$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/F3jmsXYyXAXzoXzX2qEn9gLOWgE.cer File: F3jmsXYyXAXzoXzX2qEn9gLOWgE.cer (raw, json) Hash identifier: zWUulVF6GSdFvrXrcS5TrksV5K4Re8PZlo7/wTksQik= Subject key identifier: 17:78:E6:B1:76:32:5C:05:F3:A1:7C:D7:DA:A1:27:F6:02:CE:5A:01 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 6F16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30022/F3jmsXYyXAXzoXzX2qEn9gLOWgE.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30022/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Sat 15 Aug 2026 01:32:07 +0000 Certificate not after: Sun 15 Aug 2027 01:30:02 +0000 Subordinate resources: IP: 2001:278::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28438 (0x6f16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Aug 15 01:32:07 2026 GMT Not After : Aug 15 01:30:02 2027 GMT Subject: CN=1778E6B176325C05F3A17CD7DAA127F602CE5A01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d7:a1:58:52:a9:f6:1a:20:f8:51:d9:69:a6: 8b:36:c4:2d:4d:f8:82:cb:2d:c3:4d:d0:ba:3e:86: db:aa:26:d1:d4:09:37:f0:04:ed:a0:7b:17:c2:0f: 5b:e2:a3:b4:9c:85:39:c5:d2:07:96:be:c3:6b:6a: 2b:7a:55:d8:ed:ee:cd:3b:56:14:42:71:c9:5b:5c: 78:44:c9:24:c9:20:b7:99:0e:39:35:da:9a:cd:41: c8:20:2b:7b:94:8f:ad:f9:f7:fd:dc:5b:de:ce:f3: 75:7f:dc:3c:d7:bd:79:48:6f:df:9c:6c:40:b7:8b: c7:dc:58:55:2c:1b:5b:31:bf:f4:d7:20:fc:47:be: 3a:3d:2b:d1:8e:10:ca:3f:ae:7d:36:cf:eb:8a:0b: 66:19:c8:bd:0e:9a:fd:75:e2:54:63:d6:09:53:02: b3:67:5e:ce:d9:9d:c8:bf:63:bc:28:4e:c6:28:fb: eb:b8:0a:df:a7:75:83:96:cd:bd:e0:ef:5d:29:2c: b9:65:6d:3c:b9:55:de:69:8b:7d:b3:e0:06:f1:0d: cf:45:1c:e4:c2:46:be:72:00:cf:ee:9c:a8:c7:fa: 9f:e4:0b:41:f0:50:38:05:21:3f:96:53:ff:bf:01: b5:9b:e9:71:70:9b:89:58:cc:a1:bc:3b:26:ab:d5: 5b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:78:E6:B1:76:32:5C:05:F3:A1:7C:D7:DA:A1:27:F6:02:CE:5A:01 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30022/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30022/F3jmsXYyXAXzoXzX2qEn9gLOWgE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:278::/32 Signature Algorithm: sha256WithRSAEncryption 85:68:02:2a:79:68:0f:cc:25:43:19:4d:75:a1:ac:e2:a1:a0: 4e:39:09:0f:47:12:14:3e:39:27:6c:a9:16:3f:a4:f5:35:1e: e5:f4:8c:cc:fc:4f:32:73:93:2d:35:e4:c1:95:68:94:f1:87: 5e:da:4a:aa:ab:bb:50:ff:06:e7:6f:ba:38:32:f8:c5:24:68: 7d:3d:55:90:05:f4:16:91:a1:93:de:bc:e0:46:c0:c4:48:cd: 20:48:89:e2:de:32:e6:ff:bf:26:4c:da:66:d7:63:58:0a:bd: c8:82:87:97:63:f1:64:ed:0a:99:bb:fe:8c:77:66:91:df:66: f9:b7:a1:0a:ef:7a:36:13:ef:64:c7:df:4e:0b:0a:5e:1c:c3: b9:70:9c:a7:96:0c:3d:51:7a:97:78:b1:05:dc:97:4e:9d:a2: 61:2e:45:7f:4a:45:71:8a:94:c7:17:01:2c:87:de:e9:63:6d: 85:13:77:1e:81:2c:1a:7b:ba:9e:4c:82:e4:eb:be:ed:ec:a8: 93:13:74:b8:5e:e2:a3:c3:89:ba:88:d7:1f:f9:6e:b3:c5:b6: bd:a7:01:1e:89:87:59:74:97:e6:1f:71:32:a2:87:50:df:86: 92:d8:d8:dd:23:84:6a:90:33:6b:9f:b2:e5:50:51:6e:36:71: fd:45:33:7c -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICbxYwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI2MDgxNTAxMzIwN1oXDTI3MDgxNTAxMzAwMlowMzEx MC8GA1UEAxMoMTc3OEU2QjE3NjMyNUMwNUYzQTE3Q0Q3REFBMTI3RjYwMkNFNUEw MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN3XoVhSqfYaIPhR2Wmm izbELU34gsstw03Quj6G26om0dQJN/AE7aB7F8IPW+KjtJyFOcXSB5a+w2tqK3pV 2O3uzTtWFEJxyVtceETJJMkgt5kOOTXams1ByCAre5SPrfn3/dxb3s7zdX/cPNe9 eUhv35xsQLeLx9xYVSwbWzG/9Ncg/Ee+Oj0r0Y4Qyj+ufTbP64oLZhnIvQ6a/XXi VGPWCVMCs2deztmdyL9jvChOxij767gK36d1g5bNveDvXSksuWVtPLlV3mmLfbPg BvENz0Uc5MJGvnIAz+6cqMf6n+QLQfBQOAUhP5ZT/78BtZvpcXCbiVjMobw7JqvV W/cCAwEAAaOCAowwggKIMB0GA1UdDgQWBBQXeOaxdjJcBfOhfNfaoSf2As5aATAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAwMjIvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMDIyL0Yz am1zWFl5WEFYem9YelgycUVuOWdMT1dnRS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQJ4MA0GCSqGSIb3 DQEBCwUAA4IBAQCFaAIqeWgPzCVDGU11oazioaBOOQkPRxIUPjknbKkWP6T1NR7l 9IzM/E8yc5MtNeTBlWiU8Yde2kqqq7tQ/wbnb7o4MvjFJGh9PVWQBfQWkaGT3rzg RsDESM0gSIni3jLm/78mTNpm12NYCr3IgoeXY/Fk7QqZu/6Md2aR32b5t6EK73o2 E+9kx99OCwpeHMO5cJynlgw9UXqXeLEF3JdOnaJhLkV/SkVxipTHFwEsh97pY22F E3cegSwae7qeTILk677t7KiTE3S4XuKjw4m6iNcf+W6zxba9pwEeiYdZdJfmH3Ey oodQ34aS2NjdI4RqkDNrn7LlUFFuNnH9RTN8 -----END CERTIFICATE-----Generated at Fri Aug 21 23:56:38 2026 by rpki-client