$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/mANcHrYe2O7xU9jzK9oTva10LsU.cer File: mANcHrYe2O7xU9jzK9oTva10LsU.cer (raw, json) Hash identifier: Yr8SKsWau3ByBODEtV5bgifoysPy9KgvRoFf3e6GKpw= Subject key identifier: 98:03:5C:1E:B6:1E:D8:EE:F1:53:D8:F3:2B:DA:13:BD:AD:74:2E:C5 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 3005 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/mANcHrYe2O7xU9jzK9oTva10LsU.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Wed 15 May 2024 01:35:49 +0000 Certificate not after: Thu 15 May 2025 01:30:03 +0000 Subordinate resources: IP: 2402:2840::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12293 (0x3005) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 15 01:35:49 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=98035C1EB61ED8EEF153D8F32BDA13BDAD742EC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f3:3a:0a:d1:92:e9:29:b0:71:54:4e:f9:ec: 89:04:4c:74:00:4e:75:92:6e:61:de:0f:85:c5:b2: a6:cd:fa:31:5e:94:d2:53:9f:ba:22:90:1e:39:16: fe:0e:6b:e5:64:1b:04:24:ff:46:77:3b:ae:df:54: 78:4e:58:57:67:25:31:39:a7:71:67:95:a6:40:55: 13:fa:9e:db:ab:55:da:a8:16:68:0f:eb:d2:67:ed: dd:a8:14:d1:d2:81:82:db:8d:23:57:48:eb:27:8e: 5c:59:7d:c8:9d:4d:86:08:1f:34:fd:9a:b9:b3:b2: 7e:82:e7:a6:1f:9d:ae:5b:b7:ec:d0:a8:9f:e5:22: fe:b7:71:4d:19:c0:dc:36:b1:84:b4:0b:3f:d9:26: 63:c3:93:d6:cc:05:f2:e4:a5:c9:aa:30:12:0e:d0: 6b:b6:3e:26:8b:c2:d2:11:6c:41:27:24:9f:be:7a: 1e:49:77:21:7f:4f:6a:fe:a7:e9:47:20:41:83:b1: ed:ba:c3:21:e0:6a:9d:b5:4c:08:96:7a:cc:bb:26: 51:8a:01:80:98:54:49:5d:db:c1:ca:8e:00:6d:3f: b5:6d:06:28:3c:21:59:73:84:0b:55:3b:cc:b5:a6: 62:6f:36:5d:43:3a:22:a6:2c:3a:e4:41:7a:e2:e1: 49:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:03:5C:1E:B6:1E:D8:EE:F1:53:D8:F3:2B:DA:13:BD:AD:74:2E:C5 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/mANcHrYe2O7xU9jzK9oTva10LsU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:2840::/32 Signature Algorithm: sha256WithRSAEncryption 97:88:3b:48:fe:2b:06:2a:26:a7:ec:79:a4:b2:e6:5a:8e:90: 74:e8:ac:a2:c6:1b:de:30:70:3f:7d:cc:0e:e0:eb:f3:17:9c: 82:6d:0c:02:42:2d:56:d2:3b:ae:78:43:8a:41:dc:47:f8:a5: 8f:5e:b9:0f:eb:7b:5d:75:2a:88:64:87:8d:9c:86:5b:7b:3c: a1:d3:61:1d:a5:7c:08:9d:40:8a:4f:8a:c5:cf:f6:00:5b:d0: 42:52:93:07:92:2b:8c:46:ed:54:ae:e5:d4:c2:27:d7:4b:73: 47:bc:5c:93:a4:20:2d:08:43:36:de:dc:10:e7:de:20:04:cc: ce:86:7e:28:11:97:7d:19:3a:b9:84:9d:88:dc:16:f7:97:ca: 0c:f1:1e:75:98:42:61:7a:15:42:81:6f:3e:b0:8e:4f:c3:5e: 64:f0:e9:c8:04:54:82:ad:f2:40:08:01:30:d0:2d:7e:1e:a6: 6a:c9:93:9a:91:d5:9c:b0:b2:5e:f8:bd:1a:46:51:9d:10:61: 1f:75:d8:b5:d7:30:18:1a:f4:e7:52:3d:34:1e:81:1d:74:0f: 65:90:63:25:d9:c9:f0:82:6f:5b:f7:1d:0e:91:51:4f:d7:49: 1b:7f:ce:93:5e:3b:d9:01:f0:b0:f8:6f:32:8e:bd:63:12:cf: ad:38:2d:55 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICMAUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MDUxNTAxMzU0OVoXDTI1MDUxNTAxMzAwM1owMzEx MC8GA1UEAxMoOTgwMzVDMUVCNjFFRDhFRUYxNTNEOEYzMkJEQTEzQkRBRDc0MkVD NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKjzOgrRkukpsHFUTvns iQRMdABOdZJuYd4PhcWyps36MV6U0lOfuiKQHjkW/g5r5WQbBCT/Rnc7rt9UeE5Y V2clMTmncWeVpkBVE/qe26tV2qgWaA/r0mft3agU0dKBgtuNI1dI6yeOXFl9yJ1N hggfNP2aubOyfoLnph+drlu37NCon+Ui/rdxTRnA3DaxhLQLP9kmY8OT1swF8uSl yaowEg7Qa7Y+JovC0hFsQSckn756Hkl3IX9Pav6n6UcgQYOx7brDIeBqnbVMCJZ6 zLsmUYoBgJhUSV3bwcqOAG0/tW0GKDwhWXOEC1U7zLWmYm82XUM6IqYsOuRBeuLh Sb8CAwEAAaOCAowwggKIMB0GA1UdDgQWBBSYA1weth7Y7vFT2PMr2hO9rXQuxTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAzMTUvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMzE1L21B TmNIclllMk83eFU5anpLOW9UdmExMExzVS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAihAMA0GCSqGSIb3 DQEBCwUAA4IBAQCXiDtI/isGKian7HmksuZajpB06KyixhveMHA/fcwO4OvzF5yC bQwCQi1W0juueEOKQdxH+KWPXrkP63tddSqIZIeNnIZbezyh02EdpXwInUCKT4rF z/YAW9BCUpMHkiuMRu1UruXUwifXS3NHvFyTpCAtCEM23twQ594gBMzOhn4oEZd9 GTq5hJ2I3Bb3l8oM8R51mEJhehVCgW8+sI5Pw15k8OnIBFSCrfJACAEw0C1+HqZq yZOakdWcsLJe+L0aRlGdEGEfddi11zAYGvTnUj00HoEddA9lkGMl2cnwgm9b9x0O kVFP10kbf86TXjvZAfCw+G8yjr1jEs+tOC1V -----END CERTIFICATE-----Generated at Fri May 17 01:06:28 2024 by rpki-client on console-fra.rpki-client.org