$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/TtDo6n2ynqrPuqPy7oCkrptfV84.cer File: TtDo6n2ynqrPuqPy7oCkrptfV84.cer (raw, json) Hash identifier: Zv7AxMdD4in1QmogT3mxg874dtDbN+Ju1iVhmYxnIjE= Subject key identifier: 4E:D0:E8:EA:7D:B2:9E:AA:CF:BA:A3:F2:EE:80:A4:AE:9B:5F:57:CE Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 32F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30293/TtDo6n2ynqrPuqPy7oCkrptfV84.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30293/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Mon 24 Jun 2024 10:50:33 +0000 Certificate not after: Tue 24 Jun 2025 10:46:45 +0000 Subordinate resources: IP: 2400:dcc0::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13043 (0x32f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Jun 24 10:50:33 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=4ED0E8EA7DB29EAACFBAA3F2EE80A4AE9B5F57CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b2:5d:91:e2:43:aa:9e:3c:f2:a3:4e:89:99: 08:ca:47:f2:84:74:d4:4c:6e:25:41:c8:57:32:1e: 79:e5:f2:ca:52:e2:40:59:99:fa:7d:cd:50:a5:d5: 07:b6:a3:85:e4:4f:58:5f:ba:07:56:45:d2:30:9f: 52:46:ab:5a:d6:a0:fa:ab:3a:9d:38:b2:89:2d:41: 20:50:20:77:31:36:69:63:76:9b:44:6f:4b:6e:06: 07:ac:4e:7b:4f:1e:0f:c9:40:be:45:d1:4b:cc:19: 28:79:37:c9:be:2a:e8:c4:2b:25:ab:3c:1c:8d:44: fd:05:2e:bb:09:4e:8e:42:89:eb:e9:85:8d:73:43: 50:07:d1:e8:69:29:e6:02:01:4c:cc:3d:f4:1b:68: 52:cd:43:93:b1:24:c3:04:50:55:6f:e8:c3:ef:2f: e2:27:0d:98:e2:16:b2:de:9f:82:30:15:b3:45:aa: 29:d9:de:99:5c:f8:18:14:b7:86:d7:29:ca:b2:f2: 5d:2a:5c:0a:89:02:df:c6:73:0d:c7:ff:78:9c:1e: 8b:61:b0:83:98:fd:3e:f9:be:4f:f9:80:5a:5d:24: e2:f7:39:b1:8c:d6:af:97:50:87:00:2a:b9:d6:77: 8b:f4:20:4c:4d:6b:e4:3e:f2:10:15:6f:80:0c:df: 75:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D0:E8:EA:7D:B2:9E:AA:CF:BA:A3:F2:EE:80:A4:AE:9B:5F:57:CE X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30293/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30293/TtDo6n2ynqrPuqPy7oCkrptfV84.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:dcc0::/32 Signature Algorithm: sha256WithRSAEncryption 0c:7d:8c:4c:b0:d7:d2:ca:3d:b9:30:4e:2c:c0:50:b9:02:8b: b4:51:80:3f:95:a2:f1:7f:ca:22:9b:38:34:a2:4b:2e:2a:8a: f7:78:0e:0f:81:e3:d6:eb:09:f5:a9:81:73:ab:00:7a:98:f1: bb:3f:6b:a1:2d:18:6a:3e:4c:6f:69:82:e9:c1:6a:bf:e9:cd: c0:53:42:59:49:a2:42:9d:74:02:14:10:00:01:11:0e:db:d6: 82:23:ca:e1:46:8f:63:91:8e:40:f8:76:65:70:79:a4:a2:4c: 5f:cf:b0:f4:1e:8e:c7:d1:24:b9:31:73:eb:69:26:10:d0:6d: 4c:bd:57:c8:3d:42:97:73:c5:02:76:5a:b1:61:26:32:82:e0: 9b:a4:b4:87:27:d2:8a:15:30:c4:3d:95:f7:11:20:d1:c8:03: 7e:c6:b2:8b:ee:fb:21:1c:da:ea:d6:a5:45:1b:5d:3a:f8:ba: a1:f5:63:73:8e:67:37:fb:d2:b2:5b:1a:54:a7:b5:3b:74:60: 9d:79:b1:f1:aa:c5:23:cb:7b:e3:09:30:10:8f:aa:2d:98:45: ea:4a:99:29:0d:ab:7c:be:48:8c:6d:f5:51:f4:8e:a0:62:44: d3:50:c6:aa:bf:01:95:1d:ef:2e:f6:5e:5d:0b:49:85:5c:6b: d3:5d:d7:e4 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICMvMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI0MDYyNDEwNTAzM1oXDTI1MDYyNDEwNDY0NVowMzEx MC8GA1UEAxMoNEVEMEU4RUE3REIyOUVBQUNGQkFBM0YyRUU4MEE0QUU5QjVGNTdD RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANayXZHiQ6qePPKjTomZ CMpH8oR01ExuJUHIVzIeeeXyylLiQFmZ+n3NUKXVB7ajheRPWF+6B1ZF0jCfUkar Wtag+qs6nTiyiS1BIFAgdzE2aWN2m0RvS24GB6xOe08eD8lAvkXRS8wZKHk3yb4q 6MQrJas8HI1E/QUuuwlOjkKJ6+mFjXNDUAfR6Gkp5gIBTMw99BtoUs1Dk7EkwwRQ VW/ow+8v4icNmOIWst6fgjAVs0WqKdnemVz4GBS3htcpyrLyXSpcCokC38ZzDcf/ eJwei2Gwg5j9Pvm+T/mAWl0k4vc5sYzWr5dQhwAqudZ3i/QgTE1r5D7yEBVvgAzf dasCAwEAAaOCAowwggKIMB0GA1UdDgQWBBRO0OjqfbKeqs+6o/LugKSum19XzjAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAyOTMvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMjkzL1R0 RG82bjJ5bnFyUHVxUHk3b0NrcnB0ZlY4NC5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkANzAMA0GCSqGSIb3 DQEBCwUAA4IBAQAMfYxMsNfSyj25ME4swFC5Aou0UYA/laLxf8oimzg0oksuKor3 eA4PgePW6wn1qYFzqwB6mPG7P2uhLRhqPkxvaYLpwWq/6c3AU0JZSaJCnXQCFBAA AREO29aCI8rhRo9jkY5A+HZlcHmkokxfz7D0Ho7H0SS5MXPraSYQ0G1MvVfIPUKX c8UCdlqxYSYyguCbpLSHJ9KKFTDEPZX3ESDRyAN+xrKL7vshHNrq1qVFG106+Lqh 9WNzjmc3+9KyWxpUp7U7dGCdebHxqsUjy3vjCTAQj6otmEXqSpkpDat8vkiMbfVR 9I6gYkTTUMaqvwGVHe8u9l5dC0mFXGvTXdfk -----END CERTIFICATE-----Generated at Tue Jun 25 02:54:32 2024 by rpki-client on console.sobornost.net