$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/mANcHrYe2O7xU9jzK9oTva10LsU.cer File: mANcHrYe2O7xU9jzK9oTva10LsU.cer (raw, json) Hash identifier: UIH1f84Bzl8f73/isRGtP+9l1yn9DuaDtJLuZZ2A4YM= Subject key identifier: 98:03:5C:1E:B6:1E:D8:EE:F1:53:D8:F3:2B:DA:13:BD:AD:74:2E:C5 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 51E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/mANcHrYe2O7xU9jzK9oTva10LsU.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sun 15 Jun 2025 01:39:58 +0000 Certificate not after: Mon 15 Jun 2026 01:30:02 +0000 Subordinate resources: IP: 2402:2840::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20960 (0x51e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jun 15 01:39:58 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=98035C1EB61ED8EEF153D8F32BDA13BDAD742EC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f3:3a:0a:d1:92:e9:29:b0:71:54:4e:f9:ec: 89:04:4c:74:00:4e:75:92:6e:61:de:0f:85:c5:b2: a6:cd:fa:31:5e:94:d2:53:9f:ba:22:90:1e:39:16: fe:0e:6b:e5:64:1b:04:24:ff:46:77:3b:ae:df:54: 78:4e:58:57:67:25:31:39:a7:71:67:95:a6:40:55: 13:fa:9e:db:ab:55:da:a8:16:68:0f:eb:d2:67:ed: dd:a8:14:d1:d2:81:82:db:8d:23:57:48:eb:27:8e: 5c:59:7d:c8:9d:4d:86:08:1f:34:fd:9a:b9:b3:b2: 7e:82:e7:a6:1f:9d:ae:5b:b7:ec:d0:a8:9f:e5:22: fe:b7:71:4d:19:c0:dc:36:b1:84:b4:0b:3f:d9:26: 63:c3:93:d6:cc:05:f2:e4:a5:c9:aa:30:12:0e:d0: 6b:b6:3e:26:8b:c2:d2:11:6c:41:27:24:9f:be:7a: 1e:49:77:21:7f:4f:6a:fe:a7:e9:47:20:41:83:b1: ed:ba:c3:21:e0:6a:9d:b5:4c:08:96:7a:cc:bb:26: 51:8a:01:80:98:54:49:5d:db:c1:ca:8e:00:6d:3f: b5:6d:06:28:3c:21:59:73:84:0b:55:3b:cc:b5:a6: 62:6f:36:5d:43:3a:22:a6:2c:3a:e4:41:7a:e2:e1: 49:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:03:5C:1E:B6:1E:D8:EE:F1:53:D8:F3:2B:DA:13:BD:AD:74:2E:C5 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/mANcHrYe2O7xU9jzK9oTva10LsU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:2840::/32 Signature Algorithm: sha256WithRSAEncryption a5:c5:9a:f2:89:55:d7:ef:b8:25:39:f7:9f:82:6a:25:d7:c6: 28:f1:91:61:f9:50:31:b2:07:17:68:a6:76:31:33:51:43:a5: 1d:72:7e:32:d8:cb:59:3b:12:53:25:b6:83:2b:04:90:4d:ec: d4:cf:60:23:58:1f:36:f9:5f:ec:ea:57:51:40:15:c9:5e:58: c3:79:d9:f1:66:05:63:06:50:66:3e:4c:64:95:5d:a6:52:fc: 81:5a:75:27:cf:e2:27:06:14:fa:eb:f6:4c:4e:b6:d9:a5:f8: 40:e1:ac:1e:5f:34:74:2a:c8:84:6b:e4:57:99:87:fe:c5:b0: d2:e7:ea:10:45:03:5c:f7:2d:ac:c6:84:14:ab:9e:b5:ea:eb: cc:12:50:dc:65:5b:6b:ef:fa:03:5e:84:2b:95:72:aa:00:18: 7c:1b:a3:42:da:90:a4:1f:2b:ec:de:bc:22:bf:e0:53:e6:d9: ed:12:b6:c7:a6:da:fc:2c:8f:88:35:12:e8:93:1c:06:19:89: ab:10:3c:f9:eb:0b:67:37:76:ed:d4:d8:76:6a:84:83:eb:64: 0a:17:ee:e6:ce:66:00:3f:a4:3e:10:02:2a:31:99:eb:b1:4b: 41:4d:4c:9f:ec:a7:8a:fd:54:3e:1c:45:45:b5:42:ae:4e:f9: e1:e3:ec:0c -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICUeAwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDYxNTAxMzk1OFoXDTI2MDYxNTAxMzAwMlowMzEx MC8GA1UEAxMoOTgwMzVDMUVCNjFFRDhFRUYxNTNEOEYzMkJEQTEzQkRBRDc0MkVD NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKjzOgrRkukpsHFUTvns iQRMdABOdZJuYd4PhcWyps36MV6U0lOfuiKQHjkW/g5r5WQbBCT/Rnc7rt9UeE5Y V2clMTmncWeVpkBVE/qe26tV2qgWaA/r0mft3agU0dKBgtuNI1dI6yeOXFl9yJ1N hggfNP2aubOyfoLnph+drlu37NCon+Ui/rdxTRnA3DaxhLQLP9kmY8OT1swF8uSl yaowEg7Qa7Y+JovC0hFsQSckn756Hkl3IX9Pav6n6UcgQYOx7brDIeBqnbVMCJZ6 zLsmUYoBgJhUSV3bwcqOAG0/tW0GKDwhWXOEC1U7zLWmYm82XUM6IqYsOuRBeuLh Sb8CAwEAAaOCAowwggKIMB0GA1UdDgQWBBSYA1weth7Y7vFT2PMr2hO9rXQuxTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAzMTUvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMzE1L21B TmNIclllMk83eFU5anpLOW9UdmExMExzVS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAihAMA0GCSqGSIb3 DQEBCwUAA4IBAQClxZryiVXX77glOfefgmol18Yo8ZFh+VAxsgcXaKZ2MTNRQ6Ud cn4y2MtZOxJTJbaDKwSQTezUz2AjWB82+V/s6ldRQBXJXljDednxZgVjBlBmPkxk lV2mUvyBWnUnz+InBhT66/ZMTrbZpfhA4aweXzR0KsiEa+RXmYf+xbDS5+oQRQNc 9y2sxoQUq5616uvMElDcZVtr7/oDXoQrlXKqABh8G6NC2pCkHyvs3rwiv+BT5tnt ErbHptr8LI+INRLokxwGGYmrEDz56wtnN3bt1Nh2aoSD62QKF+7mzmYAP6Q+EAIq MZnrsUtBTUyf7KeK/VQ+HEVFtUKuTvnh4+wM -----END CERTIFICATE-----Generated at Fri Jul 4 08:39:00 2025 by rpki-client