f:86:48:97:18:3a:9c:9f:f5:fa:62:a2:56:d6: 93:f2:9b:d6:86:c4:6c:78:e3:6c:d0:48:d9:e8:3f:8a:99:7f: 90:79:a1:b4:a9:83:09:ee:04:2c:a1:ae:39:92:bd:3f:b0:75: 71:98:ad:e8:d5:c0:b2:d6:d4:fc:97:b3:45:bc:2b:7e:4c:f8: 88:62:b7:79:85:df:c5:bf:73:3a:34:ce:1a:15:fe:f1:7e:86: 50:8c:c5:11:79:4d:8e:60:a8:d2:c3:50:01:d6:39:01:d3:a4: 63:3d:1a:57:7c:8f:d9:06:47:69:ba:b4:34:1b:5c:d3:79:a8: 70:b9:95:23:2b:f1:bf:46:09:31:21:c6:0c:d4:40:46:7c:83: 22:83:a4:e6:a2:ef:32:04:fc:53:b6:ba:6e:c0:38:ad:77:56: 87:f0:98:8c:fa:44:10:08:de:11:a2:f5:e4:78:ff:8d:6e:d7: c1:00:bf:75:df:e6:41:ee:df:0e:00:4e:81:e2:20:57:af:28: b8:c0:2f:15:21:19:cb:84:b2:fd:8a:da:85:e2:fc:4e:dc:f0: d4:c4:af:2d -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIBejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTY5 NjZERDcyMEMzMDU3NUY2MkQ4RkQ0MTQ5NDU4QTkwQUFDQUE0MB4XDTI1MDQxNTAx MzQ0OVoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoRjlBQzkwRDNFRUJCODM5 RjIwQzY1MkU0ODJGNkExQjVCMTFEOTI5NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMpxnOEZZDdMH/B/7xDcC1T7z3Ys2lufLiIbJAlM+sz0HnjSdkOx qMynWPaGIkg54kgt+3/NfalFMXuz4hfWY8ZZBOwz3+N90k8+598VZ+HfHJUvpwkZ FWxocm4ipsKVdOuv+MC1hliVvE1Hnja95xVZ9Jq2cQUz9kKCLDqDxNLeeUbvTvDP c0D8V0z9QnQzGqkSyx5iIhm8OP+g1xv4/b9wUvQzBnlS4ZEK+jNrqYp4r7z0wTGB eVsyfa647IRb6Iwgmc9MBPHWDePznVSfQfRREyoPd/MH9K18VUgEkTlGeTfY0lKK 0AFYtYlUAxJdW9R3idSfRoKRmfLbXMFrimUCAwEAAaOCAjkwggI1MB0GA1UdDgQW BBT5rJDT7ruDnyDGUuSC9qG1sR2SljAfBgNVHSMEGDAWgBQpaWbdcgwwV19i2P1B SUWKkKrKpDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGA1UdHwRdMFswWaBX oFWGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNi9LV2xtM1hJTU1GZGZZdGo5UVVsRmlwQ3F5cVEuY3JsMG0GCCsGAQUF BwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmlj LmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9LV2xtM1hJTU1GZGZZdGo5UVVsRmlwQ3F5 cVEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuQYIKwYBBQUHAQsEgawwgakwXwYIKwYB BQUHMAuGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNi9LV2xtM1hJTU1GZGZZdGo5UVVsRmlwQ3F5cVEubWZ0MEYGCCsG AQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9h cC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA KkiEcGKuREn6Ozgr27dysRhHsPXURf6ceVS5Gg7CpXYKZ4INUHrbUg+GSJcYOpyf 9fpiolbWk/Kb1obEbHjjbNBI2eg/ipl/kHmhtKmDCe4ELKGuOZK9P7B1cZit6NXA stbU/JezRbwrfkz4iGK3eYXfxb9zOjTOGhX+8X6GUIzFEXlNjmCo0sNQAdY5AdOk Yz0aV3yP2QZHabq0NBtc03mocLmVIyvxv0YJMSHGDNRARnyDIoOk5qLvMgT8U7a6 bsA4rXdWh/CYjPpEEAjeEaL15Hj/jW7XwQC/dd/mQe7fDgBOgeIgV68ouMAvFSEZ y4Sy/YraheL8Ttzw1MSvLQ== -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:48 2025 by rpki-client on console.sobornost.net