$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/mANcHrYe2O7xU9jzK9oTva10LsU.cer File: mANcHrYe2O7xU9jzK9oTva10LsU.cer (raw, json) Hash identifier: ZYnz0VF2LCslmOPVv3SRozr9/vyiY2FrYd2YfN1xtuE= Subject key identifier: 98:03:5C:1E:B6:1E:D8:EE:F1:53:D8:F3:2B:DA:13:BD:AD:74:2E:C5 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 4F94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/mANcHrYe2O7xU9jzK9oTva10LsU.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 23 May 2025 09:59:25 +0000 Certificate not after: Sat 23 May 2026 09:51:00 +0000 Subordinate resources: IP: 2402:2840::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20372 (0x4f94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: May 23 09:59:25 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=98035C1EB61ED8EEF153D8F32BDA13BDAD742EC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f3:3a:0a:d1:92:e9:29:b0:71:54:4e:f9:ec: 89:04:4c:74:00:4e:75:92:6e:61:de:0f:85:c5:b2: a6:cd:fa:31:5e:94:d2:53:9f:ba:22:90:1e:39:16: fe:0e:6b:e5:64:1b:04:24:ff:46:77:3b:ae:df:54: 78:4e:58:57:67:25:31:39:a7:71:67:95:a6:40:55: 13:fa:9e:db:ab:55:da:a8:16:68:0f:eb:d2:67:ed: dd:a8:14:d1:d2:81:82:db:8d:23:57:48:eb:27:8e: 5c:59:7d:c8:9d:4d:86:08:1f:34:fd:9a:b9:b3:b2: 7e:82:e7:a6:1f:9d:ae:5b:b7:ec:d0:a8:9f:e5:22: fe:b7:71:4d:19:c0:dc:36:b1:84:b4:0b:3f:d9:26: 63:c3:93:d6:cc:05:f2:e4:a5:c9:aa:30:12:0e:d0: 6b:b6:3e:26:8b:c2:d2:11:6c:41:27:24:9f:be:7a: 1e:49:77:21:7f:4f:6a:fe:a7:e9:47:20:41:83:b1: ed:ba:c3:21:e0:6a:9d:b5:4c:08:96:7a:cc:bb:26: 51:8a:01:80:98:54:49:5d:db:c1:ca:8e:00:6d:3f: b5:6d:06:28:3c:21:59:73:84:0b:55:3b:cc:b5:a6: 62:6f:36:5d:43:3a:22:a6:2c:3a:e4:41:7a:e2:e1: 49:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:03:5C:1E:B6:1E:D8:EE:F1:53:D8:F3:2B:DA:13:BD:AD:74:2E:C5 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/mANcHrYe2O7xU9jzK9oTva10LsU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:2840::/32 Signature Algorithm: sha256WithRSAEncryption 13:77:90:a0:90:2d:eb:34:d1:52:ce:95:b5:ae:f6:66:61:96: c4:37:1a:c6:39:07:c9:31:14:56:7c:19:4c:90:3f:8e:09:07: e9:98:a4:91:c1:cf:14:d9:9c:24:be:99:f0:35:eb:c5:2f:a6: b5:3f:09:2c:fe:eb:86:df:66:80:49:49:e7:77:3c:71:e7:42: 74:bd:a2:cc:43:f8:f5:50:51:28:68:2d:57:f4:c8:e0:53:33: 4b:71:55:e5:28:a3:4c:13:4d:6d:d7:6e:6c:60:19:06:e3:ba: 36:15:84:6c:6e:58:7b:07:fd:d9:39:f1:12:0c:fa:fc:18:76: f0:a0:8d:2a:60:e2:09:b8:d6:bb:97:98:5e:af:bd:94:ff:67: 69:a5:c5:66:f0:c3:6d:5d:fe:5b:5f:bb:a9:ba:8d:28:b6:ea: 84:38:ad:7f:81:eb:17:dc:41:0f:47:9e:4d:ae:82:cb:46:4f: 9a:5a:f3:50:bf:86:30:c4:3a:1b:ba:f1:46:7b:77:41:06:bf: cc:c5:9e:95:e5:d9:9c:d3:22:30:68:d6:aa:13:08:26:1b:43: 48:cd:0a:0f:3a:ca:e5:23:a9:90:03:35:57:dc:4a:d0:7e:e2: f8:df:23:a8:bd:eb:c4:1e:8b:d0:c6:c6:23:fe:cf:61:67:d5: d7:13:13:c8 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICT5QwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDUyMzA5NTkyNVoXDTI2MDUyMzA5NTEwMFowMzEx MC8GA1UEAxMoOTgwMzVDMUVCNjFFRDhFRUYxNTNEOEYzMkJEQTEzQkRBRDc0MkVD NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKjzOgrRkukpsHFUTvns iQRMdABOdZJuYd4PhcWyps36MV6U0lOfuiKQHjkW/g5r5WQbBCT/Rnc7rt9UeE5Y V2clMTmncWeVpkBVE/qe26tV2qgWaA/r0mft3agU0dKBgtuNI1dI6yeOXFl9yJ1N hggfNP2aubOyfoLnph+drlu37NCon+Ui/rdxTRnA3DaxhLQLP9kmY8OT1swF8uSl yaowEg7Qa7Y+JovC0hFsQSckn756Hkl3IX9Pav6n6UcgQYOx7brDIeBqnbVMCJZ6 zLsmUYoBgJhUSV3bwcqOAG0/tW0GKDwhWXOEC1U7zLWmYm82XUM6IqYsOuRBeuLh Sb8CAwEAAaOCAowwggKIMB0GA1UdDgQWBBSYA1weth7Y7vFT2PMr2hO9rXQuxTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAzMTUvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMzE1L21B TmNIclllMk83eFU5anpLOW9UdmExMExzVS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAihAMA0GCSqGSIb3 DQEBCwUAA4IBAQATd5CgkC3rNNFSzpW1rvZmYZbENxrGOQfJMRRWfBlMkD+OCQfp mKSRwc8U2ZwkvpnwNevFL6a1Pwks/uuG32aASUnndzxx50J0vaLMQ/j1UFEoaC1X 9MjgUzNLcVXlKKNME01t125sYBkG47o2FYRsblh7B/3ZOfESDPr8GHbwoI0qYOIJ uNa7l5her72U/2dppcVm8MNtXf5bX7upuo0otuqEOK1/gesX3EEPR55NroLLRk+a WvNQv4YwxDobuvFGe3dBBr/MxZ6V5dmc0yIwaNaqEwgmG0NIzQoPOsrlI6mQAzVX 3ErQfuL43yOovevEHovQxsYj/s9hZ9XXExPI -----END CERTIFICATE-----Generated at Mon Jun 2 07:18:47 2025 by rpki-client