$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/mANcHrYe2O7xU9jzK9oTva10LsU.cer File: mANcHrYe2O7xU9jzK9oTva10LsU.cer (raw, json) Hash identifier: kUSAWlUXn6j+yXtdPPPXsEeFpcLpOUqBnrKbmqvZQqc= Subject key identifier: 98:03:5C:1E:B6:1E:D8:EE:F1:53:D8:F3:2B:DA:13:BD:AD:74:2E:C5 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 4A87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/mANcHrYe2O7xU9jzK9oTva10LsU.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Thu 15 May 2025 01:33:58 +0000 Certificate not after: Fri 15 May 2026 01:30:03 +0000 Subordinate resources: IP: 2402:2840::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 15:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19079 (0x4a87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 15 01:33:58 2025 GMT Not After : May 15 01:30:03 2026 GMT Subject: CN=98035C1EB61ED8EEF153D8F32BDA13BDAD742EC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f3:3a:0a:d1:92:e9:29:b0:71:54:4e:f9:ec: 89:04:4c:74:00:4e:75:92:6e:61:de:0f:85:c5:b2: a6:cd:fa:31:5e:94:d2:53:9f:ba:22:90:1e:39:16: fe:0e:6b:e5:64:1b:04:24:ff:46:77:3b:ae:df:54: 78:4e:58:57:67:25:31:39:a7:71:67:95:a6:40:55: 13:fa:9e:db:ab:55:da:a8:16:68:0f:eb:d2:67:ed: dd:a8:14:d1:d2:81:82:db:8d:23:57:48:eb:27:8e: 5c:59:7d:c8:9d:4d:86:08:1f:34:fd:9a:b9:b3:b2: 7e:82:e7:a6:1f:9d:ae:5b:b7:ec:d0:a8:9f:e5:22: fe:b7:71:4d:19:c0:dc:36:b1:84:b4:0b:3f:d9:26: 63:c3:93:d6:cc:05:f2:e4:a5:c9:aa:30:12:0e:d0: 6b:b6:3e:26:8b:c2:d2:11:6c:41:27:24:9f:be:7a: 1e:49:77:21:7f:4f:6a:fe:a7:e9:47:20:41:83:b1: ed:ba:c3:21:e0:6a:9d:b5:4c:08:96:7a:cc:bb:26: 51:8a:01:80:98:54:49:5d:db:c1:ca:8e:00:6d:3f: b5:6d:06:28:3c:21:59:73:84:0b:55:3b:cc:b5:a6: 62:6f:36:5d:43:3a:22:a6:2c:3a:e4:41:7a:e2:e1: 49:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:03:5C:1E:B6:1E:D8:EE:F1:53:D8:F3:2B:DA:13:BD:AD:74:2E:C5 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/mANcHrYe2O7xU9jzK9oTva10LsU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:2840::/32 Signature Algorithm: sha256WithRSAEncryption 34:b9:fd:4a:ee:49:c5:54:85:f9:b1:0a:f2:b0:05:64:a1:bb: 21:5e:e0:80:8b:38:f1:0d:18:bf:46:5c:5d:29:a4:50:16:d8: 65:d4:7f:a1:cb:8a:28:a9:e5:43:4d:00:ae:bf:06:3e:98:da: 75:49:1a:c1:25:83:74:96:e5:46:40:01:57:cb:15:e3:00:29: 8a:0a:2e:8d:43:62:a6:ba:6f:0d:60:e3:1c:bc:ce:25:dd:7a: 76:8d:89:01:ba:e1:95:21:f4:89:3f:3b:5e:dd:d5:af:a3:e6: f5:e0:fd:3c:37:b7:fb:94:db:45:20:57:3f:fc:7d:1e:72:a0: b0:e4:6e:22:6e:db:f7:3f:4c:08:89:a7:be:f3:64:2e:80:c9: 2b:78:4c:b5:a9:74:f5:5c:3f:04:ec:96:51:e1:81:04:f0:ea: 28:1f:1c:5a:a1:12:c6:cb:a0:dc:ee:7e:05:95:60:e3:bf:49: dd:b7:65:54:5b:fd:5c:34:5f:bf:8f:76:12:8d:da:74:13:fa: d1:0e:df:d1:4f:7f:a5:79:10:08:1e:51:9d:f5:99:77:6a:a9: 0d:f0:95:00:dc:d8:b7:e9:70:9a:f7:10:b4:d3:32:ca:67:61: c7:34:0d:65:57:88:31:61:e8:45:7a:e6:1e:12:e8:a3:f2:de: 02:3d:6c:fc -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICSocwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDUxNTAxMzM1OFoXDTI2MDUxNTAxMzAwM1owMzEx MC8GA1UEAxMoOTgwMzVDMUVCNjFFRDhFRUYxNTNEOEYzMkJEQTEzQkRBRDc0MkVD NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKjzOgrRkukpsHFUTvns iQRMdABOdZJuYd4PhcWyps36MV6U0lOfuiKQHjkW/g5r5WQbBCT/Rnc7rt9UeE5Y V2clMTmncWeVpkBVE/qe26tV2qgWaA/r0mft3agU0dKBgtuNI1dI6yeOXFl9yJ1N hggfNP2aubOyfoLnph+drlu37NCon+Ui/rdxTRnA3DaxhLQLP9kmY8OT1swF8uSl yaowEg7Qa7Y+JovC0hFsQSckn756Hkl3IX9Pav6n6UcgQYOx7brDIeBqnbVMCJZ6 zLsmUYoBgJhUSV3bwcqOAG0/tW0GKDwhWXOEC1U7zLWmYm82XUM6IqYsOuRBeuLh Sb8CAwEAAaOCAowwggKIMB0GA1UdDgQWBBSYA1weth7Y7vFT2PMr2hO9rXQuxTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAzMTUvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMzE1L21B TmNIclllMk83eFU5anpLOW9UdmExMExzVS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAihAMA0GCSqGSIb3 DQEBCwUAA4IBAQA0uf1K7knFVIX5sQrysAVkobshXuCAizjxDRi/RlxdKaRQFthl 1H+hy4ooqeVDTQCuvwY+mNp1SRrBJYN0luVGQAFXyxXjACmKCi6NQ2Kmum8NYOMc vM4l3Xp2jYkBuuGVIfSJPzte3dWvo+b14P08N7f7lNtFIFc//H0ecqCw5G4ibtv3 P0wIiae+82QugMkreEy1qXT1XD8E7JZR4YEE8OooHxxaoRLGy6Dc7n4FlWDjv0nd t2VUW/1cNF+/j3YSjdp0E/rRDt/RT3+leRAIHlGd9Zl3aqkN8JUA3Ni36XCa9xC0 0zLKZ2HHNA1lV4gxYehFeuYeEuij8t4CPWz8 -----END CERTIFICATE-----Generated at Sun May 18 17:41:41 2025 by rpki-client